Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138312e33342e302e302f31352d3135203d3e2038303438.roa
File:                     3138312e33342e302e302f31352d3135203d3e2038303438.roa (raw, json)
Hash identifier:          GK/W221Le21UbC/8dRM1y9HiZ1/i6Oz3QJMV/+plpbA=
Subject key identifier:   A6:60:29:4C:1D:91:3A:59:3C:74:01:A9:0E:55:C1:82:E6:66:99:AC
Certificate issuer:       /CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
Certificate serial:       759C9CDB08A04E25EBF4830C6CD79C42C0F200D7
Authority key identifier: 3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138312e33342e302e302f31352d3135203d3e2038303438.roa
Signing time:             Tue 05 Mar 2024 18:18:27 +0000
ROA not before:           Tue 05 Mar 2024 18:13:27 +0000
ROA not after:            Tue 04 Mar 2025 18:18:27 +0000
asID:                     8048
IP address blocks:        181.34.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9c:9c:db:08:a0:4e:25:eb:f4:83:0c:6c:d7:9c:42:c0:f2:00:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
        Validity
            Not Before: Mar  5 18:13:27 2024 GMT
            Not After : Mar  4 18:18:27 2025 GMT
        Subject: CN=A660294C1D913A593C7401A90E55C182E66699AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:fb:f2:7b:d3:14:da:78:a8:1a:7d:be:a8:
                    d8:d5:6c:42:90:6f:3a:0d:db:9f:12:fa:d8:de:06:
                    8d:54:53:0a:62:9c:25:d5:69:37:3a:6a:3b:2c:7c:
                    68:8f:f6:3b:b5:f3:04:b3:c3:78:1f:b1:84:a9:3f:
                    e3:f3:52:ce:11:b9:b5:6c:6c:c4:c1:54:ad:b0:4b:
                    8a:6b:be:36:97:fb:56:58:82:49:4e:c2:7f:21:7d:
                    82:a1:9b:57:05:71:67:8a:97:10:f1:b6:e3:5f:10:
                    a1:e6:b9:c5:09:ce:c6:cd:b5:4c:53:c4:72:c4:38:
                    e6:81:8e:41:fa:60:9f:29:22:f0:ac:01:b5:4b:da:
                    9c:63:06:65:62:5e:ff:d6:86:56:88:ae:51:86:f6:
                    71:fc:82:e7:63:ff:bf:d4:fe:4e:58:05:63:46:eb:
                    a4:d9:92:98:89:02:77:3b:10:01:5c:63:10:dc:98:
                    23:fc:ee:67:28:74:20:05:a5:34:34:72:c1:dc:e9:
                    e2:f1:be:06:a8:0c:21:cf:57:38:f9:ec:81:61:4c:
                    52:4c:e8:c7:0c:38:15:65:49:93:dc:00:90:23:05:
                    98:8c:9f:f7:ea:1e:a6:b6:bb:48:d3:86:b7:de:d9:
                    56:98:9d:c6:19:47:6e:0f:d0:ca:79:a3:5a:0d:7c:
                    aa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:60:29:4C:1D:91:3A:59:3C:74:01:A9:0E:55:C1:82:E6:66:99:AC
            X509v3 Authority Key Identifier:
                keyid:3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3138312e33342e302e302f31352d3135203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.34.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         c6:45:18:94:48:4f:58:0e:81:17:e7:69:79:61:66:39:a9:95:
         6d:24:09:f3:6c:62:88:e3:bc:56:95:2d:12:a6:db:11:0d:b9:
         f1:d9:4b:b7:ba:22:6f:ec:24:02:19:15:92:19:5c:96:bb:5d:
         9c:16:90:90:46:2a:99:9e:c1:d1:0e:09:2d:36:40:bc:ee:92:
         d1:a6:e8:ff:a2:d6:98:8a:16:c3:5d:fc:db:55:37:8c:2c:1b:
         be:80:b6:ba:72:7a:06:bf:6e:85:b4:34:80:13:a0:d6:bc:80:
         73:e4:a6:7e:56:3b:59:86:13:61:d1:df:73:aa:a0:24:30:5a:
         03:df:ed:52:4c:7d:88:ea:28:0e:04:e4:24:30:40:15:a9:2a:
         62:4f:d7:6a:20:1c:1a:74:b1:bf:ad:04:5e:cb:e0:73:7a:92:
         c9:b7:ef:a1:1f:1b:b9:cf:4c:9e:01:fd:d1:96:94:09:9a:91:
         bf:1d:d1:d4:9d:a9:91:eb:aa:f0:57:49:fb:0f:06:69:04:d9:
         19:10:7b:ba:6c:7d:cc:2e:d6:14:11:1c:01:06:c5:fd:a9:64:
         c4:cf:c2:c6:f5:94:2b:72:bd:80:d9:6c:eb:b5:b8:21:13:43:
         e0:5d:00:14:5c:45:d6:f2:bb:17:d3:28:c4:32:43:db:98:d1:
         1b:e9:fc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:39:57 2024 by rpki-client on console-ams.rpki-client.org