Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e33382e302e302f31362d3234203d3e203134373534.roa
File:                     3138312e33382e302e302f31362d3234203d3e203134373534.roa (raw, json)
Hash identifier:          ejuXj7darS/Rsh02JUSQYqJSQt6zouFdjZ+IoWEH08s=
Subject key identifier:   C4:A9:25:55:42:BC:19:A6:7B:2F:6F:51:90:C9:5F:04:B8:A0:C9:2F
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       0FD362D201416DC173FDFF1D2AD060DA32C01196
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e33382e302e302f31362d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 18:18:11 +0000
ROA not before:           Tue 05 Mar 2024 18:13:11 +0000
ROA not after:            Tue 04 Mar 2025 18:18:11 +0000
asID:                     14754
IP address blocks:        181.38.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d3:62:d2:01:41:6d:c1:73:fd:ff:1d:2a:d0:60:da:32:c0:11:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Mar  5 18:13:11 2024 GMT
            Not After : Mar  4 18:18:11 2025 GMT
        Subject: CN=C4A9255542BC19A67B2F6F5190C95F04B8A0C92F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f7:fc:b7:83:28:6d:45:ef:d0:a1:f6:2a:0e:
                    bb:28:32:bf:98:7b:45:02:21:d8:ff:c7:de:7f:a8:
                    64:c5:7c:7b:fa:4d:51:2d:3b:6c:7d:2b:77:1c:8e:
                    94:f1:79:0a:93:38:cb:94:01:15:bf:64:27:b7:1d:
                    fe:3b:d1:d6:41:b5:4b:5b:1e:98:57:77:9a:e2:f3:
                    e5:ae:8e:84:48:80:fa:5e:54:04:9e:d7:ae:61:eb:
                    8d:f8:c8:22:68:a3:66:06:b7:fc:12:38:c8:19:6f:
                    40:2e:7e:ab:b7:c0:30:b9:cb:a8:96:d0:dd:4e:2b:
                    dc:3c:03:ba:db:d5:06:ef:81:4d:f0:79:b8:83:bb:
                    58:20:ae:6e:32:4e:c2:c1:bb:3e:1e:03:b0:4c:a6:
                    96:5e:c6:00:8f:29:73:4d:51:cd:d0:1e:bd:74:24:
                    c3:44:45:47:1c:68:1f:91:ac:1d:d5:97:b6:f0:30:
                    98:50:96:ea:1a:1f:3e:47:75:a7:ad:ed:f2:3e:b4:
                    cb:c5:ff:8f:08:a5:bb:2d:64:6d:d3:12:d7:40:83:
                    99:8e:28:a9:d9:53:a9:34:51:11:a3:79:27:01:ff:
                    68:96:80:e2:8c:44:7f:82:df:23:4e:f1:dc:db:31:
                    d6:a4:a4:67:58:27:43:91:e4:23:65:7c:bd:40:50:
                    a3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A9:25:55:42:BC:19:A6:7B:2F:6F:51:90:C9:5F:04:B8:A0:C9:2F
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e33382e302e302f31362d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.38.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         92:0a:ff:56:b8:63:e3:60:ed:09:b1:03:51:6b:66:cd:96:02:
         e1:81:fb:3d:d8:b1:b6:eb:f0:51:5e:e0:b1:1d:0e:30:4d:9a:
         77:c5:de:f8:11:42:2a:3d:69:22:44:c3:9b:94:6f:8b:54:28:
         ef:1f:6f:6c:44:67:d7:73:40:71:ae:80:c7:bb:89:e6:d9:54:
         f4:8e:ee:09:81:fe:2c:aa:6b:ca:8b:b4:a8:5e:3c:63:fa:f0:
         e2:5e:6f:c0:09:c5:82:dc:6d:97:9a:76:4f:ca:56:62:25:26:
         5b:08:03:36:04:4e:bb:df:d9:db:1b:52:9b:65:12:48:40:94:
         20:ce:a4:cf:2c:18:17:34:d5:ed:12:bd:2e:c9:57:49:d5:4c:
         38:8d:07:c2:e5:45:1e:9a:35:a4:bb:c5:4a:af:ba:32:a1:11:
         a6:14:21:a4:cd:6f:b6:b9:01:f6:08:71:8c:da:2d:16:0d:7b:
         7a:29:46:c6:e2:27:d1:fa:32:f3:ac:c9:33:8a:27:dd:33:3c:
         21:cc:50:8d:77:e6:67:82:aa:54:2c:85:95:a6:47:1e:35:07:
         1a:e7:96:42:c3:95:ba:f9:d8:e6:55:c4:ff:e6:4d:fb:94:6c:
         6e:90:1e:c2:e9:42:11:85:13:10:9d:ce:6c:d9:d8:d6:87:bf:
         65:41:74:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:16 2024 by rpki-client on console-fra.rpki-client.org