Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137352e302f32342d3234203d3e203532333238.roa
File:                     3133382e39392e3137352e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          XWSpxYG/IqobUfRyxlCZ5tYFfg+Qs6gqPWcQJWtLeuM=
Subject key identifier:   66:7B:D1:7E:D0:0C:7E:3C:E1:AB:36:9A:C8:8E:17:58:F6:26:FD:FA
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       754BD5C91473638DFA1BDAA9B595DDF7CDF43B91
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137352e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:25 +0000
ROA not before:           Tue 04 Feb 2025 18:11:25 +0000
ROA not after:            Tue 03 Feb 2026 18:16:25 +0000
asID:                     52328
IP address blocks:        138.99.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4b:d5:c9:14:73:63:8d:fa:1b:da:a9:b5:95:dd:f7:cd:f4:3b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:25 2025 GMT
            Not After : Feb  3 18:16:25 2026 GMT
        Subject: CN=667BD17ED00C7E3CE1AB369AC88E1758F626FDFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:09:9d:15:3f:62:75:a7:0e:fe:67:2c:44:
                    2b:6a:a5:05:f7:96:86:22:95:8b:f9:35:d4:6b:19:
                    29:35:b8:31:2d:b3:ca:f3:a5:db:53:8b:cf:0a:69:
                    39:06:d5:ea:92:ae:93:a4:fa:0e:40:25:76:57:be:
                    fa:97:31:a4:cf:93:9b:38:c0:a3:b8:dd:10:54:1d:
                    f4:c7:8a:f9:9a:b8:b0:d2:57:cc:0d:89:29:bc:c7:
                    b8:fe:bf:b0:58:c3:17:38:f0:90:ee:03:7e:85:3d:
                    df:a2:c0:d3:bc:b5:ee:8f:d9:4d:14:59:9b:62:2d:
                    12:81:9e:74:ab:3d:cd:a2:b5:24:37:47:d4:ce:9a:
                    31:22:9b:6e:3a:0c:15:06:29:f9:47:cf:9b:6e:cc:
                    9f:e5:b8:7b:3a:9b:d2:a8:5d:fb:45:b3:0e:e3:22:
                    12:11:a3:f7:f0:e7:de:f1:62:06:7b:a2:9d:30:6b:
                    79:b8:9f:63:01:f1:80:97:67:ca:94:78:cf:41:a3:
                    1a:04:93:66:a3:08:30:ba:c1:48:54:25:15:b8:c6:
                    05:3f:e3:1b:8a:86:61:46:38:f6:20:52:5d:0f:58:
                    b5:e1:af:5d:8e:33:cd:b2:4f:c4:a7:be:5d:3f:02:
                    b7:25:2b:46:e7:94:27:75:db:26:e0:5c:88:28:60:
                    9c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7B:D1:7E:D0:0C:7E:3C:E1:AB:36:9A:C8:8E:17:58:F6:26:FD:FA
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3133382e39392e3137352e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:c3:31:8d:fe:41:5e:6e:f4:c1:ec:95:f9:f3:15:e3:61:18:
         76:c7:cc:a6:3c:69:33:7c:b3:05:4a:5b:05:d3:5b:31:36:88:
         cd:cc:33:ae:4f:a9:59:d4:a3:52:29:cd:4f:72:25:9a:1b:a6:
         77:56:d1:d6:a1:0c:f3:96:8e:2f:35:a2:cc:75:e0:40:42:fc:
         22:a8:43:be:8e:22:ab:3d:53:75:9d:c4:56:75:cd:63:ff:31:
         f9:c5:10:d4:3f:69:7e:8c:78:7c:9c:67:b3:59:3a:fc:28:9c:
         86:2b:10:f4:d0:2b:cc:9c:e3:b7:74:1e:c9:61:85:5a:45:04:
         ff:fd:e0:05:97:4d:a3:93:93:e1:37:67:95:30:fd:28:aa:60:
         81:eb:a7:03:a3:4e:59:ea:83:74:5b:73:6c:d2:5e:e3:70:69:
         c5:9f:30:b9:95:1b:e6:70:aa:c7:1d:0f:5b:3a:9f:28:9a:69:
         4d:26:58:c4:d8:f3:49:69:40:6f:8a:b5:b8:5f:b4:7e:04:c0:
         9b:9d:c0:88:83:49:4b:91:e0:a1:74:cc:cf:ff:dc:ae:5c:79:
         94:49:51:96:4d:5a:66:04:3b:35:c7:ac:9d:52:5e:f1:9b:45:
         c2:6e:7d:8e:4f:6a:0e:a7:67:a5:a8:09:f9:73:f7:9b:ec:b4:
         79:0b:a3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:41 2025 by rpki-client