Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3133382e39392e33362e302f32322d3232203d3e20323633373430.roa
File:                     3133382e39392e33362e302f32322d3232203d3e20323633373430.roa (raw, json)
Hash identifier:          zEorjrtTtALll2WSh6F8V2qKKLKfacSTztXNTRP+F/M=
Subject key identifier:   62:5D:11:23:29:47:EC:41:7D:DE:42:68:8B:0E:3F:1A:06:3C:69:52
Certificate issuer:       /CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
Certificate serial:       5C26B2235464188DC38E3CA8A556CD6D817F9A3B
Authority key identifier: 30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3133382e39392e33362e302f32322d3232203d3e20323633373430.roa
Signing time:             Tue 04 Feb 2025 18:49:27 +0000
ROA not before:           Tue 04 Feb 2025 18:44:27 +0000
ROA not after:            Tue 03 Feb 2026 18:49:27 +0000
asID:                     263740
IP address blocks:        138.99.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:26:b2:23:54:64:18:8d:c3:8e:3c:a8:a5:56:cd:6d:81:7f:9a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
        Validity
            Not Before: Feb  4 18:44:27 2025 GMT
            Not After : Feb  3 18:49:27 2026 GMT
        Subject: CN=625D11232947EC417DDE42688B0E3F1A063C6952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e3:d5:19:98:98:ae:18:57:88:39:be:e1:8b:
                    c4:9f:db:c2:75:1d:0f:41:74:17:98:a9:b2:2f:cd:
                    ee:da:45:a2:18:65:a7:20:51:4f:dc:10:de:ea:18:
                    51:53:18:52:a1:e1:28:1d:b1:c0:51:22:67:ba:81:
                    1d:f3:3f:d7:b8:ea:38:60:a0:77:ce:4c:4d:38:77:
                    ac:0d:5f:67:ec:41:5b:76:06:31:5e:a6:52:3f:d6:
                    72:5a:61:b9:b0:84:f9:0f:ac:42:ce:0d:ff:f1:d4:
                    42:5d:0b:55:d1:50:f6:0a:96:68:3c:7c:16:51:60:
                    2f:e0:c0:cd:7c:73:21:f5:6a:9f:cc:91:61:58:8d:
                    cd:22:9c:35:e2:ab:2f:c1:9a:ce:d2:9a:cf:57:4a:
                    3c:92:83:6c:41:b4:c3:d9:ed:3c:77:d9:3b:34:d5:
                    51:44:df:35:6e:84:6a:9f:f6:da:8a:00:44:9c:aa:
                    4c:36:7f:fd:52:ce:9e:66:c3:83:78:45:2e:e6:8a:
                    f3:84:e8:76:56:ce:48:b7:11:11:34:2f:bb:87:c0:
                    e2:89:08:54:53:b2:87:c6:ce:b7:01:7c:5a:76:d1:
                    8e:79:d2:90:43:81:e6:39:7a:0c:62:69:63:b2:3c:
                    73:96:4f:4a:fe:34:1e:75:2f:c8:bc:69:a0:51:41:
                    eb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5D:11:23:29:47:EC:41:7D:DE:42:68:8B:0E:3F:1A:06:3C:69:52
            X509v3 Authority Key Identifier:
                keyid:30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3133382e39392e33362e302f32322d3232203d3e20323633373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:8c:14:ee:a7:1f:2f:df:46:9c:c6:8a:82:10:59:4c:9b:c2:
         89:cd:fe:e9:22:18:dd:f3:70:ff:fc:50:6d:1d:21:97:85:77:
         39:4c:3b:f0:90:26:32:c4:c5:7e:8d:2e:09:c9:e2:de:23:9a:
         64:51:49:f4:9c:28:7c:e4:58:a2:6c:1b:95:40:c4:bc:41:a7:
         bd:e0:47:03:ef:62:4c:4d:87:9d:f1:2b:3e:d7:a5:30:1b:5a:
         b6:81:36:72:7e:42:3e:ce:ad:04:9b:ae:f9:72:b5:9b:3e:f3:
         f5:1a:05:59:be:b8:96:27:14:93:b1:38:80:4f:fa:3a:ed:d9:
         53:75:7f:3f:fd:ed:73:91:33:a5:e5:5f:1e:15:a3:8d:7d:74:
         a2:4f:63:db:ba:25:ad:ab:02:c0:e1:7d:df:49:a5:91:5d:75:
         e8:a7:70:92:76:db:d3:62:fe:fe:28:19:64:c6:e1:00:fc:96:
         fa:cd:ea:67:54:1e:cc:ae:ac:f5:f7:77:e2:60:50:5a:60:db:
         77:a4:3e:c6:56:3d:6f:a6:8a:40:d4:f3:c2:2c:a1:d3:77:81:
         52:37:b8:bd:8a:70:a7:4a:f7:67:21:f8:0d:2c:5f:f2:35:61:
         c0:37:e3:1a:2e:fa:c9:50:be:9d:4f:97:36:ca:9f:0a:aa:71:
         1d:96:d4:39
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXCayI1RkGI3DjjyopVbNbYF/mjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA1MzcwQTE5OThDNkFFRjlCOTQyODM1MTdGNEIxRTZC
QjVBRDBCQzAeFw0yNTAyMDQxODQ0MjdaFw0yNjAyMDMxODQ5MjdaMDMxMTAvBgNV
BAMTKDYyNUQxMTIzMjk0N0VDNDE3RERFNDI2ODhCMEUzRjFBMDYzQzY5NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ49UZmJiuGFeIOb7hi8Sf28J1
HQ9BdBeYqbIvze7aRaIYZacgUU/cEN7qGFFTGFKh4SgdscBRIme6gR3zP9e46jhg
oHfOTE04d6wNX2fsQVt2BjFeplI/1nJaYbmwhPkPrELODf/x1EJdC1XRUPYKlmg8
fBZRYC/gwM18cyH1ap/MkWFYjc0inDXiqy/Bms7Sms9XSjySg2xBtMPZ7Tx32Ts0
1VFE3zVuhGqf9tqKAEScqkw2f/1Szp5mw4N4RS7mivOE6HZWzki3ERE0L7uHwOKJ
CFRTsofGzrcBfFp20Y550pBDgeY5egxiaWOyPHOWT0r+NB51L8i8aaBRQetBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUYl0RIylH7EF93kJoiw4/GgY8aVIwHwYDVR0j
BBgwFoAUMFNwoZmMau+blCg1F/Sx5rta0LwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzAxQzQzMUE1MjlFQTIwRTk1MUNDRjA5ODcyNUJFQzdG
MDVEODE3M0E0MDVDMUE5REVCNjQwQkE5N0JFRTVBLzAvMzA1MzcwQTE5OThDNkFF
RjlCOTQyODM1MTdGNEIxRTZCQjVBRDBCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDUzNzBBMTk5OEM2QUVGOUI5
NDI4MzUxN0Y0QjFFNkJCNUFEMEJDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTcwMUM0MzFBNTI5RUEyMEU5NTFDQ0YwOTg3MjVCRUM3RjA1RDgxNzNB
NDA1QzFBOURFQjY0MEJBOTdCRUU1QS8wLzMxMzMzODJlMzkzOTJlMzMzNjJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzMzM3MzQzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAopjJDAN
BgkqhkiG9w0BAQsFAAOCAQEAjIwU7qcfL99GnMaKghBZTJvCic3+6SIY3fNw//xQ
bR0hl4V3OUw78JAmMsTFfo0uCcni3iOaZFFJ9JwofORYomwblUDEvEGnveBHA+9i
TE2HnfErPtelMBtatoE2cn5CPs6tBJuu+XK1mz7z9RoFWb64licUk7E4gE/6Ou3Z
U3V/P/3tc5EzpeVfHhWjjX10ok9j27olrasCwOF930mlkV116Kdwknbb02L+/igZ
ZMbhAPyW+s3qZ1QezK6s9fd34mBQWmDbd6Q+xlY9b6aKQNTzwiyh03eBUje4vYpw
p0r3ZyH4DSxf8jVhwDfjGi76yVC+nU+XNsqfCqpxHZbUOQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:03 2025 by rpki-client