Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130322e302f32332d3233203d3e20323732303939.roa
File:                     3138312e3233332e3130322e302f32332d3233203d3e20323732303939.roa (raw, json)
Hash identifier:          Y2YSoxJJJZIaNnT5sJvSlqlUfZt3QqChJ9C6lv8oBgQ=
Subject key identifier:   9F:46:2B:6E:10:AB:37:70:4E:65:FB:EA:9C:7F:43:00:D6:C1:35:0B
Certificate issuer:       /CN=113A1FB6858415D5155ADD786FDF214408AA5730
Certificate serial:       6373387E5EF12943CD9FC0AAA7AD233FF6C0D5EF
Authority key identifier: 11:3A:1F:B6:85:84:15:D5:15:5A:DD:78:6F:DF:21:44:08:AA:57:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130322e302f32332d3233203d3e20323732303939.roa
Signing time:             Tue 05 Mar 2024 18:03:46 +0000
ROA not before:           Tue 05 Mar 2024 17:58:46 +0000
ROA not after:            Tue 04 Mar 2025 18:03:46 +0000
asID:                     272099
IP address blocks:        181.233.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/113A1FB6858415D5155ADD786FDF214408AA5730.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/113A1FB6858415D5155ADD786FDF214408AA5730.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:73:38:7e:5e:f1:29:43:cd:9f:c0:aa:a7:ad:23:3f:f6:c0:d5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113A1FB6858415D5155ADD786FDF214408AA5730
        Validity
            Not Before: Mar  5 17:58:46 2024 GMT
            Not After : Mar  4 18:03:46 2025 GMT
        Subject: CN=9F462B6E10AB37704E65FBEA9C7F4300D6C1350B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:8a:b8:f1:3a:53:3e:81:d7:a6:e6:07:d8:
                    51:24:92:ae:d1:35:24:e0:75:a0:f4:d2:d3:d6:27:
                    ee:f7:1f:9c:73:38:68:eb:98:88:bd:0e:a2:4f:de:
                    af:82:12:8b:32:0d:15:06:00:31:3c:20:71:e5:f0:
                    12:57:13:fb:18:ca:be:fb:76:58:d7:99:a9:b3:94:
                    50:89:9d:cd:0e:ac:ea:f7:fd:cb:65:59:2d:a4:01:
                    8d:02:64:1e:3f:94:65:64:f6:e7:55:03:2f:57:e0:
                    a8:8c:31:d9:54:c9:8b:ab:5b:27:a4:dd:8f:ac:5e:
                    63:a8:3c:a5:e6:47:6d:05:cb:35:fb:5d:71:e6:03:
                    a7:fd:4a:d7:31:87:bc:34:e7:a8:0e:6f:49:65:f7:
                    3c:e4:8e:9f:5b:4f:58:40:f6:0b:34:c5:f4:4c:36:
                    45:34:f1:24:e0:8f:e7:d2:e5:48:6b:4b:2b:24:96:
                    d9:b6:ff:e2:fc:3e:50:91:aa:e3:07:96:69:59:59:
                    e0:a7:1d:4a:be:c5:f2:15:fd:6e:cc:05:13:05:c6:
                    97:77:36:a1:47:8f:e6:44:b1:d4:2e:8b:75:56:0d:
                    ff:f4:e2:d8:a0:a8:cd:ed:5a:c4:5b:29:2d:f7:cf:
                    a9:13:21:d1:70:f6:f7:00:89:20:12:48:2e:6c:2f:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:46:2B:6E:10:AB:37:70:4E:65:FB:EA:9C:7F:43:00:D6:C1:35:0B
            X509v3 Authority Key Identifier:
                keyid:11:3A:1F:B6:85:84:15:D5:15:5A:DD:78:6F:DF:21:44:08:AA:57:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/113A1FB6858415D5155ADD786FDF214408AA5730.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130322e302f32332d3233203d3e20323732303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:dd:e3:70:27:d3:5e:b4:3d:f1:e9:e2:ef:90:92:0c:b3:b1:
         4f:46:f4:fe:bb:98:fd:13:53:7a:da:98:0d:e4:49:ec:90:0b:
         a3:3c:dd:6a:98:0b:92:f4:6f:38:ed:3f:01:50:a6:e5:db:cf:
         9b:4a:5d:6c:d0:7b:a0:7a:5c:82:32:d7:10:62:df:dd:b8:fe:
         96:b8:17:1d:da:62:fc:6b:5f:02:ab:14:4a:93:13:1a:61:e9:
         ec:4f:2b:9c:13:de:56:4c:e5:e1:1e:b2:4c:8b:60:e0:bc:ac:
         14:30:3c:d8:a2:4d:c5:78:e2:f7:dd:ad:31:57:92:cc:ff:62:
         20:99:e9:fa:ae:ae:13:8f:ba:58:44:30:2e:07:7b:f6:ad:20:
         24:be:2d:ce:36:87:ea:24:31:8f:dc:3a:33:b0:3f:62:f7:34:
         3f:5f:b6:ca:81:f2:ce:2e:52:8c:c7:eb:75:91:e6:01:58:b6:
         e3:f2:fe:d0:1f:de:0f:61:2f:af:dc:9e:0d:40:a4:34:5c:18:
         b4:3f:98:31:70:6e:2e:24:6a:25:16:2c:36:c6:af:6b:10:d8:
         29:c6:f3:30:88:be:b3:87:4c:33:47:e4:e4:9e:e8:d4:b9:14:
         8b:15:14:23:23:2f:dc:58:7f:21:67:54:fa:d7:8d:29:55:08:
         73:c5:3a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org