Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/3133382e39392e3133362e302f32322d3234203d3e203631343937.roa
File:                     3133382e39392e3133362e302f32322d3234203d3e203631343937.roa (raw, json)
Hash identifier:          Kj9mPwEj3JJLtkLfbdXrnVBqZD/fb6/9kDEE870LrUM=
Subject key identifier:   29:F1:79:11:A5:8A:96:BB:33:0D:04:29:B3:CB:00:A8:F8:84:C5:28
Certificate issuer:       /CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
Certificate serial:       57CAF0851BF085C81D69D5C4908C471FB3DA82A9
Authority key identifier: CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/3133382e39392e3133362e302f32322d3234203d3e203631343937.roa
Signing time:             Tue 05 Mar 2024 18:17:47 +0000
ROA not before:           Tue 05 Mar 2024 18:12:47 +0000
ROA not after:            Tue 04 Mar 2025 18:17:47 +0000
asID:                     61497
IP address blocks:        138.99.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ca:f0:85:1b:f0:85:c8:1d:69:d5:c4:90:8c:47:1f:b3:da:82:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
        Validity
            Not Before: Mar  5 18:12:47 2024 GMT
            Not After : Mar  4 18:17:47 2025 GMT
        Subject: CN=29F17911A58A96BB330D0429B3CB00A8F884C528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d6:d7:d1:1d:fc:1b:4b:de:ac:00:e5:ef:1b:
                    ff:eb:7a:3e:15:0c:9a:85:5e:b3:2d:5f:95:8d:80:
                    e8:03:8e:91:d2:19:a3:11:ab:82:f0:2c:32:f4:c5:
                    a7:97:73:22:ed:84:1b:ef:79:d6:40:c4:5e:96:46:
                    cb:5e:4b:be:30:f0:68:04:45:89:ec:42:d1:be:5b:
                    f4:58:e4:13:6b:4a:4b:67:32:31:f7:52:ee:37:59:
                    e9:86:70:2d:b3:7d:e4:d1:02:10:78:40:8b:e6:f9:
                    98:72:01:7f:66:23:5d:e2:38:71:d1:25:1f:50:27:
                    9b:7c:dd:b5:6c:63:45:24:cd:f2:b9:fb:0d:7a:23:
                    eb:0a:75:27:b7:37:a0:1b:a6:63:fa:7a:76:ac:5c:
                    30:c6:77:13:94:8f:a9:02:00:aa:25:88:0f:86:dc:
                    9d:a5:07:08:94:60:f9:cb:8a:29:e8:12:ff:29:80:
                    b6:27:db:fe:74:80:20:77:87:7c:bd:e9:1f:9e:73:
                    c6:7e:55:67:da:38:62:40:69:4e:ee:0a:5d:b8:00:
                    22:a0:9f:05:0c:6f:25:15:9b:7f:5d:d6:14:8b:19:
                    b8:a6:1a:7e:b3:e2:72:bc:d0:f8:6c:15:7d:95:7c:
                    a7:28:8c:28:7f:bd:16:0c:b8:68:db:da:0c:e9:02:
                    1f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F1:79:11:A5:8A:96:BB:33:0D:04:29:B3:CB:00:A8:F8:84:C5:28
            X509v3 Authority Key Identifier:
                keyid:CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/3133382e39392e3133362e302f32322d3234203d3e203631343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:ae:d9:4a:34:55:34:38:20:73:7b:a2:88:3d:b3:49:c8:c1:
         1f:7d:df:77:ed:ca:ad:12:de:9f:84:0e:39:0b:5d:37:7a:5c:
         0d:5e:b9:b4:e3:8d:be:a0:79:86:96:8c:13:b9:fe:a0:83:6c:
         0f:7a:a3:8c:18:5c:64:e2:02:0e:c0:15:68:16:5e:af:af:9a:
         6d:e9:6f:8b:d9:bf:2d:05:fb:24:59:4a:7b:eb:2c:7c:b3:ff:
         af:1b:c4:5f:7c:c2:b1:fb:2e:a8:24:14:0c:c9:82:3c:e3:66:
         57:d9:c4:3c:b0:24:ca:b4:c9:d5:f7:85:c6:c7:4a:22:b3:bd:
         d5:2d:c3:82:2d:9f:17:59:f7:d8:eb:8f:e7:68:83:52:af:f2:
         f6:3f:e5:07:2f:ea:72:9b:6e:b1:44:ae:a3:e9:9a:9b:45:7e:
         75:f8:dc:13:a6:75:c5:f4:ed:0e:1f:bf:c7:7d:d1:a7:cb:a7:
         91:8b:85:bb:f3:98:5c:ab:d5:6e:84:fb:8a:75:04:5f:e5:83:
         dc:ca:e3:8c:91:15:48:43:00:15:24:d5:fe:6e:83:b5:d8:16:
         82:4c:78:97:d4:5d:66:c8:ba:98:b6:8b:1e:0f:1d:bf:9b:3f:
         dc:d1:32:42:ea:c9:0e:85:dc:c9:1d:cd:17:03:0b:d3:cc:07:
         d9:0f:93:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:42 2024 by rpki-client on console-fra.rpki-client.org