Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137322e302f32332d3233203d3e203532333238.roa
File:                     3133382e39392e3137322e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier:          dywt8AmVHHTqKVgbvFVi48gefWplDGg3evUWlZAkZUs=
Subject key identifier:   56:8C:2C:44:31:BF:3F:61:5F:FA:37:D3:B6:B1:C2:AE:6A:A7:EE:19
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       04D8569BFF9ED4C5E76F8F196601A4ED3C52D95E
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137322e302f32332d3233203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:20 +0000
ROA not before:           Tue 05 Mar 2024 17:39:20 +0000
ROA not after:            Tue 04 Mar 2025 17:44:20 +0000
asID:                     52328
IP address blocks:        138.99.172.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d8:56:9b:ff:9e:d4:c5:e7:6f:8f:19:66:01:a4:ed:3c:52:d9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:20 2024 GMT
            Not After : Mar  4 17:44:20 2025 GMT
        Subject: CN=568C2C4431BF3F615FFA37D3B6B1C2AE6AA7EE19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:62:b1:a0:63:58:73:6c:b5:dc:32:2b:17:
                    38:07:aa:7a:3d:ab:f9:c2:70:2c:07:ac:e2:8a:41:
                    92:e0:7b:cb:cb:e4:71:ec:2f:a4:5d:38:0a:d2:83:
                    42:75:6a:bc:4a:01:6b:c6:77:ac:25:1a:42:f0:1c:
                    70:3a:f4:2e:60:16:b5:c1:11:ba:cc:63:d1:6b:61:
                    99:23:29:18:32:03:0a:91:36:de:58:90:b3:00:4f:
                    48:66:22:60:5d:7e:e2:70:63:1e:be:3c:97:f8:8c:
                    fa:53:1b:10:57:9a:53:f4:83:20:8e:f6:a5:9c:ad:
                    4d:0a:05:5e:23:a5:b2:99:c5:c1:2a:20:8b:9e:60:
                    4f:73:22:b8:14:7c:08:01:60:3e:48:d9:e3:e5:87:
                    a2:7a:c3:68:08:19:a6:e3:c1:7a:52:ab:da:4e:f0:
                    a7:9b:09:94:e4:5a:68:7e:60:73:80:18:53:cc:6c:
                    d5:bb:24:14:c6:99:96:18:4d:b4:15:66:20:18:3b:
                    9d:b6:e6:a1:d9:74:22:f5:e6:8d:12:d1:d8:07:13:
                    43:ba:6b:a4:7e:ff:7b:f7:22:0a:de:8b:8f:35:f5:
                    6c:b0:bc:d9:6e:6a:17:af:12:7b:97:85:00:17:3d:
                    86:ba:69:de:9d:0b:a6:34:d1:d3:85:d5:75:0f:fd:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8C:2C:44:31:BF:3F:61:5F:FA:37:D3:B6:B1:C2:AE:6A:A7:EE:19
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137322e302f32332d3233203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:2e:58:cf:0e:cb:57:ee:83:04:22:59:99:b2:5b:25:62:45:
         f4:ae:6f:d7:46:d3:80:a1:87:9f:63:19:2c:8e:d2:fe:d7:fd:
         79:f7:b0:03:73:72:ef:ca:0b:f1:34:ff:a6:4c:43:36:46:c3:
         b9:2f:91:01:fe:92:92:62:4b:84:dc:ea:0c:d7:dd:09:17:37:
         b0:2b:cd:4a:87:54:53:ee:96:87:4d:ce:66:36:f0:08:b7:d9:
         02:52:dc:c3:2c:24:50:55:c5:32:fe:69:8e:0c:72:7b:f0:26:
         90:83:8b:2c:46:e9:eb:93:dc:bc:0a:0d:39:e5:f2:13:6d:22:
         d7:79:3b:a3:77:02:67:f9:72:b1:87:02:ee:a0:58:fd:e1:1d:
         d4:d8:7d:18:88:fd:25:d6:3e:f0:ea:e8:a0:e8:16:7f:cf:07:
         94:b8:4e:4e:ca:b8:f8:ac:70:c3:19:4d:98:ec:d3:c9:e2:cc:
         84:8f:04:3d:37:64:a6:b4:0e:bc:36:42:8f:88:83:7d:f7:e8:
         c8:dd:2a:2a:44:a3:98:19:33:38:2d:70:10:23:a0:ef:65:f7:
         15:89:8b:2a:4e:70:97:2d:22:14:9c:a4:b7:65:3e:da:4e:97:
         80:80:7d:9b:84:a9:c5:11:8d:f0:9e:36:9e:fc:af:1e:99:45:
         a1:d2:50:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org