Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138312e3230342e302e302f31362d3136203d3e2038303635.roa
File:                     3138312e3230342e302e302f31362d3136203d3e2038303635.roa (raw, json)
Hash identifier:          4ztQCG8ayMKcgL6nh7+JIhDSyD+LNLdGAUdvKEjOMY0=
Subject key identifier:   48:02:61:4F:88:DE:07:6C:84:04:45:38:13:A9:F7:40:49:D9:24:EF
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       02239A08268B74A4C45CBBD671A0B7B54B1D970D
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138312e3230342e302e302f31362d3136203d3e2038303635.roa
Signing time:             Tue 05 Mar 2024 18:15:42 +0000
ROA not before:           Tue 05 Mar 2024 18:10:42 +0000
ROA not after:            Tue 04 Mar 2025 18:15:42 +0000
asID:                     8065
IP address blocks:        181.204.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:23:9a:08:26:8b:74:a4:c4:5c:bb:d6:71:a0:b7:b5:4b:1d:97:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Mar  5 18:10:42 2024 GMT
            Not After : Mar  4 18:15:42 2025 GMT
        Subject: CN=4802614F88DE076C8404453813A9F74049D924EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:11:ae:19:60:5e:38:6b:79:01:00:e2:fb:
                    ea:9e:0c:8d:0c:83:af:17:54:b5:25:52:db:e3:a8:
                    e4:b5:af:d3:14:0f:2f:f3:2b:00:00:97:71:b1:c3:
                    03:e8:a5:7c:e7:0e:cf:2b:44:fe:b1:17:d5:2e:fc:
                    16:2e:ff:8a:1a:2c:ef:5b:14:23:89:c8:70:23:d9:
                    18:23:c7:4c:4e:aa:60:ea:ba:7a:5a:7c:7a:bf:d2:
                    a8:83:d3:21:b8:89:24:8f:9c:86:fa:44:76:97:be:
                    e0:18:1a:67:7f:80:e9:73:7b:67:cc:b3:ee:a2:92:
                    a0:c6:a1:ac:ab:df:c9:34:98:3c:d5:2b:88:41:49:
                    53:67:f3:5a:d5:f8:06:78:13:9f:25:6f:60:0d:02:
                    4c:b4:9d:18:21:2c:44:1a:33:b2:71:8b:20:f9:70:
                    46:88:9f:51:0a:d5:14:b5:fa:8c:e3:e0:36:af:1d:
                    71:ad:87:56:84:69:82:9e:3c:9d:6d:8d:62:af:ea:
                    f5:f1:7e:22:4b:2c:cd:be:92:5e:93:18:24:68:9e:
                    6c:a8:4f:e6:f5:47:4d:56:46:52:dd:7d:2f:93:29:
                    83:a4:2a:4f:be:db:a1:5d:4e:97:a8:bb:bf:09:19:
                    86:62:9b:2d:50:7d:da:f3:63:95:39:b3:19:b4:a4:
                    07:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:02:61:4F:88:DE:07:6C:84:04:45:38:13:A9:F7:40:49:D9:24:EF
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3138312e3230342e302e302f31362d3136203d3e2038303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.204.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         26:79:c9:cf:24:90:e1:ee:19:b3:c5:17:61:c8:77:68:eb:f4:
         ae:31:e9:0c:ef:77:56:f5:cd:20:9c:82:f7:3c:6e:0b:25:ac:
         c2:e2:b8:9c:8c:2a:99:77:00:60:8f:a7:56:25:e6:ea:2b:e8:
         83:8f:87:d0:c0:cb:ea:9a:f6:c4:58:27:2e:cf:8f:ee:ba:38:
         43:85:e8:07:a3:b0:22:19:e7:18:79:56:aa:01:00:95:f6:7c:
         1c:ff:a1:cc:c6:e5:e2:4b:3a:2a:61:b6:d4:7e:b8:94:08:6e:
         2e:a0:4e:6b:6d:fd:83:ba:cd:3a:41:c1:1b:aa:f6:7c:b8:67:
         c5:37:b8:a5:44:50:2b:bf:07:8f:2c:ba:1d:29:0e:78:27:ed:
         a7:99:97:2c:75:97:31:f1:a8:e4:bd:af:c9:e8:e4:1b:d9:bc:
         e4:a8:b4:d1:d6:59:0b:0f:37:8c:81:ce:76:48:1a:08:ed:ef:
         7b:94:cb:cb:de:18:75:60:81:29:69:36:0a:37:fc:8b:13:5b:
         72:f8:c5:71:98:71:d4:61:23:d6:54:0b:f2:94:2d:70:87:cc:
         46:74:18:f2:19:62:b5:26:10:b2:e8:30:c9:41:8e:de:7e:9a:
         e5:62:71:c0:55:79:c4:57:b0:e3:13:56:4f:e8:a3:bd:09:df:
         d6:18:bf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:11 2024 by rpki-client on console-ams.rpki-client.org