Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139332e302e302f31362d3234203d3e20323033.roa
File:                     3138312e3139332e302e302f31362d3234203d3e20323033.roa (raw, json)
Hash identifier:          l9qmanFi6kMLg8fGEDDWBXhfbIoZVgFxqGEqHhWVsI8=
Subject key identifier:   69:1A:B8:13:0F:AC:89:B1:6E:96:82:63:D9:EE:C5:39:29:1C:FA:2D
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       6C243B2AFDF0B6AB72CDD7E5FCB59CF035AC78CF
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139332e302e302f31362d3234203d3e20323033.roa
Signing time:             Tue 05 Mar 2024 18:02:36 +0000
ROA not before:           Tue 05 Mar 2024 17:57:36 +0000
ROA not after:            Tue 04 Mar 2025 18:02:36 +0000
asID:                     203
IP address blocks:        181.193.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 23:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:24:3b:2a:fd:f0:b6:ab:72:cd:d7:e5:fc:b5:9c:f0:35:ac:78:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:36 2024 GMT
            Not After : Mar  4 18:02:36 2025 GMT
        Subject: CN=691AB8130FAC89B16E968263D9EEC539291CFA2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:32:71:87:f4:5e:34:45:18:63:49:7b:94:6e:
                    c5:0e:a6:62:07:af:af:2e:25:ef:94:1a:fa:06:5b:
                    e0:20:95:f7:ac:41:1c:de:dd:69:4d:40:5e:8e:91:
                    91:79:02:77:ec:37:cd:8d:51:dd:43:47:59:c1:bf:
                    55:03:d7:2d:c3:21:01:0c:7a:fa:43:02:da:8f:c2:
                    b5:85:0f:a0:4e:8b:38:51:ae:fe:25:76:0b:88:69:
                    9d:4e:7d:0f:12:64:65:d1:4a:be:33:98:84:73:41:
                    e8:e6:e6:33:26:0d:57:27:02:0f:24:14:25:db:6d:
                    59:b5:af:4c:4a:66:96:d0:60:fc:eb:5f:fd:07:f5:
                    77:96:db:0f:4f:c8:43:04:17:2a:0e:fa:22:d0:f4:
                    a6:a5:09:57:c7:46:2c:9e:46:03:a5:b8:ec:18:75:
                    77:2c:36:c2:24:5a:c4:c5:53:04:e0:83:28:d9:26:
                    64:3d:62:2c:e6:cb:5e:21:a0:25:26:bf:99:15:98:
                    b5:de:e2:7d:8d:14:9a:0a:02:72:a9:ab:b4:92:b9:
                    cb:b0:b4:5a:68:d6:28:b4:ac:68:13:2b:12:10:e8:
                    2a:6f:12:54:92:07:02:64:e5:37:7d:b4:5b:d4:00:
                    48:4a:b8:31:aa:5b:82:cd:98:14:c8:c5:1f:dc:fc:
                    0f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1A:B8:13:0F:AC:89:B1:6E:96:82:63:D9:EE:C5:39:29:1C:FA:2D
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139332e302e302f31362d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.193.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:fc:12:b5:56:c7:f4:b1:0a:db:18:4f:c5:8a:78:59:76:cb:
         5d:3c:07:f4:4d:fa:14:05:cb:e5:bf:25:e9:41:01:0b:48:54:
         e8:13:e5:97:c6:b7:ff:8e:74:de:0f:47:3f:ba:fd:f2:4e:8d:
         e7:15:d6:0b:a8:62:b1:34:7a:ba:01:8b:a1:fa:15:31:8b:c8:
         ac:15:39:fe:c9:15:0d:ef:55:b4:be:ce:d6:24:ab:e1:bf:01:
         66:5c:9f:af:06:31:07:bf:a0:c4:11:01:19:00:f9:a4:79:12:
         21:95:1f:73:33:94:68:7a:0a:99:9d:3a:c6:5e:f6:36:b5:eb:
         18:9f:21:65:23:a0:74:da:5d:bc:b2:7e:e5:df:a6:95:59:99:
         1b:12:7d:82:eb:65:67:a3:5d:c3:26:f3:7b:71:03:bb:4b:8a:
         11:59:9d:e1:ef:a1:44:f0:0f:1a:e9:d0:12:d7:97:d8:12:ae:
         6d:a1:b1:7d:ec:f2:f6:9b:c3:f8:42:fc:86:d2:60:e9:30:08:
         43:70:a2:3d:25:94:9b:82:8d:cd:22:48:7e:6d:f7:fa:c7:51:
         16:b4:53:c1:1f:06:15:da:f3:54:0a:04:4b:54:01:3e:d1:3f:
         44:80:67:4f:00:b9:1b:fa:e7:7c:73:e6:e9:b9:b3:e9:5b:31:
         75:bc:4c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:44 2024 by rpki-client on console-fra.rpki-client.org