Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3138312e3137372e36342e302f31382d3138203d3e20323633373335.roa
File:                     3138312e3137372e36342e302f31382d3138203d3e20323633373335.roa (raw, json)
Hash identifier:          O/WwBFFWtmR93mkGAcgeBtTwpB686Px/d6YMdRVlqlk=
Subject key identifier:   06:86:CC:92:6D:05:2B:EB:5C:2F:F0:AD:94:E0:ED:18:0E:00:37:CC
Certificate issuer:       /CN=A6092CA6DF0448374137DE890AB584D961C1028E
Certificate serial:       718B189387E74A72022C4AD711886013175D1364
Authority key identifier: A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3138312e3137372e36342e302f31382d3138203d3e20323633373335.roa
Signing time:             Tue 05 Mar 2024 18:06:41 +0000
ROA not before:           Tue 05 Mar 2024 18:01:41 +0000
ROA not after:            Tue 04 Mar 2025 18:06:41 +0000
asID:                     263735
IP address blocks:        181.177.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8b:18:93:87:e7:4a:72:02:2c:4a:d7:11:88:60:13:17:5d:13:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6092CA6DF0448374137DE890AB584D961C1028E
        Validity
            Not Before: Mar  5 18:01:41 2024 GMT
            Not After : Mar  4 18:06:41 2025 GMT
        Subject: CN=0686CC926D052BEB5C2FF0AD94E0ED180E0037CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ca:8d:98:22:63:09:6b:2d:ff:f2:39:4f:0c:
                    98:a4:65:5f:a1:bf:86:20:43:c1:dc:65:a8:69:34:
                    1a:7b:23:0e:54:57:72:47:69:67:26:7a:ef:81:fe:
                    5e:5c:6d:e6:96:e7:eb:33:80:08:3e:e9:0f:bc:46:
                    a5:22:fc:68:b0:46:bf:d9:40:4f:2f:9f:41:2d:18:
                    93:b4:8c:85:7d:cf:75:98:76:f1:91:92:2b:81:dc:
                    ff:de:5e:3d:01:96:6e:47:fc:61:85:c0:b9:ef:4a:
                    18:13:f3:a9:23:a2:04:1d:fd:15:68:f9:54:97:d5:
                    01:30:ad:2f:5c:fd:bc:31:9c:00:85:6b:10:ad:f8:
                    b4:62:53:7e:c9:4a:d9:bb:88:e9:7a:4f:38:05:a9:
                    58:24:b2:01:ad:eb:65:80:d2:de:16:68:b2:da:1c:
                    1a:04:e4:fe:3b:5a:99:cc:23:1e:4f:a4:22:77:24:
                    48:74:45:75:db:36:59:d5:2b:98:2f:4c:b5:11:34:
                    a3:38:d1:2a:aa:42:a3:31:71:69:51:a8:38:6b:e0:
                    a2:25:16:25:2e:ae:77:1e:4c:cf:8c:85:5b:e7:5b:
                    7e:86:f2:32:f2:2e:4b:1e:55:45:16:31:02:27:71:
                    b4:f6:0a:c5:b4:66:a2:da:8f:09:8b:b2:00:e0:6d:
                    23:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:86:CC:92:6D:05:2B:EB:5C:2F:F0:AD:94:E0:ED:18:0E:00:37:CC
            X509v3 Authority Key Identifier:
                keyid:A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3138312e3137372e36342e302f31382d3138203d3e20323633373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3b:4e:94:bd:47:0a:b5:97:95:24:12:6f:31:ca:3e:3c:0d:53:
         3a:32:e9:5a:20:57:81:bd:9c:9d:fe:cc:94:36:06:81:22:31:
         df:24:71:27:03:d3:d2:62:eb:e7:53:b7:7f:25:09:a4:3f:7e:
         a5:a1:67:ab:ba:d3:11:03:aa:1d:73:6c:46:a1:b6:5b:c8:50:
         dd:8f:d6:4a:80:9f:dd:a6:72:b0:fc:86:5e:ff:9b:29:5b:a8:
         b8:eb:fb:6b:55:70:65:62:50:b1:91:1e:6c:c6:60:74:99:93:
         6a:cb:e3:27:88:ff:70:bb:76:64:9c:77:07:86:38:8b:50:c4:
         b1:df:61:78:10:60:a6:40:54:6d:93:6d:b7:4c:eb:79:13:02:
         60:e9:ca:b6:b4:17:c3:34:00:e2:b8:99:a4:b9:97:ac:5d:da:
         19:ee:de:a6:b9:91:21:9a:61:b6:44:33:15:e7:fd:66:3e:6e:
         c4:ef:ac:2a:e5:99:80:51:27:06:7c:fe:22:52:55:19:19:5f:
         4c:89:0b:9d:55:f8:34:eb:00:7a:5e:97:ab:4b:6c:5c:11:07:
         4d:6d:68:0a:43:63:7c:17:ce:70:b7:30:f9:02:36:ca:91:0e:
         ad:df:c4:a5:72:2b:88:6d:25:3d:de:e5:2a:8f:66:1b:8f:8b:
         53:a3:a8:be
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcYsYk4fnSnICLErXEYhgExddE2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTJDQTZERjA0NDgzNzQxMzdERTg5MEFCNTg0RDk2
MUMxMDI4RTAeFw0yNDAzMDUxODAxNDFaFw0yNTAzMDQxODA2NDFaMDMxMTAvBgNV
BAMTKDA2ODZDQzkyNkQwNTJCRUI1QzJGRjBBRDk0RTBFRDE4MEUwMDM3Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeyo2YImMJay3/8jlPDJikZV+h
v4YgQ8HcZahpNBp7Iw5UV3JHaWcmeu+B/l5cbeaW5+szgAg+6Q+8RqUi/GiwRr/Z
QE8vn0EtGJO0jIV9z3WYdvGRkiuB3P/eXj0Blm5H/GGFwLnvShgT86kjogQd/RVo
+VSX1QEwrS9c/bwxnACFaxCt+LRiU37JStm7iOl6TzgFqVgksgGt62WA0t4WaLLa
HBoE5P47WpnMIx5PpCJ3JEh0RXXbNlnVK5gvTLURNKM40SqqQqMxcWlRqDhr4KIl
FiUurnceTM+MhVvnW36G8jLyLkseVUUWMQIncbT2CsW0ZqLajwmLsgDgbSM3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUBobMkm0FK+tcL/CtlODtGA4AN8wwHwYDVR0j
BBgwFoAUpgkspt8ESDdBN96JCrWE2WHBAo4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTI1RjgwOUE2REVEREU2RDEwQUIwNkFGQTNEMzZFNzlB
NzM3OTU5MTJDOTBGNDdGQ0U3ODE3QTU0Q0E0MUM5LzAvQTYwOTJDQTZERjA0NDgz
NzQxMzdERTg5MEFCNTg0RDk2MUMxMDI4RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNjA5MkNBNkRGMDQ0ODM3NDEz
N0RFODkwQUI1ODREOTYxQzEwMjhFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTEyNUY4MDlBNkRFRERFNkQxMEFCMDZBRkEzRDM2RTc5QTczNzk1OTEy
QzkwRjQ3RkNFNzgxN0E1NENBNDFDOS8wLzMxMzgzMTJlMzEzNzM3MmUzNjM0MmUz
MDJmMzEzODJkMzEzODIwM2QzZTIwMzIzNjMzMzczMzM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGtbFA
MA0GCSqGSIb3DQEBCwUAA4IBAQA7TpS9Rwq1l5UkEm8xyj48DVM6MulaIFeBvZyd
/syUNgaBIjHfJHEnA9PSYuvnU7d/JQmkP36loWerutMRA6odc2xGobZbyFDdj9ZK
gJ/dpnKw/IZe/5spW6i46/trVXBlYlCxkR5sxmB0mZNqy+MniP9wu3ZknHcHhjiL
UMSx32F4EGCmQFRtk223TOt5EwJg6cq2tBfDNADiuJmkuZesXdoZ7t6muZEhmmG2
RDMV5/1mPm7E76wq5ZmAUScGfP4iUlUZGV9MiQudVfg06wB6XperS2xcEQdNbWgK
Q2N8F85wtzD5AjbKkQ6t38SlciuIbSU93uUqj2Ybj4tTo6i+
-----END CERTIFICATE-----
Generated at Sun Nov 24 22:10:13 2024 by rpki-client on console-fra.rpki-client.org