Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137322e302f32322d3232203d3e203532333238.roa
File:                     3133382e39392e3137322e302f32322d3232203d3e203532333238.roa (raw, json)
Hash identifier:          grqR5lGBXZHWr3DF/Q1cG1vWTXRqAYKDGqgo+017acY=
Subject key identifier:   7E:6A:AD:2A:84:62:2D:30:4B:94:A3:8C:E5:F2:B3:93:E4:DE:28:B6
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       5DD2446CD7D16B9DB014551BDC73187808A07F82
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137322e302f32322d3232203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:19 +0000
ROA not before:           Tue 05 Mar 2024 17:39:19 +0000
ROA not after:            Tue 04 Mar 2025 17:44:19 +0000
asID:                     52328
IP address blocks:        138.99.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d2:44:6c:d7:d1:6b:9d:b0:14:55:1b:dc:73:18:78:08:a0:7f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:19 2024 GMT
            Not After : Mar  4 17:44:19 2025 GMT
        Subject: CN=7E6AAD2A84622D304B94A38CE5F2B393E4DE28B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:9d:f9:49:62:68:f6:5c:07:96:cd:99:2a:
                    73:55:48:a6:28:43:b7:e0:9e:86:de:7e:5c:29:a3:
                    f4:77:ae:d5:59:ef:2a:39:29:9a:f6:38:bb:b2:b7:
                    34:bd:d7:82:b7:b2:3a:b6:37:2e:2c:01:89:04:38:
                    75:02:30:c9:40:2d:f4:0f:53:67:7b:ed:6e:f1:f7:
                    a9:40:6a:a9:e4:7b:b5:04:ad:85:33:f9:5b:8a:60:
                    b3:40:1d:b6:74:87:ef:08:6e:e4:d8:7f:0c:dc:f5:
                    5e:61:2e:ca:b5:07:f9:71:c4:b9:cf:21:5c:8d:e2:
                    e9:8e:00:56:ed:7f:db:d4:94:50:6f:dc:18:ce:02:
                    8d:10:73:51:85:97:41:d5:20:00:15:96:16:d8:f7:
                    be:f4:df:f3:9d:54:da:5b:3d:07:0b:eb:67:b3:75:
                    93:13:e1:ed:8d:ab:4e:de:47:1e:06:b5:b3:a8:ee:
                    85:70:ba:85:70:d6:e2:ff:01:d7:6c:25:3b:ec:21:
                    ae:6c:ad:90:cd:35:d3:d5:55:79:92:f9:67:23:52:
                    4d:64:26:4f:e5:42:a8:70:92:74:a3:74:3f:40:28:
                    b8:c2:97:cf:c4:16:7b:47:2e:7f:17:8a:64:9e:e6:
                    eb:d4:ec:58:d3:24:aa:93:e9:3d:2e:6c:9f:52:e1:
                    c5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6A:AD:2A:84:62:2D:30:4B:94:A3:8C:E5:F2:B3:93:E4:DE:28:B6
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137322e302f32322d3232203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:18:76:bd:ae:84:68:8a:3a:30:f2:27:f9:bd:2d:13:5b:e7:
         40:af:ad:24:4c:ca:b5:4c:43:80:95:17:94:05:74:91:91:1d:
         5a:85:d6:90:f4:a9:e9:e9:9c:51:6a:23:10:df:2e:9a:ed:7c:
         ca:b9:e2:a2:88:d9:70:e5:57:94:8e:4c:d3:fd:0d:d8:dc:28:
         4d:bc:f5:7b:b0:8b:9b:bc:63:57:4c:e2:01:fc:ff:c8:1e:b7:
         3f:5e:d8:19:0a:c4:8a:97:30:55:2b:79:f1:a5:e7:1a:8c:ca:
         22:4e:dc:39:a4:cc:dd:5d:c5:21:fa:9e:37:02:0c:73:30:7c:
         fd:94:fb:1b:12:75:e5:ac:d6:12:35:3b:c2:2f:ae:17:94:68:
         68:1b:1a:b4:50:38:4d:46:0a:eb:e8:af:2b:70:49:b2:69:5b:
         29:18:f5:69:50:b7:7f:d2:b0:5a:1c:c0:77:9c:01:33:c3:81:
         21:77:c1:e3:68:86:be:eb:c2:91:41:c5:bc:c0:f1:03:e5:f5:
         7e:45:47:a3:f8:8a:d1:26:bd:41:07:b6:0e:d8:8e:52:c4:df:
         35:cb:cb:fa:0d:5f:16:4b:73:ca:1b:2d:5a:bc:41:5d:b5:de:
         d1:c2:74:a5:6f:3d:f6:47:39:fe:d3:6e:d3:25:c0:36:df:c6:
         05:8d:58:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org