Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3139322e302f31392d3234203d3e203532323531.roa
File:                     3138312e3232352e3139322e302f31392d3234203d3e203532323531.roa (raw, json)
Hash identifier:          4WuYmx0Aog41tPXsKyxwRDdI0d09NWwDC86gmprf8jY=
Subject key identifier:   E3:57:57:67:DC:FA:50:1C:00:02:E2:FF:A3:21:2A:59:9F:40:E1:C3
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       5C08AE438D21058AE010C6208B4BE63148F5065E
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3139322e302f31392d3234203d3e203532323531.roa
Signing time:             Tue 05 Mar 2024 18:05:24 +0000
ROA not before:           Tue 05 Mar 2024 18:00:24 +0000
ROA not after:            Tue 04 Mar 2025 18:05:24 +0000
asID:                     52251
IP address blocks:        181.225.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 01:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:08:ae:43:8d:21:05:8a:e0:10:c6:20:8b:4b:e6:31:48:f5:06:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Mar  5 18:00:24 2024 GMT
            Not After : Mar  4 18:05:24 2025 GMT
        Subject: CN=E3575767DCFA501C0002E2FFA3212A599F40E1C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d2:29:bc:f3:fd:74:ea:ea:77:d4:1a:b0:e8:
                    dc:83:ae:3f:15:d6:ea:b4:bb:16:33:65:6d:eb:1b:
                    53:fe:44:80:23:29:80:95:51:99:15:9d:b4:a4:96:
                    eb:1e:7a:71:3f:1f:ee:3b:41:44:2a:bb:79:00:f4:
                    49:4d:b6:9d:2f:23:19:2e:31:c7:7e:f3:10:cc:87:
                    e3:c1:39:e5:4a:20:2d:27:23:cf:b3:94:cd:b0:b9:
                    85:75:e4:b2:46:c6:28:de:d8:6b:70:3c:1e:11:c0:
                    f6:13:8e:11:52:b3:0b:05:5a:b2:b7:6e:3a:0e:b1:
                    25:f9:17:c3:29:2c:04:75:5e:3d:98:19:7c:69:db:
                    ba:20:37:b4:94:82:1a:f6:90:fc:26:46:29:97:ad:
                    74:2e:f6:b6:02:ff:73:23:60:df:ef:21:a5:a1:89:
                    37:dd:b3:25:b9:ba:e1:49:92:f4:26:6b:70:49:2a:
                    d7:be:70:5d:09:5a:42:1b:6e:1f:dd:f9:5d:a9:b6:
                    5a:4e:16:a9:c8:b5:56:23:78:5a:95:6e:6d:e8:57:
                    b1:f6:bb:29:4c:49:0d:17:bd:bf:29:c1:13:58:ce:
                    13:18:47:67:ca:4b:61:e2:36:13:8c:06:0c:ee:86:
                    ef:b9:be:63:99:8b:d1:7f:93:d3:06:4f:02:97:04:
                    fb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:57:57:67:DC:FA:50:1C:00:02:E2:FF:A3:21:2A:59:9F:40:E1:C3
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3139322e302f31392d3234203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:1f:76:6c:ff:01:29:45:c1:3c:75:f0:f6:a9:b2:47:ee:2b:
         37:72:ef:d3:2a:fb:e4:6b:b4:d5:c4:ed:fb:5b:d7:b9:d5:02:
         34:64:79:3d:b7:82:d4:07:f6:f0:80:d3:31:f4:21:d8:00:56:
         57:b5:4e:85:29:ea:b1:e9:fe:07:7f:b0:fc:24:1c:b4:d2:7a:
         04:53:e2:fc:6d:6e:b7:95:e6:a0:f1:16:84:5e:55:9a:38:93:
         7b:06:68:ec:f2:a2:2f:0f:6f:0b:1b:3b:f9:85:f6:b0:0a:7c:
         8a:77:12:3d:36:17:c6:8b:cf:d4:56:b2:81:3e:68:a8:30:dd:
         4d:01:94:21:97:81:e2:db:1d:d8:d7:be:2e:4f:32:f7:f3:a6:
         a3:ed:70:a7:82:6c:48:e0:a2:ee:15:11:ea:cd:38:43:8e:7d:
         70:a4:b1:30:40:03:4e:9e:c6:ea:1f:c4:ce:0c:68:60:3d:9d:
         33:fe:c9:42:ed:82:26:fb:3c:2a:c3:85:3b:e5:cb:de:e3:b2:
         bb:90:de:e6:66:98:5c:0c:c2:21:02:51:1e:6a:ee:1e:c9:9b:
         bb:06:bb:f3:ca:ee:1d:89:e6:8f:2c:d7:97:6a:88:bd:7a:d9:
         d8:6e:51:e3:ca:83:43:4d:1e:89:c8:a7:9c:23:71:27:43:2b:
         4d:30:b8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 05:39:14 2024 by rpki-client on console-fra.rpki-client.org