Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303339.roa
File:                     3133382e39392e3134342e302f32342d3234203d3e20343030303339.roa (raw, json)
Hash identifier:          KCXNr57XmbMuV9iahwbsWGFmZPP4j5+dC6SV77BRPdk=
Subject key identifier:   EC:03:B3:73:26:5C:61:ED:0D:58:0D:57:21:27:B6:79:E6:AE:01:87
Certificate issuer:       /CN=EBC77018588D7C3C87C3E13D71293177455EE57D
Certificate serial:       1745E7A02E642701C66E001338E2206C5A699AB7
Authority key identifier: EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303339.roa
Signing time:             Tue 05 Mar 2024 17:40:40 +0000
ROA not before:           Tue 05 Mar 2024 17:35:40 +0000
ROA not after:            Tue 04 Mar 2025 17:40:40 +0000
asID:                     400039
IP address blocks:        138.99.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:45:e7:a0:2e:64:27:01:c6:6e:00:13:38:e2:20:6c:5a:69:9a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC77018588D7C3C87C3E13D71293177455EE57D
        Validity
            Not Before: Mar  5 17:35:40 2024 GMT
            Not After : Mar  4 17:40:40 2025 GMT
        Subject: CN=EC03B373265C61ED0D580D572127B679E6AE0187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:c7:30:97:b2:e0:00:c4:6b:df:ee:db:9a:
                    5f:db:bc:b8:56:fe:ca:f2:e0:30:c5:33:e4:4f:bc:
                    49:7c:cf:08:5a:92:ad:d9:6a:ca:aa:3d:8a:2c:13:
                    42:04:66:36:9d:7c:b5:1b:13:ba:e1:6a:7b:63:7f:
                    5b:ff:a5:c7:23:03:36:20:83:23:c3:bc:53:34:c0:
                    94:e0:f9:ef:bc:01:e0:cd:c5:b3:fb:f7:83:a5:1a:
                    5f:59:5f:b0:ba:9d:50:59:24:7c:a8:b2:99:7a:5c:
                    dc:12:f6:d2:cc:7d:fa:ba:cf:18:8e:ba:e4:77:2c:
                    ca:02:7a:f4:db:96:32:d9:6d:6e:4b:e3:85:ce:2f:
                    36:20:27:d8:67:b1:7b:c7:e3:e2:0f:e7:de:b8:42:
                    38:b8:83:25:1a:6c:bb:9e:b1:ed:8c:86:83:c1:a6:
                    8b:25:6d:8f:95:1c:23:8b:f8:21:74:f9:0d:7f:ea:
                    b4:7d:c7:fd:09:52:61:ea:c4:c2:3b:01:f2:5f:54:
                    79:68:7e:00:54:ac:7b:5e:10:96:51:47:85:aa:7c:
                    d9:e6:c7:5f:2a:20:f2:89:22:e7:cb:d6:ef:72:c9:
                    fa:dd:e0:fd:76:98:78:db:26:b9:29:f0:0c:e3:30:
                    90:7c:75:a5:0a:4c:b1:b0:02:4c:33:83:92:20:76:
                    39:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:03:B3:73:26:5C:61:ED:0D:58:0D:57:21:27:B6:79:E6:AE:01:87
            X509v3 Authority Key Identifier:
                keyid:EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e20343030303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:94:e9:8f:30:3a:ad:67:4e:50:5d:44:d8:a0:14:0b:b3:35:
         ef:dd:b5:f3:78:7e:9b:ac:5d:e8:66:6b:a0:93:6e:4e:e5:c4:
         5c:00:31:6b:53:48:2a:9f:ba:e2:f2:14:00:1a:34:2f:7e:8c:
         19:6f:42:74:92:3d:1d:3a:0b:4f:84:55:e7:68:b7:80:41:a6:
         f3:de:6c:19:95:79:db:1a:bd:9f:29:6a:f4:9a:aa:f6:07:fa:
         19:73:33:f8:1e:8d:24:f6:34:f3:49:72:25:43:ef:97:d3:5f:
         fc:73:09:17:44:40:7f:f8:65:1a:d7:d8:11:9b:fe:de:53:69:
         09:0d:a3:93:94:40:52:3b:2f:f5:74:ce:3e:e3:c1:75:e3:9f:
         2b:fd:44:c6:22:aa:c7:db:e1:cb:f7:16:d7:93:07:21:41:ae:
         3f:b2:ad:01:7e:e3:b8:7a:97:1c:24:69:ef:2a:d4:44:da:61:
         ce:be:79:4c:89:0f:d7:36:6f:bd:0e:02:6d:54:4b:5c:6e:54:
         75:18:e0:89:f8:d1:7f:d2:2c:3e:d8:d4:0d:df:05:2e:dc:49:
         55:24:c4:02:b5:0a:41:69:1d:1e:53:3a:f0:1a:b8:2c:37:3c:
         fa:98:aa:a3:59:98:f8:bf:23:8a:6a:56:5c:f8:9e:ac:66:3d:
         27:78:66:01
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUF0XnoC5kJwHGbgATOOIgbFppmrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJDNzcwMTg1ODhEN0MzQzg3QzNFMTNENzEyOTMxNzc0
NTVFRTU3RDAeFw0yNDAzMDUxNzM1NDBaFw0yNTAzMDQxNzQwNDBaMDMxMTAvBgNV
BAMTKEVDMDNCMzczMjY1QzYxRUQwRDU4MEQ1NzIxMjdCNjc5RTZBRTAxODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL3Mcwl7LgAMRr3+7bml/bvLhW
/sry4DDFM+RPvEl8zwhakq3ZasqqPYosE0IEZjadfLUbE7rhantjf1v/pccjAzYg
gyPDvFM0wJTg+e+8AeDNxbP794OlGl9ZX7C6nVBZJHyospl6XNwS9tLMffq6zxiO
uuR3LMoCevTbljLZbW5L44XOLzYgJ9hnsXvH4+IP5964Qji4gyUabLuese2MhoPB
poslbY+VHCOL+CF0+Q1/6rR9x/0JUmHqxMI7AfJfVHlofgBUrHteEJZRR4WqfNnm
x18qIPKJIufL1u9yyfrd4P12mHjbJrkp8AzjMJB8daUKTLGwAkwzg5IgdjllAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU7AOzcyZcYe0NWA1XISe2eeauAYcwHwYDVR0j
BBgwFoAU68dwGFiNfDyHw+E9cSkxd0Ve5X0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83M0ExQUI0NzFDMDlDNzM1NjhCRUY5QTMwNjE5MjZEQjkz
QUQ1RUMyRTBDNjk0ODM0QzA0NzRDRkM1NjE3NDZBLzAvRUJDNzcwMTg1ODhEN0Mz
Qzg3QzNFMTNENzEyOTMxNzc0NTVFRTU3RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQkM3NzAxODU4OEQ3QzNDODdD
M0UxM0Q3MTI5MzE3NzQ1NUVFNTdELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzNBMUFCNDcxQzA5QzczNTY4QkVGOUEzMDYxOTI2REI5M0FENUVDMkUw
QzY5NDgzNEMwNDc0Q0ZDNTYxNzQ2QS8wLzMxMzMzODJlMzkzOTJlMzEzNDM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMwMzAzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAimOQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCXlOmPMDqtZ05QXUTYoBQLszXv3bXzeH6brF3o
Zmugk25O5cRcADFrU0gqn7ri8hQAGjQvfowZb0J0kj0dOgtPhFXnaLeAQabz3mwZ
lXnbGr2fKWr0mqr2B/oZczP4Ho0k9jTzSXIlQ++X01/8cwkXREB/+GUa19gRm/7e
U2kJDaOTlEBSOy/1dM4+48F1458r/UTGIqrH2+HL9xbXkwchQa4/sq0BfuO4epcc
JGnvKtRE2mHOvnlMiQ/XNm+9DgJtVEtcblR1GOCJ+NF/0iw+2NQN3wUu3ElVJMQC
tQpBaR0eUzrwGrgsNzz6mKqjWZj4vyOKalZc+J6sZj0neGYB
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:07 2024 by rpki-client on console-fra.rpki-client.org