Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138312e34342e302e302f31342d3234203d3e203237373437.roa
File:                     3138312e34342e302e302f31342d3234203d3e203237373437.roa (raw, json)
Hash identifier:          ZJcsUu4ZPKNhB9Hmci7GxDH0Pqai0QlwnnZHMXrk9yw=
Subject key identifier:   C5:E2:C4:CC:07:2D:A0:91:57:94:B2:E0:29:A9:33:20:BD:68:E2:EC
Certificate issuer:       /CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
Certificate serial:       22C77B5DBB14A3E7A6D2D7311642198069CE6A8B
Authority key identifier: 2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138312e34342e302e302f31342d3234203d3e203237373437.roa
Signing time:             Tue 05 Mar 2024 17:52:54 +0000
ROA not before:           Tue 05 Mar 2024 17:47:54 +0000
ROA not after:            Tue 04 Mar 2025 17:52:54 +0000
asID:                     27747
IP address blocks:        181.44.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c7:7b:5d:bb:14:a3:e7:a6:d2:d7:31:16:42:19:80:69:ce:6a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89
        Validity
            Not Before: Mar  5 17:47:54 2024 GMT
            Not After : Mar  4 17:52:54 2025 GMT
        Subject: CN=C5E2C4CC072DA0915794B2E029A93320BD68E2EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:b9:61:75:fc:96:8b:4c:c5:d5:b2:0f:4a:
                    d2:4c:dd:ca:99:01:e9:4e:b1:ec:2f:74:31:f3:3c:
                    b1:9a:dd:8b:6b:61:cc:82:25:a1:10:09:bd:30:01:
                    01:0b:e1:ec:50:0c:af:9a:a7:0a:2f:05:00:e6:d1:
                    76:67:2e:d2:66:8a:c9:a2:f7:0d:a9:6d:db:53:ba:
                    5f:76:a5:85:80:b7:5a:df:90:ef:8d:09:8d:34:df:
                    11:b3:43:3c:4e:1d:78:9f:75:80:0c:a4:b4:eb:eb:
                    c8:48:13:fc:93:02:46:78:6b:92:9e:77:0d:69:44:
                    40:f9:3e:c0:fe:0a:dd:1c:48:7f:91:52:a9:76:1f:
                    aa:29:19:84:16:4f:2a:1d:9b:7c:4f:54:82:33:e4:
                    83:2c:2d:49:6b:45:f4:41:d6:4c:a1:3a:b2:c8:16:
                    bb:17:fc:70:f4:a0:bd:ce:d3:41:a8:87:c6:40:ef:
                    48:a6:71:3b:32:c6:ef:d5:0b:86:22:2d:db:38:6a:
                    80:a3:6c:13:40:2a:81:60:bb:15:17:fd:72:22:82:
                    05:ac:f8:ef:2e:34:3f:13:2a:a5:c0:ea:4e:8b:df:
                    7c:b4:36:95:f8:87:81:ce:3d:9d:2e:ad:cf:6a:77:
                    46:87:ac:99:78:df:e9:e8:70:91:0b:e5:53:26:d6:
                    c4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E2:C4:CC:07:2D:A0:91:57:94:B2:E0:29:A9:33:20:BD:68:E2:EC
            X509v3 Authority Key Identifier:
                keyid:2C:09:96:B2:CA:51:69:CE:A2:CE:5B:99:EA:E2:4D:BE:CD:A3:7C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C0996B2CA5169CEA2CE5B99EAE24DBECDA37C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05DE10193EA69825A80D66FF6CDA6A07515E86293506DAA9B559CF742E8AD847/0/3138312e34342e302e302f31342d3234203d3e203237373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.44.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         0f:e2:ba:49:66:f8:3c:c8:d6:3d:85:dc:1f:1e:61:9c:67:48:
         58:8e:77:11:57:01:44:33:66:66:d1:1c:34:df:1b:64:8f:1e:
         54:c1:81:92:53:46:cd:c4:a1:67:7d:d6:9d:18:9e:7b:02:ed:
         ab:b7:3a:ac:bc:0c:60:e5:17:6a:6e:28:68:de:94:cb:98:4a:
         28:8f:44:55:2c:03:e1:f0:c3:2d:9d:38:cb:d9:a2:69:d9:15:
         95:17:d0:50:f8:66:c7:c4:b3:c7:44:71:b1:b3:17:c3:de:5e:
         a6:dc:62:99:a0:35:b0:91:78:7a:1b:78:eb:4d:29:56:41:54:
         86:0d:3e:b5:92:27:45:38:85:b9:ae:bd:27:87:d2:db:6a:5d:
         4b:8d:69:79:21:53:aa:19:0b:2e:ea:6a:3d:31:ea:5d:14:e8:
         58:58:d7:c2:f5:f5:2c:ac:d4:58:c5:9b:7d:94:9c:42:26:85:
         65:26:21:37:01:0f:f9:7c:d3:92:92:ae:e4:ab:0c:40:ca:d0:
         35:8f:7b:18:6a:60:4c:4f:92:e7:17:78:66:84:b2:f5:83:fe:
         83:70:a6:13:75:23:89:01:3a:a7:e6:57:0b:b8:99:74:a7:e6:
         4f:55:b1:01:b2:be:ee:ec:6a:6f:ed:90:6d:d3:41:4d:01:3d:
         05:4b:fe:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:42 2024 by rpki-client on console-fra.rpki-client.org