Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138342e302f32312d3231203d3e203630343538.roa
File:                     3138312e3137342e3138342e302f32312d3231203d3e203630343538.roa (raw, json)
Hash identifier:          zG+aJ9Yky0S9WdG6R4xKHKRvpaLjLJcIKZiODKdBkLU=
Subject key identifier:   55:98:D0:CD:65:67:D7:63:C7:22:FC:6E:F1:C1:FA:88:19:13:80:C8
Certificate issuer:       /CN=0F5F9A2CF444A9C495532D9BB5295457EA53D556
Certificate serial:       0504884F8D56F125DCF16A32D17064FBCF11DF42
Authority key identifier: 0F:5F:9A:2C:F4:44:A9:C4:95:53:2D:9B:B5:29:54:57:EA:53:D5:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138342e302f32312d3231203d3e203630343538.roa
Signing time:             Tue 05 Mar 2024 18:01:29 +0000
ROA not before:           Tue 05 Mar 2024 17:56:29 +0000
ROA not after:            Tue 04 Mar 2025 18:01:29 +0000
asID:                     60458
IP address blocks:        181.174.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:04:88:4f:8d:56:f1:25:dc:f1:6a:32:d1:70:64:fb:cf:11:df:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F5F9A2CF444A9C495532D9BB5295457EA53D556
        Validity
            Not Before: Mar  5 17:56:29 2024 GMT
            Not After : Mar  4 18:01:29 2025 GMT
        Subject: CN=5598D0CD6567D763C722FC6EF1C1FA88191380C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e1:7b:14:33:9a:15:d9:05:37:88:13:e1:94:
                    45:92:fa:25:23:0c:ed:40:78:6b:74:bb:c0:80:2a:
                    8b:2b:13:3a:82:13:b7:db:73:7d:99:04:a7:3a:3f:
                    ec:91:60:a3:d3:89:fd:2a:64:ed:39:05:7d:3d:49:
                    b7:84:5f:ec:33:38:9c:47:27:c0:c6:77:ad:70:25:
                    b2:41:e4:f8:d3:06:0e:02:d5:f1:e9:60:47:85:dd:
                    d9:4b:99:06:05:ac:59:06:fd:9c:6b:01:05:63:99:
                    7a:eb:c6:d5:b6:23:29:9b:ce:bb:1c:a3:a7:53:52:
                    2e:1f:75:17:63:c2:e5:2a:20:b6:71:9a:f6:cf:68:
                    af:50:d7:4a:0a:a6:a1:a4:3e:cd:95:ee:97:25:6d:
                    ff:e8:f2:d3:bc:ca:2f:bf:f8:16:67:95:c2:98:1f:
                    0d:dd:ed:cf:62:95:94:92:6f:e6:30:b7:ce:5d:b4:
                    17:3a:b8:9f:97:76:77:39:3d:9b:e4:91:9d:e2:80:
                    be:e2:c7:66:14:53:30:c8:36:35:e6:5a:53:e0:dc:
                    a2:1c:26:09:81:3c:6f:2d:1b:79:de:78:40:62:02:
                    59:52:b8:36:b2:45:5a:9f:12:9f:d1:f6:07:95:9d:
                    7b:01:1f:f0:13:c6:a5:72:39:91:b5:da:81:8c:bd:
                    12:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:98:D0:CD:65:67:D7:63:C7:22:FC:6E:F1:C1:FA:88:19:13:80:C8
            X509v3 Authority Key Identifier:
                keyid:0F:5F:9A:2C:F4:44:A9:C4:95:53:2D:9B:B5:29:54:57:EA:53:D5:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138342e302f32312d3231203d3e203630343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:77:6b:08:86:f9:21:a4:4b:0e:3a:c3:8f:a0:e5:65:8d:c4:
         8e:3c:32:1c:e0:c6:a0:a9:ff:5f:56:f8:33:78:75:69:0c:b3:
         42:b9:97:e3:ba:0a:8f:c7:ab:2e:14:12:81:da:2a:64:16:a2:
         9c:e8:ef:63:dc:c4:d2:ba:47:9f:e7:e7:ca:b5:e9:87:72:c2:
         ba:a4:41:0e:dd:b7:f2:12:7f:ff:ce:a5:3a:6c:2e:75:ef:fe:
         c8:8b:52:46:60:cc:11:34:df:7f:ac:79:50:7f:bb:52:9b:7f:
         ac:b2:f7:06:0e:bc:d8:98:d2:97:3f:18:a3:35:ad:2a:09:e8:
         64:1f:3f:cc:af:b3:28:cc:3a:a6:62:f6:c1:83:01:5d:23:b0:
         ea:43:92:e5:85:99:a6:9f:d0:e1:c1:d8:be:1e:a1:14:1c:92:
         7e:b4:e0:6a:4c:14:2d:39:22:a9:c5:44:11:42:8b:4a:4d:1a:
         38:34:d6:ca:b0:6e:c4:41:5b:6b:91:4c:6d:da:c1:03:88:71:
         47:ab:74:b9:6b:13:21:49:88:e4:e1:0c:b3:fb:c6:2e:ea:3c:
         81:1d:10:cf:89:4e:0c:94:3e:ec:cb:87:b3:09:62:af:c2:41:
         e3:7d:48:c6:2d:d4:9c:da:ae:3e:0a:ff:40:f0:0c:a1:a6:fb:
         f4:db:72:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:37:14 2024 by rpki-client on console-fra.rpki-client.org