Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3138312e3138342e302f32342d3234203d3e203237383233.roa
File:                     3136382e3138312e3138342e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          x3yEnrwPUCNjzvIfNsL9ZrxaqWEq2nhpqQLmuejuGFg=
Subject key identifier:   E5:89:D4:47:40:2F:63:D8:EE:A0:20:E8:91:1F:6E:51:A6:31:18:FB
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       5B75D6ADE41F16CF014E922E13B245880D3E727E
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3138312e3138342e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:07 +0000
ROA not before:           Tue 05 Mar 2024 17:35:07 +0000
ROA not after:            Tue 04 Mar 2025 17:40:07 +0000
asID:                     27823
IP address blocks:        168.181.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:75:d6:ad:e4:1f:16:cf:01:4e:92:2e:13:b2:45:88:0d:3e:72:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:07 2024 GMT
            Not After : Mar  4 17:40:07 2025 GMT
        Subject: CN=E589D447402F63D8EEA020E8911F6E51A63118FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:74:6e:ef:21:e5:db:6b:b3:97:eb:f2:16:
                    1d:ea:e2:59:52:86:dd:fc:3d:9c:bb:f3:2c:82:d9:
                    93:ae:80:7b:c1:31:cb:36:fc:a2:dd:32:51:c7:c1:
                    2d:f7:04:62:d5:e7:14:59:fc:13:98:36:ee:80:ef:
                    e2:fb:9a:ca:a2:e6:37:24:8d:ea:7d:77:04:7d:c8:
                    a4:8e:74:2d:fc:94:cc:02:84:47:a2:00:77:1c:db:
                    9d:e2:f1:89:bd:8f:4f:59:3b:e3:c0:b1:2d:96:36:
                    8a:1d:a2:87:0c:9b:5e:cd:79:dd:5a:60:84:f6:a0:
                    10:7a:bf:44:cb:5c:80:13:f6:78:6c:8f:fe:37:09:
                    d1:64:5a:81:98:d1:0a:af:04:4b:65:bb:a0:1b:da:
                    20:15:10:e3:43:29:64:ab:10:9b:13:c1:80:2e:50:
                    72:21:ae:61:bd:34:ff:6f:45:83:28:63:5c:c3:b4:
                    a4:64:8d:e2:f9:14:15:c4:48:bc:86:13:29:b1:83:
                    81:30:72:02:07:1a:2e:a6:30:82:37:b0:20:65:55:
                    4d:d0:1a:65:92:ff:19:d3:63:a9:49:3f:13:56:72:
                    e3:bd:f5:d3:72:84:9e:03:7f:80:23:e3:97:60:3d:
                    fc:b2:10:3b:42:a1:ea:7a:a0:51:89:a3:66:8b:a2:
                    95:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:89:D4:47:40:2F:63:D8:EE:A0:20:E8:91:1F:6E:51:A6:31:18:FB
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3138312e3138342e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:c8:dd:ed:ca:9c:1a:5f:91:99:01:c3:cf:e9:1d:bf:70:06:
         42:74:25:20:2c:44:1b:58:01:69:be:37:a2:19:d9:c0:31:39:
         11:07:72:15:ae:2a:90:40:0f:79:b5:96:f9:7a:c2:d3:84:b6:
         f4:34:0a:e4:98:fc:70:f9:b0:f6:3e:b2:7d:5f:d6:e8:bc:06:
         69:44:aa:d3:00:56:f2:99:10:59:9e:f1:c0:a8:91:52:37:41:
         7d:9a:9c:b3:6d:07:64:0d:d6:16:1e:59:ec:d1:9d:15:d1:c7:
         aa:1f:50:2f:9b:7d:ed:c3:f0:61:48:c3:9b:0c:99:c8:df:5b:
         d8:e0:03:19:86:9d:ec:63:04:1b:1f:79:a4:f7:41:a1:5c:aa:
         c2:1d:9c:0e:72:5b:07:e5:f2:dd:d6:fb:cb:ce:9f:c3:b9:f1:
         3e:e7:6d:98:fb:e6:95:96:38:38:5d:96:63:f1:5a:f4:ea:fd:
         5e:a5:86:10:5e:e3:d9:08:43:db:f3:29:0a:4a:41:0b:a1:2c:
         7b:f5:a7:34:be:3e:55:c5:4b:99:4a:a9:45:66:45:e8:58:ab:
         5e:11:41:b6:cb:2b:12:e1:8d:f7:c5:94:1a:dc:2a:39:87:46:
         89:0a:60:89:a0:4a:83:08:54:80:e1:d8:cd:7c:fe:1e:20:de:
         e6:60:5e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org