Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34332e302e302f31362d3234203d3e203237363531.roa
File:                     3138312e34332e302e302f31362d3234203d3e203237363531.roa (raw, json)
Hash identifier:          bIBytW+J5u5AZrfyVWq9VDu61XsyJ74T8LfftKrFI/w=
Subject key identifier:   22:0D:69:0C:B1:1D:6E:E4:6A:7E:22:D4:6F:A6:EF:85:6A:5A:34:80
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       62D32344C05C0E5C65BB7AE99A81946D7FFA42BF
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34332e302e302f31362d3234203d3e203237363531.roa
Signing time:             Tue 05 Mar 2024 18:17:42 +0000
ROA not before:           Tue 05 Mar 2024 18:12:42 +0000
ROA not after:            Tue 04 Mar 2025 18:17:42 +0000
asID:                     27651
IP address blocks:        181.43.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d3:23:44:c0:5c:0e:5c:65:bb:7a:e9:9a:81:94:6d:7f:fa:42:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Mar  5 18:12:42 2024 GMT
            Not After : Mar  4 18:17:42 2025 GMT
        Subject: CN=220D690CB11D6EE46A7E22D46FA6EF856A5A3480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ca:56:a7:63:87:e5:85:b5:d1:1b:ad:f4:8a:
                    0c:e5:5a:0c:74:b5:71:cf:e7:5e:91:03:d7:40:f3:
                    b8:88:11:d8:df:67:7d:d8:87:e7:65:e2:d6:f1:7a:
                    f0:83:38:cf:df:ab:64:cc:23:d9:a7:74:93:00:13:
                    5c:b2:7e:82:79:89:7a:7b:79:15:1c:79:92:dd:3f:
                    46:41:74:94:99:c3:fb:3b:6c:c5:7d:51:a7:ad:8b:
                    6a:40:07:13:ef:43:85:fb:aa:bb:37:09:79:06:07:
                    53:ce:23:f3:a4:5d:db:28:8b:9a:73:61:1e:41:00:
                    35:72:38:75:f6:93:d7:5c:22:5c:d8:5f:46:98:d8:
                    8b:93:42:3c:e2:92:d5:fe:6e:b8:a1:34:60:69:c3:
                    86:7e:d2:ed:00:ee:a3:7d:f7:60:a3:ea:85:65:0e:
                    1c:ac:f7:83:ec:64:d8:4e:4e:bc:3a:6e:13:c6:d9:
                    f4:9a:88:2a:c3:37:98:ff:73:ac:c0:eb:e5:7f:1c:
                    90:e3:75:7a:c8:22:fe:2a:f8:7d:ba:4e:9c:32:c6:
                    d6:64:7a:05:21:85:10:c3:75:d0:40:d6:22:34:7d:
                    21:c6:6b:d0:bd:e0:a3:87:74:08:77:75:aa:1e:69:
                    95:d5:19:5e:89:80:bd:a8:2d:fb:30:ee:9e:47:e8:
                    6a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0D:69:0C:B1:1D:6E:E4:6A:7E:22:D4:6F:A6:EF:85:6A:5A:34:80
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138312e34332e302e302f31362d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         96:5c:83:85:86:ec:34:14:b0:16:69:aa:77:c7:a9:44:ba:c7:
         67:88:da:26:ef:51:72:52:dc:1c:bc:d6:29:f4:b9:4e:cf:76:
         c0:b4:e1:f8:b1:39:c0:f8:f1:f3:46:5c:69:23:e1:d2:78:74:
         09:5f:d9:e8:19:98:07:b1:38:73:15:27:c7:96:d2:aa:88:20:
         e9:83:35:e8:f0:09:3f:17:a6:33:fe:79:35:ae:1c:ad:7f:e1:
         d9:7b:16:46:fd:24:a2:64:9c:32:87:84:bb:4d:92:2d:f4:63:
         13:5c:b7:21:c8:03:e3:a6:ce:b3:f0:36:a2:7a:46:01:97:02:
         a5:73:15:2e:01:87:a2:4a:b5:74:8b:77:a7:0c:f3:1a:2e:f5:
         2e:4d:d4:85:75:49:aa:e0:13:9b:5b:91:4b:73:c2:97:26:64:
         89:ff:a5:19:44:59:c4:aa:ec:9c:a4:df:1a:6a:bf:51:80:bc:
         9f:17:6f:4e:be:79:54:ae:ee:ba:e7:d2:b5:75:77:4e:32:45:
         fc:fb:08:47:23:19:13:d2:b6:9d:6d:2e:04:2a:51:d2:d3:32:
         6d:9c:ef:aa:1e:17:d1:55:fb:fd:46:36:bf:8d:c9:04:26:52:
         32:58:a4:9c:db:bd:80:42:34:2a:ab:6f:70:f0:04:65:97:0a:
         9d:60:60:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:17:07 2024 by rpki-client on console-ams.rpki-client.org