Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303339.roa
File:                     3133382e39392e3134342e302f32342d3234203d3e20343030303339.roa (raw, json)
Hash identifier:          Npw5aQwDItOHixWVfayLLisgR2q++i7uI7doEWM6pv0=
Subject key identifier:   EF:14:F6:D4:A0:9F:B8:2D:3A:99:D0:4A:77:F3:4F:37:8F:A9:B6:27
Certificate issuer:       /CN=EBC77018588D7C3C87C3E13D71293177455EE57D
Certificate serial:       7F094986E70B4B31D1DBD6901F53F316C9CAF033
Authority key identifier: EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303339.roa
Signing time:             Tue 04 Feb 2025 18:44:19 +0000
ROA not before:           Tue 04 Feb 2025 18:39:19 +0000
ROA not after:            Tue 03 Feb 2026 18:44:19 +0000
asID:                     400039
IP address blocks:        138.99.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:09:49:86:e7:0b:4b:31:d1:db:d6:90:1f:53:f3:16:c9:ca:f0:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC77018588D7C3C87C3E13D71293177455EE57D
        Validity
            Not Before: Feb  4 18:39:19 2025 GMT
            Not After : Feb  3 18:44:19 2026 GMT
        Subject: CN=EF14F6D4A09FB82D3A99D04A77F34F378FA9B627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:05:1b:f6:b6:9b:67:3e:94:8e:9c:20:aa:9e:
                    08:69:33:23:59:64:c0:b8:0d:c4:1e:a3:59:31:6f:
                    74:f3:c0:46:2b:e0:d6:d6:bb:11:c5:b0:58:4a:9b:
                    5d:95:aa:b8:44:9c:3c:a8:a2:12:70:77:98:3e:99:
                    1d:f7:fe:7c:2e:35:49:33:24:a4:e8:11:d8:62:fc:
                    83:54:06:e1:a5:ec:df:09:9a:ca:c6:1e:ed:b1:72:
                    9f:13:f7:97:87:88:99:e1:6e:82:a4:a6:14:9c:49:
                    6a:7b:2b:f1:97:2d:f0:bd:ba:ac:c1:21:ef:63:b8:
                    1b:8f:ec:1a:b6:7e:a3:40:82:1e:00:8c:61:cc:e6:
                    ea:7b:b0:4d:30:cf:ad:5e:7e:98:e2:6f:da:da:d6:
                    6b:12:a0:c8:0f:5b:88:06:14:4e:e3:25:be:fb:8b:
                    0b:73:ae:e7:d8:7a:53:a6:b6:19:29:8d:d3:ff:d9:
                    f3:66:3f:13:a2:13:d6:a5:99:c1:53:02:0a:ff:ba:
                    8d:8b:1b:09:8f:a9:ff:71:b7:db:0a:a5:11:5c:f4:
                    31:5d:d3:34:e4:6b:ce:e3:ab:89:fb:dc:a4:0d:63:
                    1a:b3:d1:85:4f:52:5e:e2:03:bb:e0:61:22:33:5d:
                    63:b8:76:e0:42:6e:fe:51:57:b3:7f:00:e8:a1:25:
                    69:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:14:F6:D4:A0:9F:B8:2D:3A:99:D0:4A:77:F3:4F:37:8F:A9:B6:27
            X509v3 Authority Key Identifier:
                keyid:EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:c3:28:30:96:d8:77:aa:82:b1:40:ef:c5:a0:ae:83:03:14:
         e8:0d:e4:90:99:f7:f2:fd:48:82:31:58:39:bf:4a:93:a1:48:
         66:38:95:63:16:cd:a9:05:6b:43:d4:c0:b2:4d:f3:20:0e:81:
         24:3f:9b:3c:db:c2:73:dc:af:14:3b:41:87:37:ab:5e:e2:d4:
         fc:dc:9b:7d:08:94:20:64:06:f6:d4:05:02:cb:a0:ac:db:7a:
         08:22:cf:cd:c7:f6:0a:1b:b7:e7:bf:bf:a2:8c:72:d7:76:8f:
         21:c4:40:e8:94:74:18:c7:f9:d4:9e:52:60:c3:81:43:4b:cd:
         9f:65:4e:42:ba:57:e0:45:e9:05:06:47:78:39:61:4c:ca:6a:
         4b:92:31:91:5d:a9:10:bc:74:9c:58:41:6c:cd:c2:7d:be:6f:
         ff:28:98:8d:0f:74:cb:ab:26:1f:27:a3:06:ec:a9:92:e6:29:
         84:84:e7:b8:5b:5c:35:5a:27:e0:06:3f:2d:39:6f:37:b0:59:
         09:b1:cd:a8:ff:16:69:e1:5f:a5:85:b3:31:d6:e1:74:82:5c:
         48:09:dd:03:aa:b7:a0:cf:dd:ec:98:82:46:d7:27:f1:a0:2d:
         df:1b:6f:bf:ee:27:bc:06:59:06:cd:81:34:99:3d:e8:7d:e7:
         16:2a:31:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:25:07 2025 by rpki-client