Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/3133382e39392e302e302f32322d3234203d3e203236363137.roa
File:                     3133382e39392e302e302f32322d3234203d3e203236363137.roa (raw, json)
Hash identifier:          RESNS/sRUEhOAr66vs6PxWVMjaFDobL/puC5xlZLKH4=
Subject key identifier:   19:2D:88:22:1F:05:98:DB:52:00:E9:AF:E9:68:5B:29:10:67:6A:FB
Certificate issuer:       /CN=5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5
Certificate serial:       1046B9F927BC916A063749D9672C90329D26B554
Authority key identifier: 5B:5D:29:B9:FD:18:B3:30:10:11:AB:FD:EC:89:A5:E5:56:A2:DD:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/3133382e39392e302e302f32322d3234203d3e203236363137.roa
Signing time:             Tue 05 Mar 2024 18:05:07 +0000
ROA not before:           Tue 05 Mar 2024 18:00:07 +0000
ROA not after:            Tue 04 Mar 2025 18:05:07 +0000
asID:                     26617
IP address blocks:        138.99.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:46:b9:f9:27:bc:91:6a:06:37:49:d9:67:2c:90:32:9d:26:b5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5
        Validity
            Not Before: Mar  5 18:00:07 2024 GMT
            Not After : Mar  4 18:05:07 2025 GMT
        Subject: CN=192D88221F0598DB5200E9AFE9685B2910676AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:9f:de:76:94:d1:3d:39:9f:46:a2:3d:b4:
                    f3:f5:ce:02:92:9b:b5:78:83:e9:4f:b9:91:a2:38:
                    07:fc:c3:5d:cd:08:b4:25:b0:72:60:7c:b0:2b:d4:
                    62:05:3c:cf:a1:82:31:19:e9:5a:b8:0d:bd:56:dd:
                    7e:8c:50:c7:13:12:5d:63:37:27:1f:89:71:0f:6e:
                    e5:95:f6:9d:ec:9a:32:93:53:08:af:9a:69:18:67:
                    c7:be:78:6e:b3:87:c8:83:97:b5:d3:a9:ba:d4:62:
                    e4:e2:09:b9:c0:9e:9a:44:1f:d7:65:3a:bb:34:2f:
                    95:a4:83:f4:d9:ca:79:ad:52:e3:2d:bb:c5:15:de:
                    08:6f:b1:a2:06:ba:37:47:e7:7c:97:f5:17:64:1b:
                    82:91:09:2f:dc:5e:3d:bc:d8:0f:f1:9b:25:83:b2:
                    4d:07:17:3d:d0:45:46:05:69:d3:0b:68:e0:9c:b7:
                    fd:54:3a:a7:89:e8:9c:a7:93:20:9f:61:c5:a2:cd:
                    d6:f5:2f:49:16:ec:93:5a:b0:45:e9:17:9f:d1:1c:
                    70:59:27:af:d1:73:82:b5:79:4f:81:5b:a8:0a:9b:
                    df:0a:4f:27:5c:1c:46:8d:af:13:7c:41:53:96:b2:
                    66:38:1a:79:ac:34:7e:68:f2:ba:b8:4e:78:29:06:
                    c7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2D:88:22:1F:05:98:DB:52:00:E9:AF:E9:68:5B:29:10:67:6A:FB
            X509v3 Authority Key Identifier:
                keyid:5B:5D:29:B9:FD:18:B3:30:10:11:AB:FD:EC:89:A5:E5:56:A2:DD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/3133382e39392e302e302f32322d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:44:58:f8:0f:35:45:a0:db:f6:58:b7:c3:c7:64:e9:82:ca:
         4a:6d:87:d8:08:39:44:33:33:b0:77:ed:cd:04:9e:92:c8:60:
         00:63:c6:44:5f:6a:86:3f:a0:83:02:1e:7d:4a:6e:c1:a3:96:
         8d:7a:3e:b4:b1:2f:f6:4c:c6:e4:9f:b6:d6:74:dc:99:11:b0:
         9d:8d:2e:f9:0d:d7:90:86:67:83:4c:c6:f3:21:6c:93:9c:93:
         08:38:87:1a:16:c9:5f:64:40:20:0b:a5:12:77:93:49:63:3b:
         76:be:e3:3b:df:ba:88:55:76:99:16:9c:a1:93:46:f9:09:23:
         ae:cf:fe:b7:15:f9:6a:24:a8:66:3a:c1:00:c5:f7:e0:e6:4d:
         b5:5e:b6:6c:37:b0:b7:00:6a:ff:09:58:75:8b:cd:24:1a:bb:
         70:74:26:c4:91:1b:16:9e:d1:f4:fd:ef:cf:97:52:62:d4:6b:
         bc:6c:5b:4f:14:62:72:36:1a:9c:cc:1f:50:e0:62:b2:92:4e:
         cd:ed:b2:c7:f7:1c:b8:d5:37:84:a1:29:90:2e:4f:0b:72:9d:
         58:d4:3b:e0:6b:93:ba:e3:fe:97:19:f0:11:a1:80:2d:de:b8:
         f2:52:8d:92:8d:9f:10:64:17:e1:f2:40:66:e4:f1:77:e5:89:
         6d:7a:16:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:44 2024 by rpki-client on console-fra.rpki-client.org