Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138312e3230342e302e302f31342d3136203d3e203237383331.roa
File:                     3138312e3230342e302e302f31342d3136203d3e203237383331.roa (raw, json)
Hash identifier:          k+LZA5+PEyQkbiZN8fz8eHzebzxOqV4IFk8HUI0+goc=
Subject key identifier:   82:B4:91:C5:91:2F:32:7D:44:96:67:76:16:76:EA:B9:34:8C:DB:A3
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       2609FF5CACB61B7EE271F7479C6C035DA0F8FB0A
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138312e3230342e302e302f31342d3136203d3e203237383331.roa
Signing time:             Tue 05 Mar 2024 18:15:41 +0000
ROA not before:           Tue 05 Mar 2024 18:10:41 +0000
ROA not after:            Tue 04 Mar 2025 18:15:41 +0000
asID:                     27831
IP address blocks:        181.204.0.0/14 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:09:ff:5c:ac:b6:1b:7e:e2:71:f7:47:9c:6c:03:5d:a0:f8:fb:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Mar  5 18:10:41 2024 GMT
            Not After : Mar  4 18:15:41 2025 GMT
        Subject: CN=82B491C5912F327D449667761676EAB9348CDBA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5f:05:aa:f0:0a:00:98:11:be:f6:97:d3:87:
                    1a:63:0f:59:41:b0:ef:4e:d9:5a:11:c7:e8:8d:85:
                    72:58:e7:33:e1:82:29:94:28:71:8d:b1:ab:94:56:
                    28:1b:60:5d:29:61:aa:1f:ed:e6:a4:2c:d5:fd:5c:
                    bb:ef:47:59:7b:31:9f:e2:60:3a:58:4c:25:a6:b9:
                    38:ad:45:29:a2:34:8e:36:0d:98:c7:fd:63:0a:33:
                    6d:bc:21:f6:34:c7:67:80:90:e8:58:4b:dc:7c:d2:
                    3b:7e:93:f4:95:bf:59:f2:e4:9e:b4:29:07:ef:58:
                    29:e8:14:56:ed:bd:57:c4:0c:85:1a:70:a8:a3:9d:
                    be:02:01:b3:51:e1:d5:25:55:dd:e9:c8:35:3e:65:
                    2a:74:9a:c9:1e:3b:89:a0:66:83:2a:ae:4c:67:d4:
                    77:18:ac:77:dd:76:c6:49:9d:1b:f0:15:01:2c:ee:
                    fb:00:ef:54:77:be:69:2a:97:8e:04:ff:8d:51:33:
                    21:18:a4:80:61:0e:22:cf:2d:95:c8:38:d1:a5:bb:
                    ed:b8:80:43:d4:75:5b:0e:31:f8:69:1b:77:d6:61:
                    39:41:03:60:22:b1:89:c1:c4:a4:6a:f3:65:b7:29:
                    1c:16:7c:ba:be:ea:a3:dc:7a:14:50:81:0b:ef:13:
                    73:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B4:91:C5:91:2F:32:7D:44:96:67:76:16:76:EA:B9:34:8C:DB:A3
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138312e3230342e302e302f31342d3136203d3e203237383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.204.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3e:f3:c5:1a:e9:68:eb:30:c4:e0:58:db:5f:3d:36:d6:80:e4:
         be:8b:1d:2c:03:37:ad:43:24:93:98:7a:d0:a3:03:8a:ea:f5:
         81:6a:eb:11:88:17:5e:ea:18:88:8b:52:b1:9c:21:e7:f4:e1:
         bc:23:61:85:69:51:7b:77:e3:ef:99:8c:bb:24:a7:a2:dd:04:
         87:3d:5d:d5:7b:df:b1:1a:32:3b:29:3d:8b:97:0a:5f:b1:00:
         95:75:04:29:e9:e2:81:60:89:55:c8:4d:2c:fa:98:d3:db:b3:
         ce:17:8b:f3:74:f3:78:94:05:be:d2:ab:eb:e8:79:db:17:ff:
         ab:fa:df:34:71:10:df:17:65:e9:2f:7d:13:ed:86:73:41:d3:
         1d:53:0e:79:a7:75:72:23:ec:6c:ba:ea:67:9d:e6:69:39:93:
         8d:2f:e3:65:74:74:d1:e7:05:7d:70:c8:47:88:fe:68:0a:80:
         77:d2:0f:3d:0d:d7:ab:04:e2:aa:a5:6f:ad:df:0e:8a:06:41:
         fe:b5:32:dd:0e:65:67:25:05:ff:56:0a:98:90:fe:f3:f9:be:
         60:20:27:ca:6d:81:86:4e:41:b4:50:dc:e9:a1:c1:07:a0:f9:
         d5:36:23:a2:a2:b2:86:ce:ef:11:a5:a0:9f:c0:66:1c:2d:e0:
         9f:a5:9d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:11 2024 by rpki-client on console-ams.rpki-client.org