Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138312e3131382e3137362e302f32302d3234203d3e203237393533.roa
File:                     3138312e3131382e3137362e302f32302d3234203d3e203237393533.roa (raw, json)
Hash identifier:          BaRjvQrOApNNzRDZxwTugHEujJGuMcmUmXM0IWGWq+s=
Subject key identifier:   F0:77:A5:A6:02:50:8B:8A:7C:6E:2E:21:0B:68:1F:CD:05:DC:F4:C2
Certificate issuer:       /CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
Certificate serial:       6D35C0B40BE572323090DEDE1AAEA720D192235A
Authority key identifier: D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138312e3131382e3137362e302f32302d3234203d3e203237393533.roa
Signing time:             Tue 05 Mar 2024 18:07:53 +0000
ROA not before:           Tue 05 Mar 2024 18:02:53 +0000
ROA not after:            Tue 04 Mar 2025 18:07:53 +0000
asID:                     27953
IP address blocks:        181.118.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:35:c0:b4:0b:e5:72:32:30:90:de:de:1a:ae:a7:20:d1:92:23:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
        Validity
            Not Before: Mar  5 18:02:53 2024 GMT
            Not After : Mar  4 18:07:53 2025 GMT
        Subject: CN=F077A5A602508B8A7C6E2E210B681FCD05DCF4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:e4:3e:4f:ea:f4:01:59:8f:ea:5a:cf:9a:
                    3f:6d:3f:e4:fb:8c:c7:97:03:e7:f9:39:6f:ee:88:
                    3a:f9:89:2b:94:b4:30:52:6e:a6:75:12:37:9e:59:
                    99:9e:37:6f:79:3b:8c:9d:62:8f:52:80:1c:b4:2d:
                    b7:9e:70:3b:b2:42:28:42:43:bd:d6:e2:0b:85:7e:
                    c7:8e:50:af:50:02:d5:ef:f9:ab:d0:0a:1a:c9:ca:
                    bf:25:31:ac:6f:4e:6b:74:dd:e2:f7:e8:38:96:17:
                    1f:15:7a:3e:b6:8a:9e:8d:78:a4:38:4c:63:6b:9b:
                    00:f7:36:15:92:10:b5:36:62:88:d0:a5:1e:99:62:
                    83:8a:57:7e:7a:57:55:2a:0a:0a:4b:d2:5d:af:24:
                    c5:c5:95:58:0a:ae:fb:09:5e:38:7b:95:e3:36:e7:
                    b4:de:7e:d4:24:c6:a1:15:b5:97:08:d8:f1:8f:0a:
                    2f:4e:ed:3e:5b:4e:63:b3:a2:49:5a:5c:c6:c7:81:
                    df:97:82:38:3c:0e:9b:09:b2:ac:33:09:c3:0c:b5:
                    c7:4d:ec:d5:b5:bb:7f:cd:ad:9b:26:d6:4b:32:e1:
                    42:4d:de:54:e5:e6:42:df:b8:58:ec:00:c9:c6:7f:
                    a0:b4:5b:98:66:43:28:07:85:21:22:d0:2d:84:96:
                    8b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:77:A5:A6:02:50:8B:8A:7C:6E:2E:21:0B:68:1F:CD:05:DC:F4:C2
            X509v3 Authority Key Identifier:
                keyid:D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3138312e3131382e3137362e302f32302d3234203d3e203237393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:7a:f6:46:c8:a0:9a:e9:4f:bd:6e:3d:31:f6:c0:11:ab:
         d4:ea:8e:8f:0a:fb:b7:69:d7:ee:76:e5:22:85:c7:35:f5:7d:
         d1:d3:81:f3:f4:95:07:77:f8:82:91:ed:b1:da:ee:30:44:6b:
         a7:53:db:83:b8:7a:18:6a:ac:9b:10:56:a0:e2:1a:29:d8:ea:
         de:fa:8b:ce:37:6a:85:da:09:db:d2:4f:ee:c8:f7:d0:9f:41:
         92:83:04:b2:b5:40:ad:43:f9:b9:0e:1d:59:61:76:12:07:cf:
         09:e0:92:d5:27:13:cc:4f:2c:97:17:bc:e2:22:cc:19:64:49:
         d7:a3:7d:d7:4e:c8:40:d1:69:34:cd:2d:9c:06:79:b4:fb:73:
         05:62:f1:3a:00:52:69:96:b9:32:01:b9:6f:12:d5:7b:46:ea:
         8d:0c:6f:1c:78:ff:fb:01:ee:a7:5c:ff:c2:90:30:3a:3d:49:
         12:9d:2c:d6:fa:9f:77:c2:76:67:a8:6c:a2:2f:33:e9:be:09:
         c7:17:2a:85:d7:83:dc:aa:2b:44:cf:ab:c7:2e:40:77:74:df:
         83:d5:a8:b7:1c:db:3f:e7:2b:d1:1d:ac:4e:3f:f1:6a:7d:e5:
         fe:4f:c7:35:88:b9:a2:00:a8:5c:e8:0e:81:6b:68:e6:b3:a5:
         57:0b:31:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org