Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e342e302f32342d3234203d3e203237393836.roa
File:                     3138312e34322e342e302f32342d3234203d3e203237393836.roa (raw, json)
Hash identifier:          LlJ52+j9h7bLIVrW6u8CWWlLDPP280J0Y5hvyAgMp3g=
Subject key identifier:   5A:97:74:B2:1A:A1:90:F8:EA:59:11:03:2B:13:7A:2B:E8:5F:3F:AB
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       543C6A03FA6F449D1720963C18380F748341EF3B
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e342e302f32342d3234203d3e203237393836.roa
Signing time:             Tue 05 Mar 2024 18:17:39 +0000
ROA not before:           Tue 05 Mar 2024 18:12:39 +0000
ROA not after:            Tue 04 Mar 2025 18:17:39 +0000
asID:                     27986
IP address blocks:        181.42.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3c:6a:03:fa:6f:44:9d:17:20:96:3c:18:38:0f:74:83:41:ef:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Mar  5 18:12:39 2024 GMT
            Not After : Mar  4 18:17:39 2025 GMT
        Subject: CN=5A9774B21AA190F8EA5911032B137A2BE85F3FAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fb:b8:59:68:71:8b:97:35:80:8c:64:49:5d:
                    64:a7:2e:78:7f:83:24:58:a6:cc:39:85:a4:46:6a:
                    d6:54:93:0a:8f:8c:a9:fe:05:14:22:a7:05:d7:13:
                    b8:10:19:5d:69:b4:76:79:0d:95:10:13:23:57:4f:
                    c7:a8:44:15:a6:77:d5:fd:70:22:c6:a9:63:d9:6a:
                    b9:cf:ac:5e:6e:fe:d4:2b:1c:06:c5:df:da:dd:c7:
                    dc:58:d7:69:a7:4b:06:ee:4c:a5:ec:8c:8b:c5:8d:
                    d1:4c:b9:f3:eb:36:04:4d:84:67:09:b3:96:eb:5e:
                    ab:97:5f:e5:70:29:a0:f0:1c:4b:82:4f:26:60:6c:
                    c4:72:8f:5d:6e:eb:0b:87:01:ba:a5:95:b2:a6:d1:
                    f9:b2:ee:04:69:10:cf:ba:ab:85:5a:c8:73:d2:c9:
                    a9:39:48:d4:8d:d5:73:66:53:3b:80:29:99:10:30:
                    b5:85:87:ca:e9:cb:61:22:72:db:2d:ea:2e:74:a9:
                    04:0b:27:f3:9d:f4:41:31:1b:27:4d:e4:0c:3b:43:
                    62:d8:bc:7e:da:9a:1a:6b:98:da:30:a4:41:08:12:
                    60:b0:ee:d6:af:31:6d:a0:90:e2:04:65:ec:a7:05:
                    b8:1d:63:5d:8a:2a:17:09:d2:87:eb:88:ec:10:01:
                    97:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:97:74:B2:1A:A1:90:F8:EA:59:11:03:2B:13:7A:2B:E8:5F:3F:AB
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34322e342e302f32342d3234203d3e203237393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.42.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:e2:b3:5d:44:0a:44:11:e0:ef:29:31:ab:c0:20:69:0a:84:
         42:b9:07:30:e4:a1:ab:7f:0d:53:46:54:20:f0:0f:54:bd:29:
         92:d4:b8:a1:ee:53:f5:df:24:cd:34:ce:24:16:37:ee:c1:f9:
         24:66:18:fc:d3:e0:a1:f1:63:fb:f6:75:bc:c1:63:5f:41:7f:
         51:75:38:d7:12:38:31:1e:2f:41:7d:ce:c4:c9:8c:a6:06:23:
         2b:a2:c5:9c:4f:69:bf:99:94:e5:70:12:62:01:c7:64:cf:ae:
         73:d1:b4:9c:02:ee:c3:c5:c3:f6:96:56:58:3d:48:b0:90:90:
         a6:25:17:1b:57:e2:e9:16:dd:3a:0f:6f:3e:b0:e1:7b:69:a9:
         75:11:cc:f7:70:2f:27:98:61:90:f2:cd:4f:f6:7d:a7:40:99:
         40:d3:df:da:1b:4b:07:51:67:ef:b9:ce:5d:d8:82:e2:76:3f:
         9f:95:4a:fe:3f:4a:74:c2:e0:9f:e7:9c:43:a2:a3:a7:79:e6:
         6c:4c:ab:ac:8f:80:03:10:06:33:92:2c:75:df:e5:d2:6d:59:
         52:fa:c8:e9:ca:e9:38:8b:a1:57:f7:c3:3b:0b:fc:11:6b:db:
         1e:87:4b:0f:04:22:b5:6e:b2:2c:25:54:ff:6b:d0:c2:3e:2f:
         42:d7:95:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:17:07 2024 by rpki-client on console-ams.rpki-client.org