Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130322e302f32332d3233203d3e20323633373530.roa
File:                     3133382e39392e3130322e302f32332d3233203d3e20323633373530.roa (raw, json)
Hash identifier:          ldZcm0mDP9YyFj2KOUOmXzJm1vjkG5VGC4j9RLKe60A=
Subject key identifier:   22:A5:3F:91:4C:05:C9:00:32:0C:9C:33:7E:95:2C:CB:84:D6:E8:62
Certificate issuer:       /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial:       43E76C1AF6C4B7E2AC8E10D96F03266491846806
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130322e302f32332d3233203d3e20323633373530.roa
Signing time:             Thu 29 May 2025 21:20:31 +0000
ROA not before:           Thu 29 May 2025 21:15:31 +0000
ROA not after:            Thu 28 May 2026 21:20:31 +0000
asID:                     263750
IP address blocks:        138.99.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Jul 2025 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e7:6c:1a:f6:c4:b7:e2:ac:8e:10:d9:6f:03:26:64:91:84:68:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
        Validity
            Not Before: May 29 21:15:31 2025 GMT
            Not After : May 28 21:20:31 2026 GMT
        Subject: CN=22A53F914C05C900320C9C337E952CCB84D6E862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7d:3c:25:58:20:6c:e3:e0:a1:c8:3b:0c:3a:
                    90:82:14:59:5f:79:42:a9:dc:43:23:a4:d5:c2:73:
                    19:f8:0e:e6:51:2f:e5:68:50:a2:ee:44:13:a3:98:
                    ab:89:99:22:3d:32:4e:0d:c1:15:2c:40:75:c4:0a:
                    69:79:38:da:b6:50:69:08:76:65:35:b1:6f:24:0a:
                    ef:35:69:91:e0:dd:62:0c:5d:1f:bd:35:b5:d0:5d:
                    c8:17:11:43:f9:38:c0:18:8c:f0:ad:35:96:6c:57:
                    00:94:e7:71:9a:2d:86:c5:de:07:c1:f8:f8:f3:98:
                    0a:23:c2:02:1a:cd:3a:c6:d7:e7:f3:fc:e8:f8:80:
                    f8:ad:87:9b:63:1b:65:ef:41:3b:d4:a8:6d:0e:4d:
                    f0:8b:6b:cf:28:77:63:78:d3:f8:df:22:cf:37:fb:
                    bb:da:6e:03:2c:56:f8:1a:34:c5:8c:66:f9:9a:b2:
                    79:5a:e8:29:33:6d:4c:51:33:d1:86:9c:c9:a7:fd:
                    7d:66:ca:43:0d:7d:fd:2e:23:6a:f2:13:cf:b4:07:
                    0c:0a:a6:ed:c8:54:6c:91:c8:90:7b:ff:ac:de:28:
                    a9:40:ee:0c:78:4c:01:6e:bc:8d:9b:c0:bd:49:08:
                    34:ed:17:ba:f4:f9:f0:36:2b:ac:2a:f5:22:0f:f8:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A5:3F:91:4C:05:C9:00:32:0C:9C:33:7E:95:2C:CB:84:D6:E8:62
            X509v3 Authority Key Identifier:
                keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130322e302f32332d3233203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:08:80:4d:c3:19:7d:a5:a6:21:0e:d3:a0:43:04:ae:88:71:
         97:b7:ee:87:97:e6:89:64:86:c9:0b:3f:34:a0:bf:7b:c5:83:
         dc:24:9a:db:98:35:1d:82:19:0b:67:bf:15:90:70:32:5b:a1:
         56:7e:b1:12:29:6b:fa:43:d9:3d:93:5a:73:10:33:85:60:5d:
         55:88:98:a4:49:e2:93:eb:cb:2b:5b:62:5c:66:0b:12:a6:c2:
         a2:17:fb:1f:ee:d6:6e:f1:67:90:fd:43:8b:f9:b6:9e:a0:c2:
         d7:76:47:a7:48:91:4c:55:bd:29:5d:c3:cb:6d:ef:33:2a:62:
         d2:44:67:92:46:63:fb:06:75:18:d1:ad:c3:a5:7d:a8:1e:5b:
         cd:4a:4b:12:0b:31:57:a3:12:1b:f4:2f:ce:8e:fc:1e:9e:67:
         62:a0:3c:46:4a:8e:de:2d:ed:1c:99:e5:05:af:2f:29:73:00:
         30:6c:48:a3:3e:e1:0b:cf:96:4d:be:86:4f:f0:57:ac:70:e6:
         e4:33:06:ea:6b:49:67:c7:55:02:c6:dc:49:07:71:a7:50:6b:
         90:33:29:ce:89:31:8f:33:e2:57:5c:4f:11:cf:65:6b:65:01:
         05:9a:f5:23:fd:fb:78:0e:aa:91:6c:f6:76:4a:3f:30:0b:eb:
         d2:5b:47:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 00:28:12 2025 by rpki-client