Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138312e3131382e302e302f31392d3234203d3e203238313134.roa
File:                     3138312e3131382e302e302f31392d3234203d3e203238313134.roa (raw, json)
Hash identifier:          frqOE6M3RA+MuRXg6x6VLTF7Qbjo4cOjUGN9MPCnK2E=
Subject key identifier:   CF:30:B6:93:EC:0C:B1:0C:E0:DB:B8:38:19:D7:9B:0A:C4:06:37:17
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       2902ABC9E96120936DF0E124F6D64372FD28A43D
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138312e3131382e302e302f31392d3234203d3e203238313134.roa
Signing time:             Tue 05 Mar 2024 17:58:15 +0000
ROA not before:           Tue 05 Mar 2024 17:53:15 +0000
ROA not after:            Tue 04 Mar 2025 17:58:15 +0000
asID:                     28114
IP address blocks:        181.118.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:02:ab:c9:e9:61:20:93:6d:f0:e1:24:f6:d6:43:72:fd:28:a4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Mar  5 17:53:15 2024 GMT
            Not After : Mar  4 17:58:15 2025 GMT
        Subject: CN=CF30B693EC0CB10CE0DBB83819D79B0AC4063717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:6d:0d:3a:3f:b0:e1:81:e8:aa:56:cc:3c:
                    e1:2f:7d:73:fb:22:33:aa:bf:4a:4e:c8:a5:7e:13:
                    32:be:cf:d3:f0:2e:2e:4e:c9:0e:a9:a7:a7:be:57:
                    ee:58:ee:3e:a2:e0:97:31:ff:72:3c:3b:43:8f:26:
                    1a:21:a2:1f:b4:b4:a2:7b:60:8d:26:b2:f2:06:61:
                    66:a2:3d:e3:55:ea:b5:67:e8:6e:93:a7:2c:6f:6c:
                    62:24:51:5d:ec:00:18:b0:73:97:17:25:eb:65:99:
                    0c:ef:1f:2f:bf:84:75:41:68:8d:22:c7:d8:bf:79:
                    e7:4e:be:8f:68:c3:7f:55:8c:88:d3:bd:bb:50:3d:
                    6e:0b:1d:d9:8c:6a:0d:ac:ff:9b:71:00:72:9e:8c:
                    93:59:7b:6f:06:b9:93:91:07:c0:23:4f:2d:41:b6:
                    d7:72:db:99:4b:ea:bd:ab:1f:e3:29:a4:09:70:13:
                    e7:a7:76:4b:d0:70:8f:f2:68:7f:1a:fc:11:c4:de:
                    4c:db:50:fd:5e:0a:65:4a:95:49:84:88:0e:92:0c:
                    eb:d7:74:5f:dd:b9:4b:da:1b:e2:47:34:2a:45:e0:
                    f1:f8:57:71:43:a3:b0:e1:43:06:7e:15:b9:4c:7d:
                    e3:33:66:03:d7:b7:14:f6:b4:61:31:97:87:b5:b2:
                    16:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:30:B6:93:EC:0C:B1:0C:E0:DB:B8:38:19:D7:9B:0A:C4:06:37:17
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3138312e3131382e302e302f31392d3234203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         44:f5:9e:f3:8f:61:09:21:c8:58:bf:ae:e7:2e:d9:3c:d2:79:
         93:08:65:74:5e:9a:c9:3e:39:4e:12:c2:7f:83:12:3b:ab:2a:
         12:f9:3b:36:e5:2c:51:d4:06:52:99:80:bf:fc:ed:ae:45:5e:
         88:13:4b:f7:a1:ea:4c:a0:7a:ef:c1:18:10:82:0e:22:15:68:
         a3:57:02:48:79:17:db:94:bd:0c:7f:aa:bd:c6:85:da:1b:96:
         d4:cb:bf:33:36:47:33:2a:8a:6a:b6:86:df:05:5c:df:d5:a9:
         5c:ec:94:2a:9b:43:aa:5b:a7:50:cb:39:1a:d4:e3:68:03:9b:
         4e:93:43:ac:74:73:ba:a9:1f:e3:5e:9b:9c:7d:40:fb:f1:4c:
         c3:8c:18:ac:a7:d9:0e:77:1b:04:20:98:7e:d8:a6:2c:42:de:
         a6:d8:14:58:91:6a:55:6c:f7:f1:7d:54:2c:4b:6e:ee:d6:b3:
         cc:af:4d:32:29:74:50:da:ec:90:e4:51:c4:af:b9:be:18:5d:
         00:c8:ae:0d:81:dc:60:27:45:ea:a7:51:cf:4b:1c:3a:d1:43:
         9a:3e:e4:fc:4a:15:b7:4e:09:fc:b3:ff:d0:05:c1:4b:43:bd:
         fb:6b:4c:a0:53:bb:07:ba:9c:18:83:44:2e:50:3c:99:fa:89:
         e9:66:b0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:01:24 2024 by rpki-client on console-fra.rpki-client.org