Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139342e302e302f31352d3234203d3e2033333536.roa
File:                     3138312e3139342e302e302f31352d3234203d3e2033333536.roa (raw, json)
Hash identifier:          rbc/JRmA3PjYsBOQ+7H1bCtFKsh34e6IQI5CbucHCBk=
Subject key identifier:   7C:C7:21:B1:BD:5E:DB:C1:A8:3F:64:A6:C2:0F:7F:10:AE:F5:37:10
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       31984497C33E447A59559438A08D926B85FA0966
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139342e302e302f31352d3234203d3e2033333536.roa
Signing time:             Tue 05 Mar 2024 18:02:43 +0000
ROA not before:           Tue 05 Mar 2024 17:57:43 +0000
ROA not after:            Tue 04 Mar 2025 18:02:43 +0000
asID:                     3356
IP address blocks:        181.194.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:98:44:97:c3:3e:44:7a:59:55:94:38:a0:8d:92:6b:85:fa:09:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:43 2024 GMT
            Not After : Mar  4 18:02:43 2025 GMT
        Subject: CN=7CC721B1BD5EDBC1A83F64A6C20F7F10AEF53710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:27:e7:4c:4f:7f:5a:c1:e5:44:9c:a7:63:c1:
                    78:54:b3:2e:f4:09:53:b5:a3:93:77:b2:c7:cf:81:
                    9e:a1:74:ed:8e:f1:36:96:5a:c8:94:4c:bb:f9:b9:
                    3c:ea:af:08:97:2f:ea:0f:ac:7f:b6:e1:67:db:5c:
                    5f:20:97:8f:d7:e4:18:0e:cf:16:e5:94:3a:a7:ed:
                    bb:01:43:6a:a9:c4:48:a2:43:0b:5f:91:4d:33:0b:
                    b0:ef:66:09:63:32:f8:89:b7:34:c9:08:02:a1:69:
                    67:61:97:eb:89:7d:b1:89:36:41:27:5b:06:e5:3d:
                    90:d2:87:76:78:f4:e1:ce:a3:e5:e5:65:fd:92:2a:
                    41:09:74:e3:ed:26:7f:aa:7c:19:1d:f6:a2:35:ab:
                    e6:65:e9:b3:ce:61:3b:9e:0f:25:e2:51:33:ab:bd:
                    1d:ba:41:80:4d:a7:92:9e:1e:6c:86:a6:6a:a7:9c:
                    6d:b0:37:64:8d:96:dc:30:51:a1:1e:ea:6b:6a:71:
                    6e:41:bf:82:22:85:2f:b3:69:5e:8d:f3:c8:2a:18:
                    27:99:58:16:9d:61:c8:87:44:92:98:31:b8:20:a0:
                    c7:79:29:8d:43:24:fb:8c:54:59:bd:28:83:af:22:
                    ac:31:52:8c:63:f2:f1:b9:99:7f:9b:18:b6:07:aa:
                    54:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C7:21:B1:BD:5E:DB:C1:A8:3F:64:A6:C2:0F:7F:10:AE:F5:37:10
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139342e302e302f31352d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.194.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:cd:60:7c:74:49:ed:73:17:ed:2e:d1:aa:38:e4:e2:76:
         44:2e:22:4e:68:69:66:95:bf:6f:46:1a:40:ad:c1:dd:21:64:
         9e:fa:be:00:fe:42:df:2b:22:5e:2a:88:80:bb:07:c0:40:ed:
         fc:25:bc:55:a7:43:fa:47:30:1d:e6:02:4c:d0:5a:30:c9:35:
         4c:01:fb:db:2c:c8:47:e2:0b:09:55:2a:3e:5d:a7:dd:db:73:
         0b:b7:b5:7d:aa:6b:74:ca:3e:7b:f8:cb:54:3a:2d:e3:16:de:
         cb:16:ca:b4:ee:f8:1c:15:ba:ea:2e:9c:63:9a:29:53:67:e7:
         0b:be:f1:57:3a:96:b3:f1:75:a3:0c:45:1c:ad:74:7c:27:69:
         87:03:e9:04:22:98:6b:86:67:76:51:19:a0:16:77:06:ca:39:
         ae:b0:f0:c7:92:11:44:51:93:f4:a0:7a:b1:f4:dd:c0:a8:c9:
         6f:2a:8e:73:8e:68:c1:69:54:16:ac:ff:bc:0a:f9:fe:8a:14:
         1d:bf:59:53:e8:cf:43:7e:59:bb:07:3e:86:e1:8f:c3:22:1d:
         ea:11:bc:ad:f7:c5:4a:87:f0:38:58:3d:9b:4c:8b:7b:4b:52:
         b7:0e:89:27:d9:fa:5c:00:3e:0a:44:76:f6:a7:d7:e0:9c:a6:
         62:2e:12:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:11 2024 by rpki-client on console-ams.rpki-client.org