Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3138312e3232342e39362e302f31392d3234203d3e203532323739.roa
File:                     3138312e3232342e39362e302f31392d3234203d3e203532323739.roa (raw, json)
Hash identifier:          pcqT53vO7tO36pvFq2u8ywHeh9SpaLvwwn9ES5gnHPs=
Subject key identifier:   55:E4:C3:1B:07:5A:FD:A2:2B:9F:69:B8:49:CB:74:74:54:5B:5A:C3
Certificate issuer:       /CN=121BB05553FD8170C35FA9B8265458699CAC81AD
Certificate serial:       177E86B2A851F69E38A7B29FCAE55C029890DA8C
Authority key identifier: 12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3138312e3232342e39362e302f31392d3234203d3e203532323739.roa
Signing time:             Tue 05 Mar 2024 18:03:05 +0000
ROA not before:           Tue 05 Mar 2024 17:58:05 +0000
ROA not after:            Tue 04 Mar 2025 18:03:05 +0000
asID:                     52279
IP address blocks:        181.224.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7e:86:b2:a8:51:f6:9e:38:a7:b2:9f:ca:e5:5c:02:98:90:da:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121BB05553FD8170C35FA9B8265458699CAC81AD
        Validity
            Not Before: Mar  5 17:58:05 2024 GMT
            Not After : Mar  4 18:03:05 2025 GMT
        Subject: CN=55E4C31B075AFDA22B9F69B849CB7474545B5AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9a:49:a6:25:35:42:df:f2:3f:22:d6:82:9b:
                    71:de:6d:40:ed:ac:9e:4b:25:31:a5:c9:ca:7a:78:
                    c8:dd:0d:63:e0:ad:a3:39:d8:49:30:04:2d:3e:eb:
                    08:9e:3f:ec:05:34:b3:1f:b7:9a:37:7e:0f:87:14:
                    6f:61:6e:58:0a:75:f7:5a:94:82:92:e3:55:a9:2b:
                    37:39:e7:05:27:c4:9e:2f:91:aa:6e:ab:6d:04:32:
                    f5:e0:a9:bc:1b:85:3c:97:6f:77:2a:40:a2:75:c8:
                    59:d4:9c:35:73:c4:6e:53:e6:d8:a6:ca:82:25:ad:
                    19:06:db:79:18:8e:b2:bf:22:0b:9c:02:9d:7d:a7:
                    0a:4f:89:3f:0e:0b:57:be:a8:89:80:09:f6:ee:8d:
                    fa:35:4c:70:87:08:41:2c:e0:e4:f7:a4:2d:d4:a9:
                    ce:65:d5:39:5f:b0:5a:ba:48:c4:ab:54:aa:9f:3a:
                    19:71:28:21:22:ad:a1:0a:11:03:be:cf:e9:cb:53:
                    5d:b8:95:4b:18:1c:d1:21:f1:52:d9:e1:af:6f:35:
                    17:77:7b:20:09:a5:71:c5:f6:b5:ae:26:0e:06:f7:
                    0e:a7:2b:bc:69:29:ba:d3:f8:f4:af:40:28:e1:5c:
                    59:97:ed:56:0a:24:11:a7:c5:e4:e8:43:a3:fd:d3:
                    d5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E4:C3:1B:07:5A:FD:A2:2B:9F:69:B8:49:CB:74:74:54:5B:5A:C3
            X509v3 Authority Key Identifier:
                keyid:12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3138312e3232342e39362e302f31392d3234203d3e203532323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3a:c5:4d:b8:90:68:c3:60:c7:98:cd:ce:9b:ce:d0:3d:8e:c8:
         a5:bd:59:25:f1:02:61:0c:b2:df:a0:52:28:85:96:78:3f:b9:
         37:85:cf:eb:fe:ff:ac:38:c7:3d:e2:d8:66:71:85:03:7e:d0:
         64:54:4c:72:45:4f:1a:44:4d:46:3b:0b:59:07:75:18:40:92:
         73:b0:71:a2:bf:02:dd:58:9a:aa:88:56:89:45:4f:05:38:92:
         dc:ec:62:1e:9c:70:2e:64:00:75:e5:23:47:2d:25:50:d6:f1:
         60:78:f1:56:c3:ce:8a:22:08:3f:c5:a5:56:68:53:52:15:50:
         eb:69:2b:18:6f:b0:55:c3:8c:9d:7d:f4:87:08:43:04:3f:41:
         d0:8b:fe:f0:b3:fd:87:cd:b4:ac:7b:6f:d7:b7:75:4f:37:0d:
         10:63:27:c3:f7:35:e0:6a:d1:f0:eb:b9:c5:d6:6e:4e:be:4b:
         14:47:6f:d7:30:39:88:ab:16:71:3f:9d:03:5e:bf:c5:54:aa:
         40:2b:9b:9a:c7:d2:4d:45:8e:81:94:8c:fe:57:e9:ac:58:ac:
         cf:46:6c:8d:64:bc:66:49:4d:d2:4b:09:11:70:5e:10:24:ed:
         e1:dc:8c:d8:d9:58:27:ef:89:af:cc:8f:a7:7d:34:84:71:82:
         6d:11:5a:a4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUF36GsqhR9p44p7KfyuVcApiQ2owwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIxQkIwNTU1M0ZEODE3MEMzNUZBOUI4MjY1NDU4Njk5
Q0FDODFBRDAeFw0yNDAzMDUxNzU4MDVaFw0yNTAzMDQxODAzMDVaMDMxMTAvBgNV
BAMTKDU1RTRDMzFCMDc1QUZEQTIyQjlGNjlCODQ5Q0I3NDc0NTQ1QjVBQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCymkmmJTVC3/I/ItaCm3HebUDt
rJ5LJTGlycp6eMjdDWPgraM52EkwBC0+6wieP+wFNLMft5o3fg+HFG9hblgKdfda
lIKS41WpKzc55wUnxJ4vkapuq20EMvXgqbwbhTyXb3cqQKJ1yFnUnDVzxG5T5tim
yoIlrRkG23kYjrK/IgucAp19pwpPiT8OC1e+qImACfbujfo1THCHCEEs4OT3pC3U
qc5l1TlfsFq6SMSrVKqfOhlxKCEiraEKEQO+z+nLU124lUsYHNEh8VLZ4a9vNRd3
eyAJpXHF9rWuJg4G9w6nK7xpKbrT+PSvQCjhXFmX7VYKJBGnxeToQ6P909VHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUVeTDGwda/aIrn2m4Sct0dFRbWsMwHwYDVR0j
BBgwFoAUEhuwVVP9gXDDX6m4JlRYaZysga0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMkVCRTM4QTlFM0NFRUQwNTA4MjU3QTNBQTQ3NTlCMzg0
MjU4RDhDMkQzOEMzOTJDQjkyNUVEN0I3NEQ1OTJELzAvMTIxQkIwNTU1M0ZEODE3
MEMzNUZBOUI4MjY1NDU4Njk5Q0FDODFBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjFCQjA1NTUzRkQ4MTcwQzM1
RkE5QjgyNjU0NTg2OTlDQUM4MUFELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTJFQkUzOEE5RTNDRUVEMDUwODI1N0EzQUE0NzU5QjM4NDI1OEQ4QzJE
MzhDMzkyQ0I5MjVFRDdCNzRENTkyRC8wLzMxMzgzMTJlMzIzMjM0MmUzOTM2MmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzUzMjMyMzczOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbXgYDAN
BgkqhkiG9w0BAQsFAAOCAQEAOsVNuJBow2DHmM3Om87QPY7Ipb1ZJfECYQyy36BS
KIWWeD+5N4XP6/7/rDjHPeLYZnGFA37QZFRMckVPGkRNRjsLWQd1GECSc7Bxor8C
3ViaqohWiUVPBTiS3OxiHpxwLmQAdeUjRy0lUNbxYHjxVsPOiiIIP8WlVmhTUhVQ
62krGG+wVcOMnX30hwhDBD9B0Iv+8LP9h820rHtv17d1TzcNEGMnw/c14GrR8Ou5
xdZuTr5LFEdv1zA5iKsWcT+dA16/xVSqQCubmsfSTUWOgZSM/lfprFisz0ZsjWS8
ZklN0ksJEXBeECTt4dyM2NlYJ++Jr8yPp300hHGCbRFapA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org