Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130332e302f32342d3234203d3e20323633373530.roa
File:                     3133382e39392e3130332e302f32342d3234203d3e20323633373530.roa (raw, json)
Hash identifier:          4FRLE3MmUIS44rTCd3gQK6Ob/u9yorD00AhD8gFyoEc=
Subject key identifier:   E2:88:A5:CF:4D:1E:25:6C:7D:13:22:13:84:53:4C:E2:B3:D1:F0:ED
Certificate issuer:       /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial:       A8E5FB060B72861C47765BB24D00EBAE059F4C
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130332e302f32342d3234203d3e20323633373530.roa
Signing time:             Thu 29 May 2025 21:20:33 +0000
ROA not before:           Thu 29 May 2025 21:15:33 +0000
ROA not after:            Thu 28 May 2026 21:20:33 +0000
asID:                     263750
IP address blocks:        138.99.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 09:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a8:e5:fb:06:0b:72:86:1c:47:76:5b:b2:4d:00:eb:ae:05:9f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
        Validity
            Not Before: May 29 21:15:33 2025 GMT
            Not After : May 28 21:20:33 2026 GMT
        Subject: CN=E288A5CF4D1E256C7D13221384534CE2B3D1F0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:8a:d5:83:2e:bd:df:a5:c8:93:34:9f:dc:
                    ea:cf:25:fd:36:e7:e7:86:40:8e:67:c9:ae:4d:2a:
                    42:53:cb:d7:6e:7e:9d:2e:46:5a:c1:ed:c8:4a:c7:
                    6b:e5:28:78:e8:9e:34:af:5b:4c:9c:af:62:09:35:
                    14:9f:98:99:be:59:ab:05:ca:29:17:78:54:a7:84:
                    c6:26:b6:fe:ac:89:9e:e1:f0:07:30:2c:55:2c:08:
                    16:38:47:a4:d4:be:b9:1c:31:7c:9d:2d:8b:0f:6c:
                    da:ed:f8:27:7e:f0:28:b5:72:5a:3b:70:d5:42:24:
                    f9:a5:65:c5:5d:df:6f:05:e9:38:ce:b1:16:fb:b3:
                    fd:e4:5c:ea:f5:e7:08:3d:6e:2b:f5:a7:37:af:4c:
                    9d:c5:e8:24:98:b6:eb:e9:e7:3e:39:65:59:6b:ac:
                    19:f3:12:84:b7:5f:1c:bc:af:b7:56:72:67:a7:d1:
                    49:98:5c:13:34:ba:2a:3c:a5:5a:7f:2e:d3:9d:91:
                    de:89:5f:cd:0c:da:31:99:7f:c7:d5:10:17:bc:cf:
                    05:3c:17:fd:89:a9:7f:7e:e5:26:d8:67:1b:44:e3:
                    85:fb:b2:ac:89:75:21:6f:b3:8c:e5:fd:c3:4a:7d:
                    f9:8e:06:f7:ca:44:77:c5:76:08:33:55:fd:95:49:
                    f1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:88:A5:CF:4D:1E:25:6C:7D:13:22:13:84:53:4C:E2:B3:D1:F0:ED
            X509v3 Authority Key Identifier:
                keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130332e302f32342d3234203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:c3:89:91:69:f7:33:c2:e7:1c:6b:3b:54:04:66:39:dc:f1:
         b3:a8:12:34:b6:4d:81:4a:b2:cd:51:cd:9f:97:fa:cd:8d:66:
         ff:7b:e1:28:26:b4:98:9e:91:5a:14:be:1a:16:4a:dc:41:61:
         2f:f3:39:61:56:3c:b6:70:84:3b:c2:2a:45:df:1c:ea:61:df:
         6b:2f:f0:78:04:14:37:da:b6:ca:8b:43:f9:26:dd:84:8a:01:
         62:80:14:0f:e3:b8:02:f0:7a:e0:27:91:38:94:62:35:df:5d:
         6f:da:95:91:da:e8:21:dd:15:91:10:27:81:5f:ec:cb:c5:0b:
         b9:fb:c6:0e:b5:02:7a:c6:c1:f9:22:f0:04:69:1a:4a:66:af:
         34:d9:6d:19:6c:9b:9f:4e:9c:b1:ee:86:e9:55:4b:31:ac:71:
         cd:bb:44:14:f5:f0:2d:ac:f2:e3:32:fe:a6:cb:83:a3:32:c1:
         3a:45:05:42:cc:3f:94:01:96:fd:fc:ef:50:3b:80:ee:7b:b6:
         e7:8e:81:17:5a:71:36:90:ad:7a:d6:cb:5e:a1:2a:de:fc:e5:
         d6:0f:97:66:f9:48:b2:16:95:8f:e9:0c:be:e4:c2:c2:f9:48:
         f5:9f:db:ea:73:e5:64:e2:0d:de:79:8e:be:df:98:56:16:13:
         f0:ee:d8:83
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUAKjl+wYLcoYcR3Zbsk0A664Fn0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZCNDdCQTAyQURCQzE2MTNEQjIwRjFCNUVDM0ExQUM3
NEM1MjUwOTAeFw0yNTA1MjkyMTE1MzNaFw0yNjA1MjgyMTIwMzNaMDMxMTAvBgNV
BAMTKEUyODhBNUNGNEQxRTI1NkM3RDEzMjIxMzg0NTM0Q0UyQjNEMUYwRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6iIrVgy6936XIkzSf3OrPJf02
5+eGQI5nya5NKkJTy9dufp0uRlrB7chKx2vlKHjonjSvW0ycr2IJNRSfmJm+WasF
yikXeFSnhMYmtv6siZ7h8AcwLFUsCBY4R6TUvrkcMXydLYsPbNrt+Cd+8Ci1clo7
cNVCJPmlZcVd328F6TjOsRb7s/3kXOr15wg9biv1pzevTJ3F6CSYtuvp5z45ZVlr
rBnzEoS3Xxy8r7dWcmen0UmYXBM0uio8pVp/LtOdkd6JX80M2jGZf8fVEBe8zwU8
F/2JqX9+5SbYZxtE44X7sqyJdSFvs4zl/cNKffmOBvfKRHfFdggzVf2VSfE7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU4oilz00eJWx9EyIThFNM4rPR8O0wHwYDVR0j
BBgwFoAUL7R7oCrbwWE9sg8bXsOhrHTFJQkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQTc3MkE1RUEyNTI2MjQwNDQ4NDM4MThBQjhEQUI5REZG
Q0I3MzQ2QzlEMkUxRTVDQTkzRkRFOUJBQUE5MkI0LzAvMkZCNDdCQTAyQURCQzE2
MTNEQjIwRjFCNUVDM0ExQUM3NEM1MjUwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkI0N0JBMDJBREJDMTYxM0RC
MjBGMUI1RUMzQTFBQzc0QzUyNTA5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkE3NzJBNUVBMjUyNjI0MDQ0ODQzODE4QUI4REFCOURGRkNCNzM0NkM5
RDJFMUU1Q0E5M0ZERTlCQUFBOTJCNC8wLzMxMzMzODJlMzkzOTJlMzEzMDMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzczNTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAimNn
MA0GCSqGSIb3DQEBCwUAA4IBAQCcw4mRafczwuccaztUBGY53PGzqBI0tk2BSrLN
Uc2fl/rNjWb/e+EoJrSYnpFaFL4aFkrcQWEv8zlhVjy2cIQ7wipF3xzqYd9rL/B4
BBQ32rbKi0P5Jt2EigFigBQP47gC8HrgJ5E4lGI1311v2pWR2ugh3RWRECeBX+zL
xQu5+8YOtQJ6xsH5IvAEaRpKZq802W0ZbJufTpyx7obpVUsxrHHNu0QU9fAtrPLj
Mv6my4OjMsE6RQVCzD+UAZb9/O9QO4Due7bnjoEXWnE2kK161steoSre/OXWD5dm
+UiyFpWP6Qy+5MLC+Uj1n9vqc+Vk4g3eeY6+35hWFhPw7tiD
-----END CERTIFICATE-----
Generated at Sun Jun 22 02:31:56 2025 by rpki-client