Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e3132382e302f31372d3234203d3e203237363531.roa
File:                     3138312e34322e3132382e302f31372d3234203d3e203237363531.roa (raw, json)
Hash identifier:          VdRYm/swbYL20JD0lXQ9SKzhCvyD9oMkSioLiopb128=
Subject key identifier:   02:76:9B:41:07:20:E8:DF:83:AD:63:AC:2A:DE:9D:7D:4D:15:62:67
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       7CD66FA301BECEC1EE9171BBA67FFAFCC31C318F
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e3132382e302f31372d3234203d3e203237363531.roa
Signing time:             Tue 05 Mar 2024 18:17:40 +0000
ROA not before:           Tue 05 Mar 2024 18:12:40 +0000
ROA not after:            Tue 04 Mar 2025 18:17:40 +0000
asID:                     27651
IP address blocks:        181.42.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 May 2024 15:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d6:6f:a3:01:be:ce:c1:ee:91:71:bb:a6:7f:fa:fc:c3:1c:31:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Mar  5 18:12:40 2024 GMT
            Not After : Mar  4 18:17:40 2025 GMT
        Subject: CN=02769B410720E8DF83AD63AC2ADE9D7D4D156267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:b0:bc:9b:8f:b1:df:a8:87:22:20:2a:4e:
                    22:eb:5e:a6:8f:af:37:7d:15:86:fc:cd:4b:04:7b:
                    2a:13:cb:52:aa:ae:48:b6:52:3b:04:3a:82:9c:b5:
                    ea:ac:9c:a2:0d:d1:76:46:63:27:36:60:a7:cb:73:
                    71:45:f6:54:89:74:a0:89:5a:0d:3b:55:0e:e3:b2:
                    56:97:f2:72:43:a1:5d:43:60:93:10:ed:c3:19:53:
                    53:b2:20:4f:9a:a4:89:1e:1e:5a:61:fa:28:31:ec:
                    5c:76:27:41:d6:f5:6d:43:81:39:e7:32:96:86:b1:
                    94:db:e9:26:69:ce:e9:ee:05:41:ec:27:64:ad:34:
                    3d:13:c7:10:cc:48:eb:9c:e6:0e:4f:23:79:35:8e:
                    3f:53:d3:60:22:3e:8c:86:c4:11:8b:a5:cc:2f:e8:
                    fb:f8:b2:aa:e8:49:ee:2c:37:be:80:25:3c:dc:e6:
                    27:21:08:41:d5:73:dc:86:0c:61:92:8d:af:8c:e9:
                    24:d5:6e:b0:91:3e:ef:50:2c:f8:4d:5c:9d:4c:e9:
                    fa:51:71:25:bb:94:4b:ce:4b:52:b4:81:63:67:78:
                    63:f9:b9:78:99:00:e5:a5:83:91:00:81:cc:95:74:
                    9c:4c:10:04:5c:e9:4a:1a:58:9e:f6:1c:35:28:de:
                    f5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:76:9B:41:07:20:E8:DF:83:AD:63:AC:2A:DE:9D:7D:4D:15:62:67
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e3132382e302f31372d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.42.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         66:dd:ed:4c:04:94:14:85:8e:0e:bf:0e:65:36:f3:75:9a:13:
         b2:eb:53:c0:cb:11:9f:2e:6d:c1:66:59:22:ad:8c:2f:d3:5e:
         a4:5a:2b:7b:dc:26:65:f4:57:ea:3d:4a:b7:5f:95:87:ea:5b:
         39:bd:0b:22:56:82:97:13:b3:63:8c:b3:e2:52:66:9b:c9:ee:
         6d:59:07:01:ab:fb:b7:e7:74:b7:e3:4f:2c:72:9c:72:9d:70:
         d3:37:06:ac:eb:28:71:25:88:5a:08:9f:22:e5:94:b5:13:53:
         a8:4a:3c:96:e2:5a:84:d3:d3:c6:02:2a:30:a2:0c:6e:ec:dc:
         b4:71:8d:a7:25:11:e4:01:02:2c:d3:51:61:2e:56:da:56:df:
         6a:f0:cd:60:dc:e8:53:06:ee:e0:31:9c:73:66:eb:2c:5d:fc:
         f8:b5:f9:e4:14:d3:ad:c4:4b:7f:7d:99:1d:83:24:35:d0:d1:
         10:4d:41:5a:fe:5d:f0:47:95:d5:73:93:a8:70:17:cb:2b:78:
         03:a3:87:1f:8c:6a:27:38:60:65:e3:81:62:05:90:16:a4:40:
         9a:d3:ec:60:42:76:6e:50:0b:17:fa:b6:2f:97:44:2d:0e:8e:
         a7:e8:aa:44:96:a9:72:91:94:8d:22:7c:36:61:fd:47:a1:31:
         f6:9f:3a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 14:53:46 2024 by rpki-client on console-fra.rpki-client.org