Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134372e302f32342d3234203d3e203631333137.roa
File:                     3133382e39392e3134372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          uObUUwq4MtzkrWozMiWqWdJvaRDMY4fO/LQYhyqLjoM=
Subject key identifier:   80:BD:EE:55:D0:01:8E:52:19:A5:55:AF:88:ED:EC:D0:32:7B:2A:11
Certificate issuer:       /CN=EBC77018588D7C3C87C3E13D71293177455EE57D
Certificate serial:       22727AE0D5FDB83EBA01554CBD983E685ADE0324
Authority key identifier: EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134372e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 05 Mar 2024 17:40:40 +0000
ROA not before:           Tue 05 Mar 2024 17:35:40 +0000
ROA not after:            Tue 04 Mar 2025 17:40:40 +0000
asID:                     61317
IP address blocks:        138.99.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:72:7a:e0:d5:fd:b8:3e:ba:01:55:4c:bd:98:3e:68:5a:de:03:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC77018588D7C3C87C3E13D71293177455EE57D
        Validity
            Not Before: Mar  5 17:35:40 2024 GMT
            Not After : Mar  4 17:40:40 2025 GMT
        Subject: CN=80BDEE55D0018E5219A555AF88EDECD0327B2A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:7c:a8:de:e8:0d:85:48:28:34:d1:2a:5a:
                    e5:d6:0e:68:c7:85:59:c9:75:4c:13:81:bc:af:7d:
                    7f:53:04:92:1a:91:e1:e5:28:bb:2e:f4:74:24:f7:
                    3c:04:12:63:18:35:94:81:c9:c4:bb:fb:09:c1:c1:
                    c7:e5:62:b8:97:1d:fb:21:55:24:d1:68:2d:7b:fe:
                    ef:eb:94:c8:b3:aa:e4:fa:ac:de:19:8c:ee:6e:99:
                    61:49:43:ff:62:65:fe:47:b4:13:96:46:e7:d7:b2:
                    2a:d9:20:14:c0:31:ef:60:eb:5e:6e:86:53:f2:06:
                    d7:92:50:24:a4:b1:c8:5d:ff:b3:f8:dd:23:4a:2a:
                    03:14:e5:ca:03:22:72:e9:a0:eb:0a:49:da:b2:22:
                    dd:8a:c3:cb:52:a2:db:63:e7:2d:ee:b4:9e:bc:5f:
                    77:e8:5c:9b:df:8b:d2:48:70:46:65:c2:e8:13:3f:
                    4f:a3:5c:c1:d1:6e:6d:25:4a:bb:bd:1c:3f:70:20:
                    62:31:d7:e4:e8:05:c9:c4:e3:21:b8:6f:e4:63:59:
                    30:09:a6:44:57:b1:ce:99:a7:2f:22:46:38:93:c4:
                    52:95:da:b4:30:cf:22:ce:14:60:fc:0e:d5:39:e5:
                    5d:a8:ee:e4:6b:1e:bd:0a:59:e8:2c:7c:87:64:56:
                    36:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BD:EE:55:D0:01:8E:52:19:A5:55:AF:88:ED:EC:D0:32:7B:2A:11
            X509v3 Authority Key Identifier:
                keyid:EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:45:09:8d:50:b9:51:ed:e4:7c:57:6c:da:b8:3d:1a:5f:6d:
         67:af:e3:06:4a:23:7b:3f:36:e3:2d:36:6e:f0:62:99:9c:0f:
         e3:77:5d:b5:ef:ae:19:ad:d7:d8:cb:69:d2:0d:93:de:27:4b:
         36:b2:50:3d:89:27:31:fb:1d:aa:34:fd:94:0c:08:62:a4:dc:
         b2:cc:c8:ae:47:65:49:86:c2:3c:a5:3a:7c:b7:6d:3b:36:b8:
         ba:9e:c4:6d:b2:e8:c5:0d:0e:e0:58:7d:e6:31:fb:7c:7c:57:
         6a:f3:bd:3b:12:fb:c0:c1:06:0e:6a:5f:60:9c:ca:50:86:6b:
         4c:7b:ef:a4:f0:6d:25:f8:df:97:89:78:b6:25:0e:8e:43:1c:
         8b:2b:17:b2:58:d8:83:01:d8:ce:a5:65:9e:89:4f:c7:c4:83:
         ee:cf:69:aa:40:6d:60:29:e1:8b:b3:58:5a:0d:c2:91:43:1b:
         b3:2c:c3:2c:fa:31:b0:36:85:6b:ab:7b:75:ad:2c:7f:97:e1:
         c2:04:f1:b1:f9:21:45:34:fc:f2:a4:17:ee:48:42:a1:c2:df:
         ce:76:e8:90:4a:5d:bf:01:b4:e5:79:80:14:73:e0:ad:80:f1:
         06:bf:fc:be:34:c2:3b:5a:f4:3e:fb:e8:58:8f:a4:18:13:2e:
         3b:66:17:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:07 2024 by rpki-client on console-fra.rpki-client.org