Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137332e302f32342d3234203d3e203532333238.roa
File:                     3133382e39392e3137332e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          8O8cZh/edW91nphtbibWoNAOUxy7XDhrih6Btw1/TV0=
Subject key identifier:   15:54:CF:C5:AB:7F:1D:2E:EA:DE:3D:D6:9C:24:B2:0C:74:B2:B6:E0
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       5A05B1C87A31D804F78D40BAD8F09D15DC9A0AEE
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137332e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:21 +0000
ROA not before:           Tue 04 Feb 2025 18:11:21 +0000
ROA not after:            Tue 03 Feb 2026 18:16:21 +0000
asID:                     52328
IP address blocks:        138.99.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:05:b1:c8:7a:31:d8:04:f7:8d:40:ba:d8:f0:9d:15:dc:9a:0a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:21 2025 GMT
            Not After : Feb  3 18:16:21 2026 GMT
        Subject: CN=1554CFC5AB7F1D2EEADE3DD69C24B20C74B2B6E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d2:48:9e:b7:b1:de:d6:0a:a4:3f:db:4f:de:
                    92:e1:68:83:b2:f8:6b:1f:73:80:6b:48:bf:86:4e:
                    cc:60:dc:33:65:29:ba:e2:c4:69:ed:1c:3a:a6:20:
                    e1:5e:3d:a8:43:55:ac:b1:cb:56:0a:5a:9f:6e:b4:
                    7c:ca:4b:ae:01:82:84:84:46:ab:b2:55:ae:a6:d5:
                    9a:60:c1:a7:2a:36:58:9a:95:30:e3:94:45:fa:de:
                    83:3f:49:07:2b:8d:94:17:8a:7a:89:71:0a:5e:ed:
                    5d:fa:d8:09:9a:26:e8:2d:83:f0:dd:9b:a9:f7:d3:
                    8c:cc:c8:56:a8:4b:7f:b5:60:37:71:bd:b6:5c:72:
                    d2:78:1c:d5:be:c4:c3:fc:09:4e:5b:5f:70:8c:4e:
                    53:66:a1:bd:dd:89:6d:52:c8:34:dd:6d:ad:33:3b:
                    3f:b1:13:e7:b9:20:a1:ac:73:a1:ea:00:2d:a8:e3:
                    1d:6b:97:19:b6:9d:4b:72:ac:c7:da:c3:f1:5c:5a:
                    ff:be:99:fd:4c:c9:61:b0:e0:37:06:1c:8d:ea:ad:
                    f6:d7:9a:17:02:8e:28:9f:13:cc:48:d2:12:bd:33:
                    37:12:dd:09:2d:7d:ab:5d:a6:73:87:fe:9f:38:67:
                    7a:d7:6c:1e:02:94:87:b2:8d:99:cc:18:1c:21:b8:
                    bb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:54:CF:C5:AB:7F:1D:2E:EA:DE:3D:D6:9C:24:B2:0C:74:B2:B6:E0
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137332e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:bd:14:19:71:c0:6e:d7:f2:da:10:a7:7a:d1:f5:cb:4e:96:
         74:ab:8b:0d:a6:c0:3c:3a:7a:ce:de:c7:3c:69:60:2d:1a:8a:
         98:58:25:fa:e0:23:08:f9:c7:c2:e9:ae:83:98:82:5b:b3:fa:
         a0:37:dd:50:1c:ea:ef:99:e6:12:c6:d3:13:38:85:6b:05:61:
         d0:24:85:c5:fc:87:cd:f3:05:1c:09:ee:0a:99:81:5f:fc:26:
         62:68:34:85:87:51:00:cb:0a:d5:24:9e:d7:6f:d5:d8:b7:aa:
         c6:7e:2e:a1:ed:86:7e:eb:4c:16:a4:ae:9c:7f:b4:14:b4:f2:
         e1:ab:aa:c0:f3:c5:c2:a2:a6:e2:4f:e0:00:08:0a:2a:e2:ee:
         cf:fb:9e:fc:f3:f9:52:f6:ef:b5:45:a0:97:b0:b9:0b:4c:f5:
         1e:f8:10:a0:48:5a:53:02:48:1d:34:19:26:eb:29:9d:4c:c8:
         6c:d3:d5:0c:ae:ba:32:b1:7e:d2:4c:11:7d:ca:ba:39:f8:6c:
         bc:66:34:ff:cb:cb:19:81:39:c0:1f:d3:15:b1:fa:8b:73:da:
         8c:9d:79:c7:81:78:cd:4f:b2:7d:c7:7a:32:1a:b8:38:ad:53:
         a8:c5:c2:a1:77:b3:80:93:e7:b3:6f:7f:fa:45:26:8c:ff:ab:
         d6:34:7d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:17 2025 by rpki-client