Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/248D77FB2674409B6593C00BB5645A828BB575B2552359CE6F6D0C1929379F7C/0/3138312e3233332e3135392e302f32342d3234203d3e203133343839.roa
File:                     3138312e3233332e3135392e302f32342d3234203d3e203133343839.roa (raw, json)
Hash identifier:          TiEogzu0JRbNtdSETtQnU+JuqWT0zLIfoa0uWuTMSfs=
Subject key identifier:   D6:40:0B:E7:A4:99:C2:57:57:CA:CC:A5:66:F1:E1:5B:33:6A:6E:0A
Certificate issuer:       /CN=54E0DE0BBF0249F284D30574DC13279D205FF11E
Certificate serial:       38FB6E5729AB70D4FE68BE9AB13453EA2D50A3DC
Authority key identifier: 54:E0:DE:0B:BF:02:49:F2:84:D3:05:74:DC:13:27:9D:20:5F:F1:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E0DE0BBF0249F284D30574DC13279D205FF11E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/248D77FB2674409B6593C00BB5645A828BB575B2552359CE6F6D0C1929379F7C/0/3138312e3233332e3135392e302f32342d3234203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:02:08 +0000
ROA not before:           Tue 05 Mar 2024 17:57:08 +0000
ROA not after:            Tue 04 Mar 2025 18:02:08 +0000
asID:                     13489
IP address blocks:        181.233.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/248D77FB2674409B6593C00BB5645A828BB575B2552359CE6F6D0C1929379F7C/0/54E0DE0BBF0249F284D30574DC13279D205FF11E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/248D77FB2674409B6593C00BB5645A828BB575B2552359CE6F6D0C1929379F7C/0/54E0DE0BBF0249F284D30574DC13279D205FF11E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E0DE0BBF0249F284D30574DC13279D205FF11E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fb:6e:57:29:ab:70:d4:fe:68:be:9a:b1:34:53:ea:2d:50:a3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E0DE0BBF0249F284D30574DC13279D205FF11E
        Validity
            Not Before: Mar  5 17:57:08 2024 GMT
            Not After : Mar  4 18:02:08 2025 GMT
        Subject: CN=D6400BE7A499C25757CACCA566F1E15B336A6E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:aa:00:76:08:d9:93:a9:bf:62:8a:ca:0a:17:
                    9f:43:83:5e:c9:c2:2a:c5:8d:7f:84:ce:bd:47:61:
                    c4:60:1d:ee:c0:10:94:6b:b2:0e:63:4b:85:0d:b5:
                    c5:e0:50:81:e9:07:bd:14:f0:68:ab:73:13:50:0e:
                    69:fd:75:cd:a7:90:e9:2b:4d:ad:ca:8f:54:8b:5d:
                    aa:2c:71:6f:58:1e:91:11:5a:f6:08:08:b2:17:b3:
                    84:6b:4b:ca:55:4b:f1:04:73:e3:68:c2:ae:51:95:
                    db:95:1d:2f:82:fa:b6:b9:d8:bb:fb:da:ce:63:8e:
                    9e:55:fc:46:1a:c7:48:74:a1:58:56:50:06:fd:00:
                    42:34:42:38:15:5a:a8:97:67:e0:9e:cf:11:f5:75:
                    5d:d9:42:8b:d8:89:f9:65:6a:1c:ec:6c:ec:70:06:
                    e1:07:34:d7:42:a7:92:ca:7c:11:de:9e:f3:fa:55:
                    1e:2c:6f:b7:61:79:14:10:52:73:78:ff:fd:51:a7:
                    ff:ad:18:a9:7c:28:6d:8b:47:8c:fe:fd:cc:e7:eb:
                    40:2c:a4:60:a9:86:8c:d5:23:96:94:25:9b:98:cb:
                    8d:8b:b5:15:62:9d:26:26:b6:06:a8:bb:02:29:64:
                    44:79:69:b7:c6:34:f2:92:2d:f9:2a:47:2e:1e:e4:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:40:0B:E7:A4:99:C2:57:57:CA:CC:A5:66:F1:E1:5B:33:6A:6E:0A
            X509v3 Authority Key Identifier:
                keyid:54:E0:DE:0B:BF:02:49:F2:84:D3:05:74:DC:13:27:9D:20:5F:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/248D77FB2674409B6593C00BB5645A828BB575B2552359CE6F6D0C1929379F7C/0/54E0DE0BBF0249F284D30574DC13279D205FF11E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E0DE0BBF0249F284D30574DC13279D205FF11E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/248D77FB2674409B6593C00BB5645A828BB575B2552359CE6F6D0C1929379F7C/0/3138312e3233332e3135392e302f32342d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:5b:ab:b1:6c:63:7f:ca:4a:e6:01:a2:c3:db:c1:4a:78:6e:
         53:4d:26:b6:85:12:be:78:87:a2:fb:c8:4d:9c:24:f8:01:af:
         4d:a0:45:14:7e:56:58:f1:ee:0f:d7:4a:c1:f8:95:e5:4c:95:
         08:f8:5e:ee:7f:fe:2b:3a:b4:95:4a:11:9c:cb:32:b9:46:c4:
         6b:52:82:19:27:5c:bf:f4:75:9d:d5:3d:32:a2:8a:c6:e9:45:
         1c:9f:87:25:c1:60:5c:82:c6:aa:cf:44:79:5b:ec:d5:f5:d2:
         97:7c:f1:cc:70:78:29:26:a2:1e:a6:6b:cf:4b:bd:78:0c:7c:
         79:a3:49:fc:45:ff:5c:6d:b5:aa:03:19:bd:b4:50:bf:ba:d8:
         a9:84:8a:09:83:91:08:d7:ef:58:c0:94:16:88:b7:12:d0:dc:
         f3:c9:58:cb:0f:a5:e1:f2:d8:63:f3:7d:5a:4b:52:a2:38:17:
         7d:bd:30:02:3d:fc:d6:29:ed:ab:d6:96:0a:1f:5d:eb:2e:f9:
         35:df:14:c7:4c:a6:ce:fe:83:16:bb:ee:99:5f:2a:bb:15:08:
         21:47:9a:e9:04:60:58:cc:9d:5a:e7:27:6a:e8:73:ea:55:6d:
         7d:3c:ce:13:33:c2:4b:fd:67:76:79:04:a4:5c:ff:5e:dd:e4:
         46:33:b5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:52 2024 by rpki-client on console-fra.rpki-client.org