Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/380F8A29A0094EFBDFF72B546E96208C9C0D03EF172C5A90DDCA4CB608556A6C/0/3138312e3137372e302e302f31382d3234203d3e20323634363432.roa
File:                     3138312e3137372e302e302f31382d3234203d3e20323634363432.roa (raw, json)
Hash identifier:          v+dfySIF1O6V2yPfW4MHMtNJekZgXO2hYoCu5feIld8=
Subject key identifier:   89:CE:21:A5:A8:8F:6E:2C:01:DA:A3:76:F1:96:0A:8E:6E:1E:A2:1A
Certificate issuer:       /CN=FFD79896199115D473E566BF25169401D7AAE011
Certificate serial:       5BECC1ED0AA50F502DD72D4350AE6444CCEB7F0F
Authority key identifier: FF:D7:98:96:19:91:15:D4:73:E5:66:BF:25:16:94:01:D7:AA:E0:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFD79896199115D473E566BF25169401D7AAE011.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/380F8A29A0094EFBDFF72B546E96208C9C0D03EF172C5A90DDCA4CB608556A6C/0/3138312e3137372e302e302f31382d3234203d3e20323634363432.roa
Signing time:             Tue 05 Mar 2024 17:40:17 +0000
ROA not before:           Tue 05 Mar 2024 17:35:17 +0000
ROA not after:            Tue 04 Mar 2025 17:40:17 +0000
asID:                     264642
IP address blocks:        181.177.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/380F8A29A0094EFBDFF72B546E96208C9C0D03EF172C5A90DDCA4CB608556A6C/0/FFD79896199115D473E566BF25169401D7AAE011.crl
                          rsync://repository.lacnic.net/rpki/lacnic/380F8A29A0094EFBDFF72B546E96208C9C0D03EF172C5A90DDCA4CB608556A6C/0/FFD79896199115D473E566BF25169401D7AAE011.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFD79896199115D473E566BF25169401D7AAE011.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 01:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ec:c1:ed:0a:a5:0f:50:2d:d7:2d:43:50:ae:64:44:cc:eb:7f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD79896199115D473E566BF25169401D7AAE011
        Validity
            Not Before: Mar  5 17:35:17 2024 GMT
            Not After : Mar  4 17:40:17 2025 GMT
        Subject: CN=89CE21A5A88F6E2C01DAA376F1960A8E6E1EA21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:30:a7:9d:c4:cd:14:03:0b:b7:7b:02:97:d3:
                    c4:0d:0a:1e:89:d7:50:cb:66:5c:53:a7:eb:c4:d2:
                    0c:3a:e0:97:19:8a:04:8e:f4:2e:c8:23:b4:31:3e:
                    e2:48:a7:e4:01:30:bb:55:76:2c:28:02:23:f1:55:
                    08:11:a9:49:96:73:73:2a:cd:07:ad:3c:8b:55:ce:
                    39:47:57:6a:e0:4f:35:17:23:c8:82:cd:7b:84:f7:
                    af:bc:8c:29:fb:d3:6e:ba:cb:35:31:95:93:06:80:
                    81:07:9c:ec:f0:04:7e:2f:ce:61:aa:5d:2b:9e:0c:
                    11:47:1d:3c:f6:9b:0c:7e:78:d8:65:7e:59:93:6b:
                    1b:e7:3d:86:2d:80:a0:c4:6d:96:9b:da:2b:7c:29:
                    16:76:4f:ba:f9:4b:7e:de:23:33:b3:15:19:79:7c:
                    f6:f1:56:5e:a7:cc:3e:ea:d7:52:3f:bf:d3:83:a8:
                    6f:f5:d4:5b:74:88:31:fc:5b:99:32:43:55:4a:8b:
                    87:c1:aa:6d:da:8f:57:ba:df:9c:49:91:04:ca:48:
                    fe:89:24:9d:14:ad:00:88:78:10:44:6a:6a:c1:a7:
                    74:68:ee:65:a4:68:98:0b:33:6e:ec:a0:a9:dd:9c:
                    d2:32:a9:6d:72:89:56:73:3a:51:d9:de:c9:23:e9:
                    d5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CE:21:A5:A8:8F:6E:2C:01:DA:A3:76:F1:96:0A:8E:6E:1E:A2:1A
            X509v3 Authority Key Identifier:
                keyid:FF:D7:98:96:19:91:15:D4:73:E5:66:BF:25:16:94:01:D7:AA:E0:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/380F8A29A0094EFBDFF72B546E96208C9C0D03EF172C5A90DDCA4CB608556A6C/0/FFD79896199115D473E566BF25169401D7AAE011.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFD79896199115D473E566BF25169401D7AAE011.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/380F8A29A0094EFBDFF72B546E96208C9C0D03EF172C5A90DDCA4CB608556A6C/0/3138312e3137372e302e302f31382d3234203d3e20323634363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         46:63:dc:34:ab:bf:79:ff:e4:99:fb:70:47:71:b3:8a:dd:23:
         ad:2c:38:8a:df:9f:36:18:85:96:69:2f:26:5d:ab:0e:fc:01:
         af:fa:5e:38:c0:81:3f:74:46:1d:2f:a9:bf:01:07:41:36:9e:
         da:fa:df:36:04:20:90:92:17:f4:fb:31:4e:5c:cb:60:34:e6:
         8f:26:f5:a5:8f:db:56:1f:e4:8a:26:35:d3:40:c7:6a:1d:9e:
         6c:42:73:34:cb:3e:a8:b5:ca:ae:cc:a5:0f:5e:a4:79:28:ce:
         7c:fd:a4:51:da:e7:29:eb:f7:ac:5f:ce:e6:11:cd:f9:63:44:
         78:7f:5a:74:23:a1:15:80:00:22:74:5f:5d:a3:f1:14:85:3e:
         6a:cc:e7:e5:f2:5e:6b:b3:b5:27:e2:5b:e2:c6:dc:36:fd:c9:
         2b:fe:92:31:ee:bc:94:e9:36:0d:58:b1:45:4f:63:db:83:7d:
         1d:5b:f8:b5:b7:59:e7:16:3a:40:9a:01:19:f4:a3:bd:2f:25:
         e8:24:c1:26:9e:3b:d6:91:d1:2f:f6:94:3a:00:4a:67:7d:7d:
         1b:df:6e:7c:2b:d3:6d:f7:a7:64:e2:ee:77:b6:4a:1e:c2:02:
         3b:cc:21:56:ae:60:ee:5b:b3:1b:ef:95:37:8c:29:eb:c8:3d:
         b0:64:73:8a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUW+zB7QqlD1At1y1DUK5kRMzrfw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZENzk4OTYxOTkxMTVENDczRTU2NkJGMjUxNjk0MDFE
N0FBRTAxMTAeFw0yNDAzMDUxNzM1MTdaFw0yNTAzMDQxNzQwMTdaMDMxMTAvBgNV
BAMTKDg5Q0UyMUE1QTg4RjZFMkMwMURBQTM3NkYxOTYwQThFNkUxRUEyMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3MKedxM0UAwu3ewKX08QNCh6J
11DLZlxTp+vE0gw64JcZigSO9C7II7QxPuJIp+QBMLtVdiwoAiPxVQgRqUmWc3Mq
zQetPItVzjlHV2rgTzUXI8iCzXuE96+8jCn70266yzUxlZMGgIEHnOzwBH4vzmGq
XSueDBFHHTz2mwx+eNhlflmTaxvnPYYtgKDEbZab2it8KRZ2T7r5S37eIzOzFRl5
fPbxVl6nzD7q11I/v9ODqG/11Ft0iDH8W5kyQ1VKi4fBqm3aj1e635xJkQTKSP6J
JJ0UrQCIeBBEamrBp3Ro7mWkaJgLM27soKndnNIyqW1yiVZzOlHZ3skj6dWfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUic4hpaiPbiwB2qN28ZYKjm4eohowHwYDVR0j
BBgwFoAU/9eYlhmRFdRz5Wa/JRaUAdeq4BEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zODBGOEEyOUEwMDk0RUZCREZGNzJCNTQ2RTk2MjA4QzlD
MEQwM0VGMTcyQzVBOTBERENBNENCNjA4NTU2QTZDLzAvRkZENzk4OTYxOTkxMTVE
NDczRTU2NkJGMjUxNjk0MDFEN0FBRTAxMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRkQ3OTg5NjE5OTExNUQ0NzNF
NTY2QkYyNTE2OTQwMUQ3QUFFMDExLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzgwRjhBMjlBMDA5NEVGQkRGRjcyQjU0NkU5NjIwOEM5QzBEMDNFRjE3
MkM1QTkwRERDQTRDQjYwODU1NkE2Qy8wLzMxMzgzMTJlMzEzNzM3MmUzMDJlMzAy
ZjMxMzgyZDMyMzQyMDNkM2UyMDMyMzYzNDM2MzQzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBrWxADAN
BgkqhkiG9w0BAQsFAAOCAQEARmPcNKu/ef/kmftwR3Gzit0jrSw4it+fNhiFlmkv
Jl2rDvwBr/peOMCBP3RGHS+pvwEHQTae2vrfNgQgkJIX9PsxTlzLYDTmjyb1pY/b
Vh/kiiY100DHah2ebEJzNMs+qLXKrsylD16keSjOfP2kUdrnKev3rF/O5hHN+WNE
eH9adCOhFYAAInRfXaPxFIU+aszn5fJea7O1J+Jb4sbcNv3JK/6SMe68lOk2DVix
RU9j24N9HVv4tbdZ5xY6QJoBGfSjvS8l6CTBJp471pHRL/aUOgBKZ319G99ufCvT
bfenZOLud7ZKHsICO8whVq5g7luzG++VN4wp68g9sGRzig==
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:26:29 2024 by rpki-client on console-fra.rpki-client.org