Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3132392e302f32342d3234203d3e203631343431.roa
File:                     3230312e3138322e3132392e302f32342d3234203d3e203631343431.roa (raw, json)
Hash identifier:          qR+QUfquiajDDobb5JaB/tl9sUJyp2ZUGCN5LkZgjp4=
Subject key identifier:   2B:26:C5:FF:1A:06:89:6C:D9:60:86:6F:D7:EA:B5:8F:AC:45:4C:D1
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       0771350FCC3DAE972FDA0BF403475548A6AF1F7C
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3132392e302f32342d3234203d3e203631343431.roa
Signing time:             Tue 05 Mar 2024 18:15:57 +0000
ROA not before:           Tue 05 Mar 2024 18:10:57 +0000
ROA not after:            Tue 04 Mar 2025 18:15:57 +0000
asID:                     61441
IP address blocks:        201.182.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:71:35:0f:cc:3d:ae:97:2f:da:0b:f4:03:47:55:48:a6:af:1f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:10:57 2024 GMT
            Not After : Mar  4 18:15:57 2025 GMT
        Subject: CN=2B26C5FF1A06896CD960866FD7EAB58FAC454CD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:13:43:c7:95:ad:4b:a7:1c:99:33:35:5a:
                    3c:67:3c:44:ed:9f:91:e5:bf:0a:8b:52:57:e2:03:
                    21:62:b7:9c:e9:6d:47:0e:a6:9b:d3:5e:2a:36:03:
                    4f:e0:d5:c7:b1:d9:18:61:fb:e6:67:ba:3c:e9:52:
                    6b:d3:50:3c:52:27:14:9a:ad:d7:f3:7b:03:e1:fc:
                    63:38:81:0e:65:1e:29:49:9d:19:e5:a1:fa:da:02:
                    6f:78:63:5c:f3:3d:ef:e3:26:2c:f6:a8:d7:cf:8d:
                    a8:ef:cf:f3:da:9f:d2:0a:40:98:5b:fb:e2:0e:da:
                    05:06:77:08:12:b5:77:b0:25:46:7a:a1:dd:25:ea:
                    d7:86:d9:8b:ea:b6:17:98:25:0e:64:fb:7e:56:4b:
                    2c:4f:eb:14:a0:a5:06:62:5e:11:93:5d:ab:56:ad:
                    8d:1a:67:fa:31:9a:44:3d:dd:86:eb:2b:46:a6:4f:
                    b4:a4:95:26:a1:45:b9:ce:a2:54:eb:7c:bb:89:78:
                    48:cd:34:3e:29:c1:95:27:8c:2d:e6:50:e4:57:ad:
                    ad:1f:36:60:dd:4e:8d:6d:d8:bf:ca:a3:14:2f:7d:
                    70:50:5b:11:43:ce:45:df:88:27:8b:54:8e:46:12:
                    a1:aa:15:74:3c:95:85:18:19:e9:df:48:0a:73:78:
                    b8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:26:C5:FF:1A:06:89:6C:D9:60:86:6F:D7:EA:B5:8F:AC:45:4C:D1
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3132392e302f32342d3234203d3e203631343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:7b:41:cb:d0:e2:35:97:e8:11:d9:7d:ac:d5:c0:54:e6:08:
         ac:93:fc:e9:61:e6:ef:a9:fe:db:25:fe:4a:80:88:2e:1f:f4:
         4f:c7:bf:78:12:a7:1f:ef:39:64:5e:e7:6d:09:3f:36:73:87:
         05:df:6d:3d:9c:a2:7d:db:61:be:d9:02:d5:16:0f:dd:91:fd:
         1c:a9:2c:d6:59:17:3c:4e:d6:57:c3:81:13:27:e4:82:42:37:
         d9:3a:63:77:0d:61:e1:64:96:1e:b6:6c:aa:3e:39:6b:5d:1a:
         6b:d2:35:d1:59:a2:4d:74:6e:ee:58:e5:d8:01:6e:a9:52:9e:
         b4:a8:66:d2:9b:3a:84:ed:e1:1f:90:ac:ed:d4:1e:99:a6:da:
         76:56:44:11:cf:63:69:2e:0d:b6:bd:f9:fc:56:cf:c1:a9:56:
         73:52:9b:23:09:a1:6e:0f:22:d4:47:c6:2a:58:1f:6d:04:a3:
         18:ba:d3:2a:fd:d8:0c:3c:3a:d7:aa:1d:ae:b1:6f:11:de:e0:
         b6:48:26:c1:85:63:a8:9d:ba:ea:51:07:ae:41:36:d3:1e:e7:
         f7:63:a4:d0:22:dd:ac:d7:ec:24:3e:68:5f:44:70:21:d7:ed:
         c4:11:91:27:a5:70:22:5f:0e:7c:3d:b2:9c:a3:3d:ae:7d:8f:
         25:96:31:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:33:17 2024 by rpki-client on console-fra.rpki-client.org