Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/3133382e39392e3132302e302f32322d3232203d3e20323031333431.roa
File:                     3133382e39392e3132302e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier:          ALLoU4QpICWwlt0RZ2FNGSSY3S4sILYNGLUdbvoAqHI=
Subject key identifier:   59:30:99:8B:A8:68:79:71:6E:81:68:71:5D:5E:81:A4:58:B5:0B:1F
Certificate issuer:       /CN=6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF
Certificate serial:       13938D50634AB627732E90CA8352A2557FC4ADB1
Authority key identifier: 66:90:D3:CA:7A:AB:44:AA:19:56:8C:A2:CF:F8:AC:6E:E7:0E:DC:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/3133382e39392e3132302e302f32322d3232203d3e20323031333431.roa
Signing time:             Tue 05 Mar 2024 18:19:08 +0000
ROA not before:           Tue 05 Mar 2024 18:14:08 +0000
ROA not after:            Tue 04 Mar 2025 18:19:08 +0000
asID:                     201341
IP address blocks:        138.99.120.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:93:8d:50:63:4a:b6:27:73:2e:90:ca:83:52:a2:55:7f:c4:ad:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF
        Validity
            Not Before: Mar  5 18:14:08 2024 GMT
            Not After : Mar  4 18:19:08 2025 GMT
        Subject: CN=5930998BA86879716E8168715D5E81A458B50B1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:8e:0a:ae:7f:9c:69:39:f5:56:f9:15:7b:
                    14:9b:77:00:2a:99:49:cc:39:ef:ae:86:5a:db:02:
                    ba:d4:6e:80:40:96:6f:2c:5a:7e:24:15:95:de:f4:
                    e0:c0:f6:0c:8e:c8:c6:05:ac:64:9d:98:10:a6:9d:
                    14:f8:be:8d:71:66:20:dd:e2:e7:8f:3c:36:ba:4d:
                    87:6b:38:ef:96:13:74:f1:1d:7a:e3:7d:03:f7:c7:
                    01:25:9f:87:d9:d7:9d:cd:40:b4:b7:fc:76:20:91:
                    cb:e2:6c:94:3a:27:7d:c7:1a:de:b2:02:3a:a7:f1:
                    45:fb:09:de:31:26:97:02:0c:5d:10:74:c9:11:d2:
                    e1:c5:6c:e8:b0:6a:cd:b9:33:71:1c:f4:5b:01:3f:
                    92:66:f0:a6:46:34:0e:fd:04:f2:9f:35:fe:d8:bd:
                    3c:88:be:5f:b3:56:e0:08:f1:cd:73:f4:9c:59:b6:
                    6c:a7:2d:79:8a:2a:95:b9:ad:f4:3a:e9:f2:ed:39:
                    37:2a:33:9f:6d:c9:15:1b:65:b7:67:9a:dd:d4:e4:
                    26:38:bf:8a:bc:17:f7:09:c5:1f:d4:c8:27:00:b7:
                    d4:18:73:2c:61:1b:90:89:dd:24:c4:cd:4d:25:38:
                    d7:3c:a4:ae:70:5a:04:39:21:2f:9b:2f:18:cc:64:
                    5e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:30:99:8B:A8:68:79:71:6E:81:68:71:5D:5E:81:A4:58:B5:0B:1F
            X509v3 Authority Key Identifier:
                keyid:66:90:D3:CA:7A:AB:44:AA:19:56:8C:A2:CF:F8:AC:6E:E7:0E:DC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/3133382e39392e3132302e302f32322d3232203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:87:42:34:b2:52:4b:f7:cd:20:00:67:0d:0c:53:6a:c1:d6:
         5c:f2:b8:0f:fb:81:c9:25:b2:cc:ae:a8:c3:48:33:2b:3a:72:
         51:98:93:53:04:fc:9a:1d:ff:d5:7f:36:0e:d7:45:25:dc:f0:
         f9:9c:c9:8e:0e:ae:92:80:85:3d:39:c9:43:70:aa:ac:d0:08:
         7d:d4:25:17:a7:58:d1:61:89:39:18:d2:e9:e7:36:ea:2a:fb:
         34:99:96:9a:e6:bc:10:60:84:78:72:41:49:23:00:1f:be:32:
         1a:13:cb:b6:13:0d:ae:aa:69:77:c1:71:e0:b3:1c:f7:d7:27:
         d3:b1:3a:8a:20:d1:83:68:c7:72:bc:8a:f9:95:06:97:cc:99:
         cf:95:ef:4b:d8:a0:62:12:7a:0f:3d:3b:d1:eb:f6:85:04:02:
         65:52:c5:39:d6:5c:7b:df:9b:e5:e9:27:d9:89:1a:13:42:44:
         05:1b:32:50:47:90:5b:ff:1b:5b:c7:57:09:91:00:16:ce:69:
         25:f6:f2:ac:67:d6:11:a9:e5:64:e0:f6:e0:ea:ca:a6:d5:a9:
         9c:05:b5:16:ef:e5:cb:fb:97:0f:a2:d0:6b:ae:9a:a6:16:ad:
         2c:9f:a3:1e:6c:a2:a8:e6:72:e5:a5:c2:56:03:45:37:a0:c7:
         e4:ac:0b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:44 2024 by rpki-client on console-fra.rpki-client.org