Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3133382e39392e3233362e302f32322d3234203d3e203532343731.roa
File:                     3133382e39392e3233362e302f32322d3234203d3e203532343731.roa (raw, json)
Hash identifier:          t12p//WX+qkk4EMkVoWOpaCO1tP1kIRkVFwuPU4SIQg=
Subject key identifier:   09:C7:A1:EB:31:DA:FB:09:BA:EC:6D:22:96:C7:94:95:64:CE:8D:56
Certificate issuer:       /CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
Certificate serial:       459AEB5DB65D4433EF83EABB58B4C8448F2CBDD2
Authority key identifier: 5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3133382e39392e3233362e302f32322d3234203d3e203532343731.roa
Signing time:             Tue 04 Feb 2025 18:17:08 +0000
ROA not before:           Tue 04 Feb 2025 18:12:08 +0000
ROA not after:            Tue 03 Feb 2026 18:17:08 +0000
asID:                     52471
IP address blocks:        138.99.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9a:eb:5d:b6:5d:44:33:ef:83:ea:bb:58:b4:c8:44:8f:2c:bd:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
        Validity
            Not Before: Feb  4 18:12:08 2025 GMT
            Not After : Feb  3 18:17:08 2026 GMT
        Subject: CN=09C7A1EB31DAFB09BAEC6D2296C7949564CE8D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bc:46:7b:e2:5e:24:28:30:52:f9:01:b6:fa:
                    b8:66:dd:cc:a7:ba:6b:06:87:af:45:70:c4:30:e1:
                    46:bd:05:be:ff:7d:8e:ab:50:ca:74:ee:c1:d0:91:
                    68:d4:f2:88:3e:94:23:b1:68:95:d8:1d:50:ec:de:
                    dc:1f:8c:72:22:6f:61:79:9f:e1:d8:07:13:07:6a:
                    0b:47:07:f0:1d:46:4c:04:2f:b4:a5:b2:aa:5b:b2:
                    58:d2:5d:43:60:55:37:78:f7:70:a8:5a:fb:45:39:
                    95:5c:e2:93:b2:09:0b:49:e2:ac:d2:16:03:cf:99:
                    80:03:be:6d:57:22:e6:fd:99:2a:73:18:01:8b:b6:
                    e6:e4:ee:78:42:34:ec:d2:60:4d:e1:59:02:12:32:
                    a7:5e:3a:e3:60:63:22:e7:86:95:62:af:86:a3:fd:
                    c2:9c:37:47:a6:5a:fb:ec:a5:ee:78:a5:ae:1c:d2:
                    ad:8b:f8:e1:f2:c6:e2:43:f5:7f:90:6b:50:86:ab:
                    a0:a9:07:6a:d2:6f:0a:71:3b:da:69:2d:3b:90:03:
                    d1:74:8a:e5:78:1a:05:44:13:b5:31:e2:39:28:ac:
                    40:7a:3c:bd:7d:b2:e7:fb:a0:da:94:11:7f:62:b3:
                    f9:ff:d1:cb:c7:21:26:ab:4a:e8:b2:c8:5b:5b:02:
                    40:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C7:A1:EB:31:DA:FB:09:BA:EC:6D:22:96:C7:94:95:64:CE:8D:56
            X509v3 Authority Key Identifier:
                keyid:5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3133382e39392e3233362e302f32322d3234203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:b4:00:d2:84:03:57:14:6f:13:b3:13:c1:93:a3:e8:aa:1a:
         46:43:e1:21:d5:67:09:c8:f4:93:af:de:6d:3a:cb:97:f9:a4:
         c5:ab:1c:6b:88:7f:d4:c7:eb:be:fd:6d:26:c4:8a:17:1e:8b:
         ec:ff:40:82:66:47:21:e6:7e:2e:82:b7:63:58:95:36:37:b7:
         03:e6:91:1a:1b:89:d2:34:3e:08:01:7b:4b:24:cf:52:45:a9:
         32:ef:e7:b9:69:82:15:c2:e1:a2:34:69:92:b7:38:92:d9:80:
         f2:92:01:22:1e:b4:6d:d9:5b:82:04:fb:97:8e:29:76:bd:84:
         f4:45:ad:14:dd:95:ee:98:47:67:a8:fa:32:45:f7:05:1f:26:
         f7:3b:51:20:f5:52:dd:70:51:27:ee:c8:27:5a:d6:bf:d5:33:
         4f:cc:3f:8f:5f:a6:5b:d5:8d:a1:41:96:a7:f6:ba:20:c7:24:
         29:8d:85:7f:53:82:8e:35:2c:17:12:1b:06:30:ba:e3:5f:05:
         0b:25:81:7b:2c:30:34:aa:6d:af:66:4e:80:7b:e8:fd:2d:ef:
         c9:78:29:34:7b:bd:c3:3e:c3:03:81:6e:d9:a8:d9:0a:54:e8:
         4c:24:1a:1b:d4:80:e3:cb:57:60:8e:f8:4f:cf:c5:2f:de:f9:
         87:78:78:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:15 2025 by rpki-client