Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/3133382e39392e3138302e302f32322d3234203d3e20323632313939.roa
File:                     3133382e39392e3138302e302f32322d3234203d3e20323632313939.roa (raw, json)
Hash identifier:          qj9QDQd8KAt/CpiYJH5iOeCql4DFd3q+0UutNgCi1g4=
Subject key identifier:   1D:43:81:A0:42:A2:F8:21:2D:FE:F7:86:7E:0C:25:07:CC:3E:51:52
Certificate issuer:       /CN=B38BDE76E463241532282B264A16F479CD7D0224
Certificate serial:       5A487F7C81BEB3BBAEFB55B186A8A91EB94B650F
Authority key identifier: B3:8B:DE:76:E4:63:24:15:32:28:2B:26:4A:16:F4:79:CD:7D:02:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/3133382e39392e3138302e302f32322d3234203d3e20323632313939.roa
Signing time:             Tue 05 Mar 2024 18:12:31 +0000
ROA not before:           Tue 05 Mar 2024 18:07:31 +0000
ROA not after:            Tue 04 Mar 2025 18:12:31 +0000
asID:                     262199
IP address blocks:        138.99.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 20:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:48:7f:7c:81:be:b3:bb:ae:fb:55:b1:86:a8:a9:1e:b9:4b:65:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B38BDE76E463241532282B264A16F479CD7D0224
        Validity
            Not Before: Mar  5 18:07:31 2024 GMT
            Not After : Mar  4 18:12:31 2025 GMT
        Subject: CN=1D4381A042A2F8212DFEF7867E0C2507CC3E5152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:47:c1:5c:c1:11:96:82:26:d2:11:e1:97:
                    7c:9e:52:38:19:96:1b:6e:36:3d:09:54:6b:93:db:
                    e8:65:a0:97:f4:db:bd:ce:c0:73:60:8f:74:bc:3f:
                    7b:a9:f0:39:59:66:0d:82:b6:92:c5:bd:3e:02:eb:
                    ff:44:50:47:c9:c2:c2:41:9d:a3:38:65:33:c0:9e:
                    e2:77:07:92:57:12:68:29:9a:a9:24:27:41:11:eb:
                    96:02:6a:db:c4:bb:22:cb:6f:c9:31:59:67:c5:cb:
                    1f:81:97:d9:a7:72:33:5c:e9:9c:66:39:d3:25:f2:
                    5a:6f:a4:de:6f:3b:ab:66:72:c0:b0:b2:51:1a:d7:
                    1c:a5:e0:d7:97:d5:2d:4c:4f:fb:6d:4d:ef:aa:80:
                    ea:00:bf:9d:d5:a0:ca:c9:f4:cf:6b:26:ae:83:58:
                    c6:ca:68:75:ff:f7:fa:b8:2e:0c:d1:c4:2b:e8:86:
                    51:07:f3:d3:7d:0b:e9:8f:f3:cc:fe:f0:eb:4d:b5:
                    6e:c6:54:ac:6f:ea:20:77:e4:dc:ee:73:1c:85:f8:
                    e8:65:48:1d:15:b5:7a:eb:27:55:0f:14:1c:2b:7f:
                    45:3f:69:61:87:23:49:fe:0a:37:72:bf:28:9a:bd:
                    c0:a6:6c:05:85:2d:3c:75:ce:c2:ac:d6:37:60:c8:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:43:81:A0:42:A2:F8:21:2D:FE:F7:86:7E:0C:25:07:CC:3E:51:52
            X509v3 Authority Key Identifier:
                keyid:B3:8B:DE:76:E4:63:24:15:32:28:2B:26:4A:16:F4:79:CD:7D:02:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/3133382e39392e3138302e302f32322d3234203d3e20323632313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:7d:3d:3e:dc:81:67:94:04:d8:96:41:da:1a:b0:1a:e6:38:
         72:65:85:7f:fe:00:1b:3d:ba:d9:e0:f5:78:d8:ce:ae:07:df:
         4c:67:d9:78:de:84:26:63:aa:bf:76:4a:41:21:d3:e5:95:4b:
         0b:05:47:e8:7d:7e:fa:3b:bb:6f:92:49:91:2e:c1:54:62:de:
         a8:f5:d3:d3:03:54:c8:c0:4d:58:9a:52:12:31:a4:1b:60:3d:
         91:b7:c6:cb:c5:1a:87:95:bc:18:bd:12:a4:82:24:8a:5e:de:
         16:a8:8a:4a:ea:13:58:41:53:0d:f7:7e:b3:76:d9:df:77:c6:
         68:2d:a9:e6:8a:ad:b4:af:c8:98:6d:89:4b:94:99:66:21:61:
         57:88:73:16:72:f3:f6:2c:a0:8e:2a:26:72:8d:dd:de:d0:5d:
         77:81:db:8d:b9:92:5d:7d:3e:66:43:e8:9c:57:c3:f2:e6:7b:
         5d:fc:00:eb:dc:3d:25:7b:62:4c:a0:86:31:c5:91:da:e8:40:
         d1:91:61:f8:ce:d7:04:9c:7e:c8:97:b1:c5:0b:82:b3:fa:8b:
         3a:22:08:cb:14:94:18:ae:0b:4b:80:38:fc:18:76:a0:8f:c7:
         b3:6f:5c:60:9b:02:86:f0:2c:fc:4a:9f:3d:c8:15:46:8b:ac:
         fd:03:f5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 05:42:18 2024 by rpki-client on console-ams.rpki-client.org