Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/3138312e3137342e3232342e302f32322d3234203d3e20323732303539.roa
File:                     3138312e3137342e3232342e302f32322d3234203d3e20323732303539.roa (raw, json)
Hash identifier:          dae1Ys2mjW0pNEDYBH9C+kFWLDApH4ww56ytHJP1XsE=
Subject key identifier:   1D:D1:6A:6A:F8:D1:0E:9E:A2:9E:0D:5D:28:3A:8C:AE:09:59:B1:C5
Certificate issuer:       /CN=4B4905962394174DB3A50FE565148CE8821022EC
Certificate serial:       6BE190D165F01B1BA1B3D5B3436520D5DFB26294
Authority key identifier: 4B:49:05:96:23:94:17:4D:B3:A5:0F:E5:65:14:8C:E8:82:10:22:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B4905962394174DB3A50FE565148CE8821022EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/3138312e3137342e3232342e302f32322d3234203d3e20323732303539.roa
Signing time:             Tue 05 Mar 2024 18:07:11 +0000
ROA not before:           Tue 05 Mar 2024 18:02:11 +0000
ROA not after:            Tue 04 Mar 2025 18:07:11 +0000
asID:                     272059
IP address blocks:        181.174.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/4B4905962394174DB3A50FE565148CE8821022EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/4B4905962394174DB3A50FE565148CE8821022EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B4905962394174DB3A50FE565148CE8821022EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e1:90:d1:65:f0:1b:1b:a1:b3:d5:b3:43:65:20:d5:df:b2:62:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B4905962394174DB3A50FE565148CE8821022EC
        Validity
            Not Before: Mar  5 18:02:11 2024 GMT
            Not After : Mar  4 18:07:11 2025 GMT
        Subject: CN=1DD16A6AF8D10E9EA29E0D5D283A8CAE0959B1C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:88:7d:74:09:43:d0:e6:9a:f0:9f:0b:15:
                    4c:f6:69:90:b7:3b:22:10:03:c3:3d:0e:30:48:7c:
                    a4:48:35:c6:16:16:9e:5c:70:16:6e:54:73:e3:cf:
                    7c:20:47:e8:23:64:ef:83:86:0b:31:19:ea:4b:95:
                    e2:59:6a:27:19:d6:90:f7:76:91:2b:30:c8:4b:df:
                    f9:91:00:5c:a0:61:90:74:25:8b:72:96:ef:50:5b:
                    82:2c:96:7b:72:7a:67:09:8b:01:88:55:ec:d2:ef:
                    95:e5:c8:37:e7:45:ca:8f:c1:fd:25:31:eb:7a:06:
                    0d:30:01:44:08:a8:12:14:38:7e:ca:0d:cf:f0:e3:
                    8e:9e:af:22:86:d3:fb:37:c8:64:24:8d:94:93:50:
                    37:69:43:50:48:0f:e0:38:e1:04:57:8c:5d:d2:1e:
                    05:29:ae:30:8f:35:9a:58:28:aa:be:e1:a1:0b:f8:
                    8b:a9:a1:c8:7d:2e:f5:3c:a3:dc:e1:66:26:12:de:
                    53:fa:23:f2:ea:74:a2:69:06:fb:4c:ce:02:f2:aa:
                    89:dc:89:c7:fb:ff:19:45:aa:83:2f:cb:18:19:36:
                    15:f7:3e:83:01:54:e2:53:4d:0e:fd:6b:f3:95:a6:
                    62:21:cc:da:b5:53:06:57:e9:c3:fd:1b:6b:f3:c4:
                    5f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D1:6A:6A:F8:D1:0E:9E:A2:9E:0D:5D:28:3A:8C:AE:09:59:B1:C5
            X509v3 Authority Key Identifier:
                keyid:4B:49:05:96:23:94:17:4D:B3:A5:0F:E5:65:14:8C:E8:82:10:22:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/4B4905962394174DB3A50FE565148CE8821022EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B4905962394174DB3A50FE565148CE8821022EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/064DB5FFE31B39723D1C044052FD1146984F45E9D66B08AC418FFA7DB7CCDDCE/0/3138312e3137342e3232342e302f32322d3234203d3e20323732303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:b9:0c:cb:77:68:4d:b2:23:e8:d2:9c:fd:25:7f:0f:ba:f2:
         dc:83:16:83:74:c1:fb:4d:a7:ac:00:84:e0:1c:02:0a:db:ce:
         70:13:af:f4:50:a6:15:84:09:bd:f2:20:d6:46:ee:3a:b6:96:
         2d:16:55:d8:0d:ec:be:75:af:e7:d9:49:6b:71:67:e6:c7:fa:
         26:65:1e:13:3b:ba:7f:11:e3:c9:71:3e:3d:d9:ce:6d:2e:c8:
         60:d7:ef:af:90:4f:22:98:98:e5:6d:72:8c:fe:79:4e:87:30:
         95:8d:ee:32:b7:70:05:0e:b6:aa:75:76:9a:e9:25:3c:e3:77:
         eb:06:82:34:84:7e:76:f7:cc:fd:93:01:b3:7b:ce:ee:24:49:
         b4:4a:ef:1a:d2:87:c1:e9:49:30:a0:2c:23:88:cd:6e:fb:64:
         a9:ae:a5:7b:df:26:2f:9b:34:fd:dc:89:dd:b1:44:0b:06:58:
         bd:f1:ea:71:35:dd:70:86:06:5f:ad:c5:6f:f4:ac:00:0b:7a:
         c5:9c:e2:9c:cc:c0:56:4d:48:ba:77:7f:65:8f:d3:67:fa:23:
         ce:e4:a6:2f:67:44:5b:39:a2:5b:90:59:c9:64:6f:b6:86:40:
         67:7c:b6:54:e4:9c:b6:86:5e:2e:66:06:4b:b9:c9:0f:e9:71:
         ba:1a:5c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 11:41:15 2024 by rpki-client on console-ams.rpki-client.org