Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3133382e39392e3137372e302f32342d3234203d3e203634313136.roa
File:                     3133382e39392e3137372e302f32342d3234203d3e203634313136.roa (raw, json)
Hash identifier:          mV5xqXPvW7t5rQKPSIhV9OsrEu3TO5UCF+h45K9/kuk=
Subject key identifier:   56:09:93:E6:C2:BB:49:44:DC:C8:4F:28:3C:8F:F3:05:95:97:32:2E
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       05EDC9F0896D84E5CB1B4737673911881DE22658
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3133382e39392e3137372e302f32342d3234203d3e203634313136.roa
Signing time:             Tue 05 Mar 2024 17:53:05 +0000
ROA not before:           Tue 05 Mar 2024 17:48:05 +0000
ROA not after:            Tue 04 Mar 2025 17:53:05 +0000
asID:                     64116
IP address blocks:        138.99.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ed:c9:f0:89:6d:84:e5:cb:1b:47:37:67:39:11:88:1d:e2:26:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Mar  5 17:48:05 2024 GMT
            Not After : Mar  4 17:53:05 2025 GMT
        Subject: CN=560993E6C2BB4944DCC84F283C8FF3059597322E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:fe:c3:92:a8:a2:c1:87:95:cf:5c:48:2a:
                    b9:3a:5c:32:f6:96:5d:a7:af:60:23:bc:1a:fb:79:
                    1d:bb:a0:a8:33:73:30:c7:53:ad:d1:06:fe:6b:9d:
                    7a:77:09:7f:5d:c8:37:22:12:70:30:64:a3:8d:1e:
                    c9:77:fc:47:2c:16:ae:ed:84:86:f9:01:1b:4c:27:
                    ae:a4:90:ae:89:b3:f0:f1:90:bf:f2:27:cf:44:42:
                    44:0f:03:c4:b3:ef:ae:c1:b8:b9:e9:d3:cf:21:ed:
                    b1:7a:6a:4c:05:c1:bb:ab:79:02:83:cc:91:56:c6:
                    21:1e:9b:db:e0:c0:3d:7f:a5:03:42:33:9a:ee:10:
                    ba:74:82:56:3d:f1:64:07:90:03:83:43:e4:7c:c1:
                    de:e0:4f:45:5d:55:ba:53:58:83:f4:5d:f5:e6:c3:
                    56:23:5a:b4:84:d8:fe:96:40:ee:ae:db:1c:67:84:
                    8b:9e:b4:41:4a:be:4c:eb:cf:9d:04:78:67:aa:b2:
                    fe:9a:49:14:08:9f:d1:32:32:45:05:14:23:16:90:
                    a0:2c:1a:16:10:49:97:96:f6:ed:b8:b2:e4:28:2e:
                    8c:b9:b8:56:a6:18:fd:20:ee:04:9b:df:55:65:ea:
                    ab:58:37:38:8e:7a:b5:55:df:95:35:48:2d:c7:63:
                    41:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:09:93:E6:C2:BB:49:44:DC:C8:4F:28:3C:8F:F3:05:95:97:32:2E
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3133382e39392e3137372e302f32342d3234203d3e203634313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:dc:fd:7b:49:99:a9:5b:0c:62:11:02:15:7c:6d:4a:e0:65:
         80:0c:71:63:a3:f3:59:b7:2f:20:a5:b6:9b:c6:5c:1b:15:ea:
         da:25:85:41:42:20:a2:46:d8:d6:19:9a:70:a3:77:6b:db:4e:
         c0:e5:c9:2c:67:94:ca:cf:81:e9:d3:c6:fd:c6:50:fe:2e:9f:
         f8:9a:f2:b2:73:ad:b6:4e:dc:2a:bf:04:7b:ae:8f:98:a5:71:
         af:38:5e:ce:99:95:cd:6b:c4:26:a1:cb:23:71:1e:6e:9e:2e:
         76:8b:45:f1:6c:f4:8a:c0:6c:da:be:12:1d:a9:58:8e:10:f4:
         fc:14:79:67:6a:29:98:4f:6f:62:89:ab:0c:bd:a9:e6:6f:7f:
         f3:de:b1:9d:7c:72:fe:d8:b1:ac:f6:f3:57:e1:09:28:5b:01:
         cb:6e:43:85:66:fc:74:0f:73:44:27:85:d5:84:23:e5:71:3b:
         ef:9a:a3:6f:4d:d5:7b:27:70:7e:01:4a:dc:22:7f:e7:70:44:
         e8:22:6c:d6:fa:ff:cf:26:13:03:5a:93:2d:85:05:29:f2:55:
         18:50:43:91:63:41:0a:1d:f2:de:ab:dd:e9:48:eb:e7:4f:aa:
         29:ab:18:12:1e:3f:9a:3b:ce:6f:2a:50:21:f4:b3:03:a3:21:
         54:f3:54:36
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUBe3J8IlthOXLG0c3ZzkRiB3iJlgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJGRkY4RTJEMzlBQjAwNUJFMkFCODFEQTA3RUMyQjRG
NjE3NUVEQzAeFw0yNDAzMDUxNzQ4MDVaFw0yNTAzMDQxNzUzMDVaMDMxMTAvBgNV
BAMTKDU2MDk5M0U2QzJCQjQ5NDREQ0M4NEYyODNDOEZGMzA1OTU5NzMyMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fv7DkqiiwYeVz1xIKrk6XDL2
ll2nr2AjvBr7eR27oKgzczDHU63RBv5rnXp3CX9dyDciEnAwZKONHsl3/EcsFq7t
hIb5ARtMJ66kkK6Js/DxkL/yJ89EQkQPA8Sz767BuLnp088h7bF6akwFwbureQKD
zJFWxiEem9vgwD1/pQNCM5ruELp0glY98WQHkAODQ+R8wd7gT0VdVbpTWIP0XfXm
w1YjWrSE2P6WQO6u2xxnhIuetEFKvkzrz50EeGeqsv6aSRQIn9EyMkUFFCMWkKAs
GhYQSZeW9u24suQoLoy5uFamGP0g7gSb31Vl6qtYNziOerVV35U1SC3HY0EVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUVgmT5sK7SUTcyE8oPI/zBZWXMi4wHwYDVR0j
BBgwFoAUgv/44tOasAW+KrgdoH7CtPYXXtwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkVBRUUzRUE1RUMxMzM4MEFFOTE5MzBGNTk0NENGMDdC
RDM2MjNGOTgzRUUzMTAxOTZDNTY4OTkwQUVGODZFLzAvODJGRkY4RTJEMzlBQjAw
NUJFMkFCODFEQTA3RUMyQjRGNjE3NUVEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MkZGRjhFMkQzOUFCMDA1QkUy
QUI4MURBMDdFQzJCNEY2MTc1RURDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJFQUVFM0VBNUVDMTMzODBBRTkxOTMwRjU5NDRDRjA3QkQzNjIzRjk4
M0VFMzEwMTk2QzU2ODk5MEFFRjg2RS8wLzMxMzMzODJlMzkzOTJlMzEzNzM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNDMxMzEzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIpjsTAN
BgkqhkiG9w0BAQsFAAOCAQEAsNz9e0mZqVsMYhECFXxtSuBlgAxxY6PzWbcvIKW2
m8ZcGxXq2iWFQUIgokbY1hmacKN3a9tOwOXJLGeUys+B6dPG/cZQ/i6f+JrysnOt
tk7cKr8Ee66PmKVxrzhezpmVzWvEJqHLI3Eebp4udotF8Wz0isBs2r4SHalYjhD0
/BR5Z2opmE9vYomrDL2p5m9/896xnXxy/tixrPbzV+EJKFsBy25DhWb8dA9zRCeF
1YQj5XE775qjb03VeydwfgFK3CJ/53BE6CJs1vr/zyYTA1qTLYUFKfJVGFBDkWNB
Ch3y3qvd6Ujr50+qKasYEh4/mjvObypQIfSzA6MhVPNUNg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org