Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3138312e3139392e3137362e302f32302d3234203d3e203238303838.roa
File:                     3138312e3139392e3137362e302f32302d3234203d3e203238303838.roa (raw, json)
Hash identifier:          Ud1IaqzU8auWPfWZ7NYSrnRN+ubRaLitHSPRvQOXSAU=
Subject key identifier:   45:72:9A:FF:14:06:39:CE:9F:41:43:DE:18:B1:1B:AE:DD:30:78:1A
Certificate issuer:       /CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227
Certificate serial:       24D56E94F8A3DB16178C193DC1DB5EC1312DF3D8
Authority key identifier: 2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3138312e3139392e3137362e302f32302d3234203d3e203238303838.roa
Signing time:             Tue 05 Mar 2024 18:09:23 +0000
ROA not before:           Tue 05 Mar 2024 18:04:23 +0000
ROA not after:            Tue 04 Mar 2025 18:09:23 +0000
asID:                     28088
IP address blocks:        181.199.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Oct 2024 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d5:6e:94:f8:a3:db:16:17:8c:19:3d:c1:db:5e:c1:31:2d:f3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED42DFF196F3F11B82464DE1FB7DDD1793DD227
        Validity
            Not Before: Mar  5 18:04:23 2024 GMT
            Not After : Mar  4 18:09:23 2025 GMT
        Subject: CN=45729AFF140639CE9F4143DE18B11BAEDD30781A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c9:6a:08:00:07:01:f0:b8:9e:54:47:98:67:
                    3c:4f:da:09:de:2f:00:62:4e:4c:4c:a5:04:66:1e:
                    be:6a:22:e7:30:8b:5a:d1:69:f2:0b:63:d7:a1:bb:
                    f9:45:37:97:d9:9d:0d:ac:8b:d7:c8:5e:a8:ec:8d:
                    08:c7:88:8f:5d:17:38:f5:53:5f:8f:a9:41:ee:b9:
                    d4:9a:f7:82:1d:0a:72:3e:9c:a8:c9:07:56:c0:a6:
                    97:81:19:63:22:d0:67:40:13:fe:7b:b9:19:2a:04:
                    16:04:15:f0:6d:fd:e8:ec:99:cf:8c:ec:1f:3e:2c:
                    30:24:79:97:9c:cc:34:a9:35:a1:e3:06:64:fe:d8:
                    a1:35:4f:4d:c3:87:17:7d:1f:83:75:2f:30:3e:c3:
                    c9:a8:af:1f:a3:ec:4c:1a:6a:74:f0:ae:e2:8a:18:
                    8e:b5:f6:81:f4:ab:85:11:5a:3f:b5:d8:9a:a7:12:
                    64:3a:58:6a:70:15:d5:6c:23:68:55:38:47:3d:4f:
                    7c:97:42:82:46:51:13:e8:fc:ab:72:09:ea:43:7d:
                    39:77:da:d3:94:bf:9c:6b:c6:1d:09:93:ca:50:39:
                    86:18:a9:da:d7:6e:df:30:a7:98:22:27:1b:8a:f2:
                    a4:28:76:16:eb:cb:7b:fb:cf:82:d8:78:c8:fe:90:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:72:9A:FF:14:06:39:CE:9F:41:43:DE:18:B1:1B:AE:DD:30:78:1A
            X509v3 Authority Key Identifier:
                keyid:2E:D4:2D:FF:19:6F:3F:11:B8:24:64:DE:1F:B7:DD:D1:79:3D:D2:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED42DFF196F3F11B82464DE1FB7DDD1793DD227.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3A4BF7D183720DD957CA93C4E07F4DEFB10388FC59FE80E3EA8F15C4094461B/0/3138312e3139392e3137362e302f32302d3234203d3e203238303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:b6:f3:e7:aa:9e:04:4c:e6:1e:da:c6:21:13:39:6c:48:c9:
         3e:cb:67:d6:3a:df:5a:3e:50:6c:20:1b:e5:1c:0e:5c:49:13:
         e4:59:9c:3d:40:45:69:3d:c1:a4:a0:32:01:e3:33:0d:fa:27:
         10:29:7d:8e:72:c5:02:ee:56:98:ad:74:cd:0a:f2:01:c5:7b:
         eb:44:bf:61:66:7d:42:7e:f3:0c:32:23:f8:e3:87:66:e5:75:
         e5:e3:15:2d:55:7c:b9:c1:48:7e:02:4d:b5:6f:cd:12:1f:cb:
         2c:da:59:f2:c5:0d:f3:3e:8a:48:81:84:5f:a0:a7:70:40:3c:
         89:d0:6d:32:a3:e2:a3:bb:fa:f5:5f:6b:ad:87:58:97:8d:6d:
         da:64:79:0b:9a:10:1f:98:74:04:66:db:26:35:64:a6:30:ac:
         db:03:03:1a:d3:91:3f:75:b0:5a:d2:45:ab:7a:59:06:02:bf:
         16:6f:bc:12:0f:7a:8f:d1:d9:bc:76:d2:da:41:0f:5a:e5:59:
         2a:4d:d0:28:4a:d9:70:2b:07:ee:3e:f5:21:d3:cd:e3:7f:5c:
         cf:a3:89:ae:ea:86:ec:a5:11:dd:20:81:c1:bb:a3:18:63:24:
         0a:2a:7a:31:4b:e0:20:08:ed:fb:89:c0:09:63:75:69:2d:26:
         71:88:b9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 09:15:39 2024 by rpki-client on console-fra.rpki-client.org