Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3133382e39392e3233362e302f32322d3234203d3e203532343731.roa
File:                     3133382e39392e3233362e302f32322d3234203d3e203532343731.roa (raw, json)
Hash identifier:          je1K5fMUBTdkpSC2G6hyHkxoE0A2ikOXqZ8TKkW7tPE=
Subject key identifier:   5C:31:4E:96:98:C9:06:61:4B:21:D6:97:C8:47:05:E6:EA:01:C0:55
Certificate issuer:       /CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
Certificate serial:       48B55F48900794E3716D8E0B1FF078CDF4777F74
Authority key identifier: 5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3133382e39392e3233362e302f32322d3234203d3e203532343731.roa
Signing time:             Tue 05 Mar 2024 17:44:43 +0000
ROA not before:           Tue 05 Mar 2024 17:39:43 +0000
ROA not after:            Tue 04 Mar 2025 17:44:43 +0000
asID:                     52471
IP address blocks:        138.99.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 12:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b5:5f:48:90:07:94:e3:71:6d:8e:0b:1f:f0:78:cd:f4:77:7f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
        Validity
            Not Before: Mar  5 17:39:43 2024 GMT
            Not After : Mar  4 17:44:43 2025 GMT
        Subject: CN=5C314E9698C906614B21D697C84705E6EA01C055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:69:d8:0e:ae:a8:91:bc:6c:f1:0c:ad:2e:
                    d0:23:8c:29:2e:f7:66:10:f0:19:7b:73:7b:0e:e9:
                    44:c5:6d:b0:f9:4c:96:8f:c2:99:aa:73:5c:21:42:
                    f0:2c:9f:86:25:ca:4e:8c:f8:f3:2f:29:aa:b8:53:
                    86:1e:22:ef:a6:bc:29:99:0d:f0:ff:87:73:d4:2f:
                    b5:45:ec:15:94:b9:bd:98:46:27:63:69:07:2f:c2:
                    43:3a:1b:8c:53:a1:c1:38:52:65:03:a3:91:29:3e:
                    aa:e0:74:b1:d4:ff:df:2a:34:aa:45:8e:82:6f:65:
                    e2:43:5e:43:64:68:24:79:f1:ed:1c:e0:16:c4:f1:
                    99:1f:de:30:b5:b6:f6:3d:fe:4f:46:21:af:76:b4:
                    2f:d8:6b:e4:08:52:5c:0b:de:0e:8f:cb:34:88:e8:
                    6e:a2:4c:6b:60:46:3d:7e:ce:a4:09:8c:4f:7f:0e:
                    9b:1b:7f:0a:c3:e3:8e:d4:ae:b3:dc:e2:08:ef:b8:
                    f6:85:ac:bd:62:51:98:a8:7f:93:2b:48:62:3e:18:
                    fd:17:8b:fe:ba:8f:f2:b0:8c:eb:cc:b5:c2:43:1d:
                    9f:70:29:3e:12:5b:44:af:6d:3f:14:89:98:80:da:
                    3f:ee:34:0e:cd:6e:57:10:19:b0:65:8c:72:e5:a0:
                    75:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:31:4E:96:98:C9:06:61:4B:21:D6:97:C8:47:05:E6:EA:01:C0:55
            X509v3 Authority Key Identifier:
                keyid:5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3133382e39392e3233362e302f32322d3234203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:2a:77:a1:ee:22:7a:ef:eb:70:af:cf:20:8c:a0:b1:d9:64:
         fd:29:43:86:dd:ce:18:88:32:ac:c1:1d:58:87:04:2b:f2:79:
         67:68:b6:40:28:37:a0:3f:70:87:45:37:01:1d:5e:0f:ad:00:
         84:1e:b6:f2:f7:85:4c:e1:db:8b:35:a3:d7:da:4a:4f:c1:7d:
         c4:30:68:ba:3d:ef:ac:9d:37:13:bf:8c:6d:71:57:4c:b8:37:
         cd:92:40:22:54:19:a4:84:fc:66:2c:2b:4b:39:91:59:91:ef:
         34:bb:5f:7d:a9:90:bd:fc:3a:53:67:48:c3:4e:71:45:8e:d0:
         18:ee:8c:c6:56:57:02:92:d0:40:87:f7:58:1e:79:58:0f:62:
         73:1d:16:b9:3a:5d:c6:a9:68:10:73:08:79:e9:68:02:ea:c3:
         65:92:8a:0a:14:8a:30:16:41:b5:3d:d0:48:ad:26:fe:44:d6:
         0a:3b:2d:8b:ea:e8:9d:62:5c:0e:0a:d8:37:e8:9b:f5:1b:80:
         c4:d4:40:e0:3c:d5:e7:46:aa:9f:a0:3d:4b:87:7c:7a:b6:5e:
         0e:de:b1:6d:96:5e:d4:0e:bf:4f:c7:93:8d:1c:d7:28:84:21:
         e7:f1:49:82:92:32:0d:1c:13:d7:49:b4:21:3a:63:15:a5:de:
         ca:5e:a5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:55:20 2024 by rpki-client on console-ams.rpki-client.org