Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3134322e302f32342d3234203d3e203532353030.roa
File:                     3230312e3138322e3134322e302f32342d3234203d3e203532353030.roa (raw, json)
Hash identifier:          sXibXuIBvvs4MsaOWRbdcs2hMnwOlMJKXSCTS2eR4Gw=
Subject key identifier:   14:B5:E2:15:B6:B8:26:FB:BC:41:31:29:73:16:B7:94:80:D4:23:C9
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       4BB66E26C3A68FEEBB1136DC7B5E783F56A1A064
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3134322e302f32342d3234203d3e203532353030.roa
Signing time:             Tue 05 Mar 2024 18:16:09 +0000
ROA not before:           Tue 05 Mar 2024 18:11:09 +0000
ROA not after:            Tue 04 Mar 2025 18:16:09 +0000
asID:                     52500
IP address blocks:        201.182.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b6:6e:26:c3:a6:8f:ee:bb:11:36:dc:7b:5e:78:3f:56:a1:a0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:11:09 2024 GMT
            Not After : Mar  4 18:16:09 2025 GMT
        Subject: CN=14B5E215B6B826FBBC4131297316B79480D423C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:6b:dd:ed:26:ae:2c:d1:37:fe:df:d3:40:
                    5d:81:eb:a6:a8:17:6d:48:45:1a:0a:0a:3c:a2:55:
                    9d:96:92:4e:08:8d:e1:c0:36:04:5c:85:a6:94:33:
                    c7:6f:e0:f1:42:b8:fa:04:ce:01:eb:dc:ba:59:56:
                    1b:9d:eb:ea:68:c7:d8:42:ce:69:67:14:85:a4:ac:
                    a0:3f:20:a2:af:ce:22:ca:9e:05:33:44:e0:94:1b:
                    06:52:7c:78:1d:c7:9b:ab:2a:de:76:34:7c:52:b1:
                    70:18:77:9b:62:c8:67:be:92:64:de:fb:53:cf:2f:
                    dc:8e:23:03:5b:9e:b9:9b:96:ca:dc:9c:7f:5d:dc:
                    78:f7:b2:22:97:38:69:3d:36:9c:60:86:13:70:b2:
                    a5:bf:77:94:6c:99:c5:5c:97:8b:0a:a1:53:d3:c7:
                    cb:e3:be:5f:60:3b:7f:12:eb:49:61:7e:94:66:71:
                    63:e3:0e:df:ea:60:fb:7a:da:61:f9:7e:49:ca:98:
                    d4:10:6a:8a:b1:e3:a4:58:76:4e:1e:9f:0b:1f:6e:
                    d4:d1:ea:70:5d:9f:f2:83:e6:46:f9:17:c3:a7:2c:
                    36:cf:ea:f3:a7:24:e0:6f:80:9a:3c:be:99:d7:7f:
                    57:dc:e2:a3:9c:43:23:c1:47:b2:70:5a:db:f8:9e:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B5:E2:15:B6:B8:26:FB:BC:41:31:29:73:16:B7:94:80:D4:23:C9
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3134322e302f32342d3234203d3e203532353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:20:18:5c:8f:0f:05:36:9c:15:b5:87:88:4e:a6:2b:db:d1:
         da:e4:48:24:7f:2c:f7:f8:ef:be:53:7d:45:e6:5e:cf:82:b9:
         64:2a:94:b1:c8:11:da:5e:b4:89:95:44:e8:54:9c:48:24:b9:
         a6:0d:2e:96:a6:16:a8:f0:00:a6:63:5c:28:98:13:bf:47:99:
         39:49:14:3b:31:53:c3:a6:ae:80:f1:ce:45:83:ec:5d:bb:8e:
         10:46:f5:62:68:b4:c2:0f:e8:27:cd:33:b9:e2:e6:15:43:d2:
         67:64:3d:e1:53:eb:60:9d:29:06:ea:a3:18:59:e4:82:08:4a:
         99:1e:d4:c6:9a:f2:5c:83:9f:93:c0:c8:93:cb:c8:c4:22:7c:
         21:d0:7e:ff:36:86:5e:21:11:3e:97:c6:e9:d2:b8:63:19:e5:
         23:e3:a4:76:8f:28:ca:f0:05:e7:b2:7e:7c:dd:0d:e8:36:d3:
         ba:f8:83:49:31:26:24:1a:3c:86:f5:12:15:89:b9:77:fb:71:
         20:53:9d:7e:90:29:20:a8:1e:e2:ec:d2:29:cb:67:fc:72:99:
         0c:41:51:b9:ed:1b:fc:f8:b1:de:25:6c:bd:fb:cb:04:27:7e:
         dd:b8:24:64:39:cf:27:eb:65:38:28:73:43:f6:d5:0f:6f:3e:
         04:94:48:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 19:28:46 2024 by rpki-client on console-ams.rpki-client.org