Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138312e3131382e302e302f31392d3231203d3e203238313134.roa
File:                     3138312e3131382e302e302f31392d3231203d3e203238313134.roa (raw, json)
Hash identifier:          L/1CWRCqTbxTGsBMub0dQ/3bICBTOuOFag46MMjKZ48=
Subject key identifier:   78:D2:17:83:B5:C2:16:5B:AF:7F:65:C9:10:8E:7E:07:28:F5:4A:3B
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       7AB981D6ADBEB9235CA421C4D3493C20F2A34ACC
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138312e3131382e302e302f31392d3231203d3e203238313134.roa
Signing time:             Tue 05 Mar 2024 17:58:15 +0000
ROA not before:           Tue 05 Mar 2024 17:53:15 +0000
ROA not after:            Tue 04 Mar 2025 17:58:15 +0000
asID:                     28114
IP address blocks:        181.118.0.0/19 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b9:81:d6:ad:be:b9:23:5c:a4:21:c4:d3:49:3c:20:f2:a3:4a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:15 2024 GMT
            Not After : Mar  4 17:58:15 2025 GMT
        Subject: CN=78D21783B5C2165BAF7F65C9108E7E0728F54A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e5:95:be:06:5a:e8:ad:88:2f:52:63:3c:d3:
                    3f:1d:85:7f:0e:7f:6b:43:2b:ad:4f:97:49:fa:09:
                    2e:7e:2d:00:37:be:dd:a7:40:88:cf:dc:bf:3f:1c:
                    87:37:d3:66:e8:06:9d:6b:99:d0:b0:24:37:b4:30:
                    4e:d3:9c:b5:b1:ed:f2:01:c5:ab:7b:a5:4e:53:11:
                    88:12:16:12:69:da:bb:e6:aa:ba:60:47:c7:70:4c:
                    cc:f8:3c:bb:32:fe:4c:f8:c1:ff:ce:32:f8:39:d7:
                    dd:e8:5a:c4:c9:ae:3e:df:64:9c:a3:a7:af:37:92:
                    00:d6:c6:d7:a6:1a:44:1f:ff:62:53:81:b8:6a:ae:
                    d7:b2:7f:70:b7:ee:9e:a6:3c:a5:c4:04:c9:d9:ca:
                    82:cf:12:52:b3:f0:56:00:ba:0a:b8:8b:dd:b8:6c:
                    73:3d:1f:eb:81:09:d9:c4:2f:22:15:f3:08:ea:07:
                    c3:ce:d6:28:2f:c6:f0:c2:72:a3:b4:41:dc:9c:cf:
                    0b:45:ff:2c:7e:50:72:ce:fb:11:b3:fa:04:68:ff:
                    b5:df:d3:fb:ef:d4:2c:9e:0e:21:d8:60:fa:68:2d:
                    92:5f:48:f3:66:a4:eb:fe:a6:3b:aa:ae:54:ea:be:
                    74:1c:0e:88:f8:d1:03:6a:c7:70:4d:03:23:3e:03:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D2:17:83:B5:C2:16:5B:AF:7F:65:C9:10:8E:7E:07:28:F5:4A:3B
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138312e3131382e302e302f31392d3231203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:29:b4:99:71:70:b2:88:6d:d2:1f:86:a0:90:b8:ea:2f:05:
         fe:28:b0:bd:38:81:b5:cd:9d:de:70:81:65:d4:05:a0:c1:fc:
         4d:a3:68:e1:00:57:2e:6e:6d:e0:4c:00:e7:28:d3:08:cb:4a:
         b1:5d:94:b2:9f:22:b8:99:ce:62:28:84:ee:f8:ca:75:2c:8e:
         67:bf:f6:8e:c0:4f:f7:20:a0:16:b8:d6:56:44:8b:10:21:d0:
         7d:9a:b1:ad:bd:56:ec:5f:90:e3:e3:45:bf:91:10:48:ff:74:
         72:36:fa:38:a3:00:79:e0:32:e3:c6:1d:51:3e:2b:12:2b:f4:
         8f:65:27:f9:f9:22:85:28:39:1f:21:9d:20:f8:33:99:a7:29:
         35:f5:16:81:3d:6c:60:4d:e0:36:28:eb:37:b0:1f:4c:94:08:
         2d:58:5b:8e:58:bc:89:a7:47:3c:be:51:f1:d4:52:d3:17:6f:
         94:81:e0:3a:38:6e:a7:af:bd:47:49:52:f8:5e:2a:2c:60:aa:
         ee:ff:25:52:74:16:24:2b:c9:87:e2:57:fb:f9:3a:bc:87:ab:
         1c:f1:61:af:1d:be:9a:4c:ae:23:3b:8d:de:4f:79:dd:91:63:
         15:f3:7b:a8:e4:32:23:89:a1:08:e7:f3:a2:47:51:de:b5:5b:
         5a:a8:be:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org