Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134372e302f32342d3234203d3e20323632323837.roa
File:                     3133382e39392e3134372e302f32342d3234203d3e20323632323837.roa (raw, json)
Hash identifier:          5i019AUoTyPSbFKwS4/TE8DGcM5iRlWz+XP2Fx+Xu6A=
Subject key identifier:   75:F5:FB:C2:17:49:C3:A9:75:D6:51:C1:49:A5:18:39:C5:D5:D7:E1
Certificate issuer:       /CN=EBC77018588D7C3C87C3E13D71293177455EE57D
Certificate serial:       301EE0F6EE1181492064357E68D1AD0D78B142C5
Authority key identifier: EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134372e302f32342d3234203d3e20323632323837.roa
Signing time:             Sat 17 May 2025 13:45:00 +0000
ROA not before:           Sat 17 May 2025 13:40:00 +0000
ROA not after:            Sat 16 May 2026 13:45:00 +0000
asID:                     262287
IP address blocks:        138.99.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 18:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1e:e0:f6:ee:11:81:49:20:64:35:7e:68:d1:ad:0d:78:b1:42:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC77018588D7C3C87C3E13D71293177455EE57D
        Validity
            Not Before: May 17 13:40:00 2025 GMT
            Not After : May 16 13:45:00 2026 GMT
        Subject: CN=75F5FBC21749C3A975D651C149A51839C5D5D7E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:2c:1f:9e:4d:77:ee:f3:47:a2:e6:d3:06:
                    a8:64:cc:8e:6d:dc:f2:fb:82:32:db:21:16:57:9f:
                    68:7f:4d:d4:d7:77:d6:f3:5b:d1:74:a7:ff:60:50:
                    d3:73:90:ed:88:2a:c8:f8:7f:f8:a6:9f:f1:ea:cd:
                    2b:92:e9:0f:1e:6c:56:88:ba:11:ff:93:36:37:e3:
                    27:e7:5a:67:a6:40:44:de:83:7f:4d:96:d7:a5:50:
                    7d:46:f3:97:eb:20:43:b0:19:97:d9:d0:ce:a4:2b:
                    aa:f8:50:43:c2:3e:83:c7:cf:c6:c6:f2:07:93:cc:
                    21:97:01:f6:3d:ae:2f:ad:bb:56:03:8c:e8:d8:58:
                    c0:a1:aa:f8:ca:ca:ee:9c:61:5b:8e:27:7d:0c:74:
                    73:42:d5:5a:51:08:03:f6:8b:ea:57:ad:8c:e7:0a:
                    17:bb:71:2f:00:78:f5:07:25:65:ab:86:4d:b7:bd:
                    8c:fb:d5:2a:f9:c7:2a:db:1f:4a:16:9a:d6:d9:0b:
                    84:fe:d1:49:c5:56:de:d1:f6:5b:b4:a5:46:15:ac:
                    10:8e:73:ce:45:cd:fc:63:53:21:a7:90:a2:a4:03:
                    64:56:ad:6b:b7:2b:82:61:35:2e:47:1e:05:92:3b:
                    e6:38:21:f7:4c:d2:dc:a6:0a:c6:7d:95:a8:c6:fb:
                    28:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F5:FB:C2:17:49:C3:A9:75:D6:51:C1:49:A5:18:39:C5:D5:D7:E1
            X509v3 Authority Key Identifier:
                keyid:EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134372e302f32342d3234203d3e20323632323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:80:0b:8b:45:d1:4e:60:c2:13:3a:b5:72:05:65:74:86:4c:
         5a:6b:8e:08:6e:f3:19:b9:cb:2e:36:d1:0c:9a:ea:f6:d4:93:
         14:86:3d:7a:76:6c:b4:ac:4d:19:36:84:ff:08:97:a5:b9:83:
         14:c2:36:0f:96:f9:7b:26:9f:a5:fd:b2:49:2c:3c:f8:11:74:
         97:b2:80:15:5c:4b:ea:89:ca:16:dc:49:1d:b1:c5:a5:14:d7:
         ef:f6:51:a4:17:cb:77:1e:90:da:9a:04:0f:09:99:c8:d6:31:
         5a:82:f5:2b:dc:b0:70:fe:5a:01:e3:f4:86:27:41:94:25:92:
         b9:44:aa:25:3c:f9:23:eb:98:c3:3a:ba:77:c2:28:5b:90:11:
         ec:21:f1:6a:06:ad:9f:6a:24:1f:3d:56:e4:6a:97:bf:fb:49:
         5b:0a:79:65:1a:d2:85:a0:0a:7b:6e:15:c5:61:1b:22:e7:f0:
         9a:cb:a4:8f:54:8c:63:31:47:ac:26:64:08:0b:bf:4c:68:c0:
         8f:9d:92:f3:ed:59:73:34:bd:c0:2a:95:c9:f0:4d:cc:ae:e4:
         b3:1d:52:d1:c0:2b:23:04:95:ec:e2:aa:bb:74:8a:1c:32:23:
         0c:d3:74:d6:eb:db:d7:57:c4:f7:d8:2e:e6:e9:cc:96:68:65:
         ee:a1:cc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 11:04:29 2025 by rpki-client