Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130302e302f32332d3233203d3e20323633373530.roa
File:                     3133382e39392e3130302e302f32332d3233203d3e20323633373530.roa (raw, json)
Hash identifier:          Wqdk3rViGG2gvAsHJ8Hs502wOvqZdMY7dtr2+WQ8icI=
Subject key identifier:   E4:5F:AE:A5:01:C2:E1:2F:2B:E6:D9:06:6C:E8:89:EE:D6:26:08:5E
Certificate issuer:       /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial:       4C6911CA728EBDD46FA52E8CD6A19462A6420916
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130302e302f32332d3233203d3e20323633373530.roa
Signing time:             Thu 29 May 2025 21:20:31 +0000
ROA not before:           Thu 29 May 2025 21:15:31 +0000
ROA not after:            Thu 28 May 2026 21:20:31 +0000
asID:                     263750
IP address blocks:        138.99.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:69:11:ca:72:8e:bd:d4:6f:a5:2e:8c:d6:a1:94:62:a6:42:09:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
        Validity
            Not Before: May 29 21:15:31 2025 GMT
            Not After : May 28 21:20:31 2026 GMT
        Subject: CN=E45FAEA501C2E12F2BE6D9066CE889EED626085E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c7:0a:b3:ad:5c:68:8c:56:85:90:cb:f0:83:
                    af:92:3e:3e:43:e3:89:45:bf:f5:43:74:80:53:30:
                    c1:15:9f:3f:6b:7c:13:1d:b0:b9:78:e2:3f:92:c2:
                    ed:10:74:a8:e0:dd:86:77:71:23:65:22:8a:b0:c3:
                    ea:92:89:2a:68:7e:e1:48:fd:d7:3e:2a:d9:27:35:
                    36:48:72:2c:9c:61:54:28:58:ea:17:7a:1d:58:d3:
                    c3:fc:13:4e:13:a1:23:07:96:20:c1:6e:08:98:f3:
                    39:bb:e3:79:33:db:eb:66:b6:68:62:27:b0:59:3e:
                    11:ea:66:c9:4a:8b:80:99:94:fb:8b:0b:ea:c7:07:
                    b9:8a:8b:39:d5:7c:eb:dd:00:61:4c:71:8a:08:83:
                    b8:04:99:43:a9:52:59:41:f3:09:3d:73:f4:63:60:
                    8a:67:c6:8b:74:72:17:7e:79:d2:bf:b2:60:f4:cd:
                    b4:1b:64:bd:1d:c8:3a:94:a4:f7:34:16:1a:2e:d3:
                    1c:18:78:7c:e3:8d:e6:9c:48:04:89:53:1d:32:af:
                    98:ae:9a:97:50:bb:2f:28:dc:8a:bd:43:8c:53:03:
                    41:f2:21:f8:3a:fd:a6:f3:3f:95:08:77:1d:b4:9e:
                    c8:f8:4e:99:b8:83:d9:14:35:e9:4c:67:25:86:04:
                    8a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5F:AE:A5:01:C2:E1:2F:2B:E6:D9:06:6C:E8:89:EE:D6:26:08:5E
            X509v3 Authority Key Identifier:
                keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130302e302f32332d3233203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:d3:04:a2:03:2d:5d:2c:8c:b8:53:01:4e:b7:92:5f:d5:96:
         d5:27:01:79:3c:84:05:02:73:73:59:02:d8:54:66:6d:09:24:
         f6:ba:1a:a1:ba:86:93:31:94:61:5a:48:77:26:93:14:80:96:
         7a:e3:4c:97:95:57:e3:dd:1d:91:4d:bd:04:50:c2:5f:08:89:
         15:20:9c:90:7a:09:da:6e:79:b8:17:ff:08:f7:68:ef:ae:ab:
         0d:95:40:42:16:13:bd:51:ad:54:fe:cd:8b:0d:5e:6a:17:d0:
         fe:8c:10:1b:95:6c:1e:98:c7:48:3a:53:89:00:c9:e2:fc:89:
         38:53:1f:a7:c6:9e:2c:f8:e1:6a:7c:1f:ab:0f:23:d1:e9:3f:
         a0:9e:b6:5a:69:af:ac:90:89:fc:ca:3b:f5:7a:77:37:8e:c1:
         94:4a:6a:60:b8:a4:30:59:9a:59:be:5f:39:6b:de:6b:7b:14:
         e9:f5:4a:40:5e:28:28:1a:ef:28:93:b5:61:0a:bf:bc:e3:d3:
         c3:3d:a6:50:a4:55:21:f1:3e:98:0a:cb:ae:25:ad:b0:2f:e1:
         64:ee:f6:5c:ea:1b:e7:77:ac:2b:03:63:fe:6b:ed:0c:c5:67:
         65:78:7a:4b:74:b9:2f:5e:9b:6e:c7:c0:3d:d4:de:49:58:32:
         90:29:46:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:52:41 2025 by rpki-client