Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/3133382e35392e302e302f32322d3238203d3e20323633373339.roa
File:                     3133382e35392e302e302f32322d3238203d3e20323633373339.roa (raw, json)
Hash identifier:          Z95gswYNfMP7Yh8i4BTEBwA5jCNvYuYdJTcoczI/RYQ=
Subject key identifier:   3A:5A:A0:FF:F6:F2:E8:30:97:2A:DD:6F:08:26:E0:A9:C3:35:81:FD
Certificate issuer:       /CN=75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6
Certificate serial:       50FF428EE0FF73426A76C0363CC14628A066C3A0
Authority key identifier: 75:BA:39:73:8D:8D:B5:3F:4F:1A:AC:B2:D0:1E:33:19:F1:CE:D0:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/3133382e35392e302e302f32322d3238203d3e20323633373339.roa
Signing time:             Mon 15 Apr 2024 11:40:00 +0000
ROA not before:           Mon 15 Apr 2024 11:35:00 +0000
ROA not after:            Mon 14 Apr 2025 11:40:00 +0000
asID:                     263739
IP address blocks:        138.59.0.0/22 maxlen: 28

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ff:42:8e:e0:ff:73:42:6a:76:c0:36:3c:c1:46:28:a0:66:c3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6
        Validity
            Not Before: Apr 15 11:35:00 2024 GMT
            Not After : Apr 14 11:40:00 2025 GMT
        Subject: CN=3A5AA0FFF6F2E830972ADD6F0826E0A9C33581FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0a:d1:f9:95:9b:92:54:1c:88:a7:a5:37:b2:
                    db:81:21:7d:fa:79:54:4b:69:f2:c0:7a:12:f7:09:
                    52:0e:04:82:42:53:87:fc:96:1a:bb:59:97:bb:f9:
                    8f:39:8c:1c:10:9f:73:2c:e7:e9:e7:d2:72:82:4b:
                    5c:37:86:c8:3d:a3:c2:f9:c8:9b:a4:82:af:49:15:
                    49:6d:f9:fa:a5:75:5c:ba:c3:97:68:37:2e:fc:dc:
                    86:66:3b:56:38:19:1f:b5:bf:96:a3:d0:1f:87:8b:
                    90:7a:64:35:ec:3d:f7:52:e9:ad:3b:37:01:60:77:
                    4d:3b:44:9f:6a:b0:ae:de:10:f9:35:a3:50:b8:c6:
                    df:6a:39:d0:2e:12:53:4f:4a:f3:50:2b:82:07:49:
                    3f:96:9e:92:45:aa:ed:38:3b:95:ec:f3:d9:97:6c:
                    18:27:ce:07:84:cd:84:9a:a0:77:ab:d1:18:37:43:
                    ca:cb:25:ff:d9:94:80:05:de:6a:9b:09:af:26:5d:
                    7d:ef:c9:80:4f:1c:ef:81:a2:fe:b4:1c:2d:31:f1:
                    aa:5f:f2:c9:d9:6b:3a:2c:61:32:bc:c3:d3:a3:a6:
                    8c:f2:b6:d1:5b:c7:10:6f:7a:76:ad:b8:4e:e8:5b:
                    a3:96:b9:e5:d1:53:3f:cd:93:c7:98:cf:2d:76:4c:
                    5f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5A:A0:FF:F6:F2:E8:30:97:2A:DD:6F:08:26:E0:A9:C3:35:81:FD
            X509v3 Authority Key Identifier:
                keyid:75:BA:39:73:8D:8D:B5:3F:4F:1A:AC:B2:D0:1E:33:19:F1:CE:D0:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/3133382e35392e302e302f32322d3238203d3e20323633373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:d5:54:61:b7:06:f6:62:bd:d4:8e:c4:01:9b:66:cf:bd:40:
         7d:41:4a:89:9e:50:33:c0:12:b9:72:79:73:b9:dd:3d:ef:f2:
         21:3a:c8:5e:cd:34:e5:e4:12:37:07:61:69:cd:b4:7f:00:b9:
         67:38:4f:da:46:1a:b8:65:80:6b:96:10:c6:c7:60:ba:6d:54:
         bd:fa:ad:5d:4f:9e:68:6d:1d:f8:07:96:67:0f:02:91:7a:bf:
         19:24:4c:df:f3:aa:af:be:f6:a9:b0:94:91:14:5e:ce:8b:db:
         80:12:81:6d:09:df:d2:d8:ee:ab:cd:43:5f:a2:7d:e2:11:94:
         55:15:1b:17:0e:e8:39:7c:b7:f1:1b:4d:34:e0:ec:04:a4:93:
         20:d8:c1:f2:63:b4:91:af:8a:5c:e4:58:d5:80:37:76:0b:31:
         40:58:e6:95:2d:c6:84:93:e3:98:3b:26:f2:fe:f5:3d:49:fa:
         30:58:13:bd:07:7b:56:9f:15:17:c7:bf:88:06:97:58:9b:25:
         6a:7e:b4:c5:21:26:bf:15:93:f0:fc:8d:5a:11:b9:f6:a7:48:
         c0:c8:c9:7d:f5:7a:fe:e5:45:59:7c:49:85:07:f4:21:d4:79:
         8f:ad:1d:7e:4e:cc:be:20:af:6e:5c:6a:10:fb:f6:43:9c:96:
         82:51:2c:bc
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUUP9CjuD/c0JqdsA2PMFGKKBmw6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVCQTM5NzM4RDhEQjUzRjRGMUFBQ0IyRDAxRTMzMTlG
MUNFRDBBNjAeFw0yNDA0MTUxMTM1MDBaFw0yNTA0MTQxMTQwMDBaMDMxMTAvBgNV
BAMTKDNBNUFBMEZGRjZGMkU4MzA5NzJBREQ2RjA4MjZFMEE5QzMzNTgxRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkCtH5lZuSVByIp6U3stuBIX36
eVRLafLAehL3CVIOBIJCU4f8lhq7WZe7+Y85jBwQn3Ms5+nn0nKCS1w3hsg9o8L5
yJukgq9JFUlt+fqldVy6w5doNy783IZmO1Y4GR+1v5aj0B+Hi5B6ZDXsPfdS6a07
NwFgd007RJ9qsK7eEPk1o1C4xt9qOdAuElNPSvNQK4IHST+WnpJFqu04O5Xs89mX
bBgnzgeEzYSaoHer0Rg3Q8rLJf/ZlIAF3mqbCa8mXX3vyYBPHO+Bov60HC0x8apf
8snZazosYTK8w9OjpozyttFbxxBvenatuE7oW6OWueXRUz/Nk8eYzy12TF9FAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUOlqg//by6DCXKt1vCCbgqcM1gf0wHwYDVR0j
BBgwFoAUdbo5c42NtT9PGqyy0B4zGfHO0KYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMkJFMDkwQkUzODJDODI2OTBGNzc3NDIzOEEyQTY3RTI0
MEQ5NjgzODEzMzI1NDZBRjU0RUFDRTg5MURCOTcxLzAvNzVCQTM5NzM4RDhEQjUz
RjRGMUFBQ0IyRDAxRTMzMTlGMUNFRDBBNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NUJBMzk3MzhEOERCNTNGNEYx
QUFDQjJEMDFFMzMxOUYxQ0VEMEE2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjJCRTA5MEJFMzgyQzgyNjkwRjc3NzQyMzhBMkE2N0UyNDBEOTY4Mzgx
MzMyNTQ2QUY1NEVBQ0U4OTFEQjk3MS8wLzMxMzMzODJlMzUzOTJlMzAyZTMwMmYz
MjMyMmQzMjM4MjAzZDNlMjAzMjM2MzMzNzMzMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKKOwAwDQYJ
KoZIhvcNAQELBQADggEBAIbVVGG3BvZivdSOxAGbZs+9QH1BSomeUDPAErlyeXO5
3T3v8iE6yF7NNOXkEjcHYWnNtH8AuWc4T9pGGrhlgGuWEMbHYLptVL36rV1Pnmht
HfgHlmcPApF6vxkkTN/zqq++9qmwlJEUXs6L24ASgW0J39LY7qvNQ1+ifeIRlFUV
GxcO6Dl8t/EbTTTg7ASkkyDYwfJjtJGvilzkWNWAN3YLMUBY5pUtxoST45g7JvL+
9T1J+jBYE70He1afFRfHv4gGl1ibJWp+tMUhJr8Vk/D8jVoRufanSMDIyX31ev7l
RVl8SYUH9CHUeY+tHX5OzL4gr25cahD79kOcloJRLLw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org