Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137342e302f32342d3234203d3e203532333238.roa
File:                     3133382e39392e3137342e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          KNe0ziDeHM7N/VYLzfqJ7d+wWshOPaYwPPzQt2Qi8U0=
Subject key identifier:   8D:3C:58:6A:14:89:44:2B:8D:89:87:B6:78:3C:82:A8:7E:EE:D7:83
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       7F7CAFD0461D7F1D63B33AFA135D49A6A42E85FA
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137342e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:31 +0000
ROA not before:           Tue 05 Mar 2024 17:39:31 +0000
ROA not after:            Tue 04 Mar 2025 17:44:31 +0000
asID:                     52328
IP address blocks:        138.99.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:7c:af:d0:46:1d:7f:1d:63:b3:3a:fa:13:5d:49:a6:a4:2e:85:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:31 2024 GMT
            Not After : Mar  4 17:44:31 2025 GMT
        Subject: CN=8D3C586A1489442B8D8987B6783C82A87EEED783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:68:49:36:39:48:f1:71:0a:78:a1:bf:a6:
                    82:b1:a8:b2:1e:28:52:2e:88:1f:f8:e2:14:c3:f5:
                    0a:f2:6c:a8:a3:2e:02:8a:9e:2f:15:ff:58:b2:6a:
                    ae:bf:cc:b1:78:79:11:a2:1a:1a:3e:18:3d:da:10:
                    5a:00:9f:ef:82:49:2c:af:53:a4:74:3a:34:66:71:
                    f6:02:9b:ee:13:c3:87:48:db:2d:68:6a:8e:42:27:
                    d5:b5:d9:4e:8a:cf:8e:a8:c8:a8:f4:47:a6:49:9f:
                    1c:be:93:21:4c:5c:90:4e:6b:5a:12:8f:07:6c:55:
                    b7:73:d2:67:09:0b:22:bb:11:43:de:d3:8e:51:45:
                    7e:37:57:19:91:72:8a:9c:00:32:37:90:e4:59:51:
                    2c:87:99:ea:fc:18:0d:b0:a2:15:99:22:7a:29:e3:
                    4d:f8:03:eb:a8:99:ba:81:5b:4a:eb:de:1c:2f:58:
                    7c:d4:ee:1f:7e:94:20:df:54:87:62:d1:10:2e:29:
                    60:4c:af:38:ae:6f:56:77:25:b6:79:41:c9:a8:b7:
                    84:17:b1:f1:5d:d3:08:97:16:11:90:5b:da:65:cc:
                    b9:4c:53:eb:2b:3c:c0:ca:fe:f9:b3:f2:48:6e:35:
                    e3:fb:00:d0:8a:cd:94:6a:3c:b2:98:df:eb:e8:8f:
                    3d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3C:58:6A:14:89:44:2B:8D:89:87:B6:78:3C:82:A8:7E:EE:D7:83
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137342e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:4e:24:96:b6:36:eb:a0:d8:ad:d5:6c:fa:ae:cd:31:75:57:
         0e:97:d3:00:bc:3d:a1:ed:22:ff:91:ea:d3:81:0a:a3:5c:a5:
         7d:87:cc:43:4e:49:8c:0d:11:27:17:10:c5:3d:3d:f9:af:32:
         92:e4:67:37:04:d0:4d:c7:6b:0f:c7:3a:db:0b:fb:2a:d6:f9:
         2a:99:7d:32:3c:de:4d:55:eb:69:65:6e:25:db:48:78:e3:c5:
         03:7c:c6:81:5f:2a:88:d3:67:73:9c:48:98:1a:86:81:68:bf:
         ed:46:9a:17:5a:91:57:bc:b8:dc:eb:af:54:82:38:aa:bf:1f:
         7b:5a:31:25:2a:70:45:41:8c:05:f9:d1:6b:d7:d4:7f:85:7e:
         a2:13:1e:c5:31:cd:63:a3:17:f9:50:bf:ca:e8:ed:c6:53:e6:
         90:39:b6:8f:97:94:5c:2a:90:ca:b3:99:bb:4e:6a:1d:fc:53:
         5d:20:ea:d7:dc:fc:42:df:85:84:32:42:bd:a2:a8:4d:b2:6c:
         16:ee:4f:0d:c6:f2:47:9b:f6:78:c7:18:de:2a:99:0b:0c:59:
         73:e5:00:84:f7:27:11:ae:e1:5d:32:e1:47:cb:e5:ef:12:10:
         38:b8:47:fc:a1:db:77:87:a1:3a:c5:dc:85:a6:72:85:b7:f7:
         8a:17:92:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org