Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36362e302f32342d3234203d3e20323732303235.roa
File:                     3138312e3232342e36362e302f32342d3234203d3e20323732303235.roa (raw, json)
Hash identifier:          sphVLGT7f7Guz45Yyt2FqFjJErX06WzXjIIKyr7OveQ=
Subject key identifier:   85:8D:AD:FB:4F:F5:15:EA:0B:63:90:DB:1F:37:9D:C5:7B:EE:33:47
Certificate issuer:       /CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
Certificate serial:       2447E4002E68BDA984A6D6B47FF6840BEE91385E
Authority key identifier: FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36362e302f32342d3234203d3e20323732303235.roa
Signing time:             Fri 13 Sep 2024 16:00:02 +0000
ROA not before:           Fri 13 Sep 2024 15:55:02 +0000
ROA not after:            Fri 12 Sep 2025 16:00:02 +0000
asID:                     272025
IP address blocks:        181.224.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 31 Oct 2024 16:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:47:e4:00:2e:68:bd:a9:84:a6:d6:b4:7f:f6:84:0b:ee:91:38:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
        Validity
            Not Before: Sep 13 15:55:02 2024 GMT
            Not After : Sep 12 16:00:02 2025 GMT
        Subject: CN=858DADFB4FF515EA0B6390DB1F379DC57BEE3347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:b1:a7:2a:52:fd:c7:80:72:10:42:b9:fe:
                    ac:0a:5a:09:f1:9c:ac:fa:95:6c:25:94:48:69:53:
                    13:19:c5:84:73:cc:5e:97:31:7e:c6:2b:aa:5c:8a:
                    65:e8:42:80:b2:29:90:74:12:8f:0f:82:04:b0:c6:
                    72:74:05:47:6f:fb:49:fd:9f:0d:f2:5f:d8:d3:3c:
                    ed:cb:e4:a9:14:a8:dd:78:f5:6c:38:64:5a:4d:fc:
                    bb:a6:6a:3a:8c:a2:b2:8a:e1:11:ee:04:a9:95:54:
                    d9:29:70:58:fa:ac:1d:44:ea:b1:4b:3f:61:50:a3:
                    32:80:eb:79:49:34:34:fd:35:83:bd:9e:59:e2:4e:
                    25:ef:34:02:ef:5f:e9:76:c0:40:11:2d:b4:28:19:
                    5e:ce:e9:6a:cf:17:9d:45:f2:2b:57:b0:4b:59:7e:
                    f4:16:3e:0b:0f:c0:f4:86:62:b5:3f:02:dd:01:88:
                    c5:e9:2e:1f:de:62:cd:ac:16:ec:68:3d:ac:09:59:
                    b2:1a:51:ac:6c:5e:2c:d4:8c:92:cb:9b:f8:4a:73:
                    ac:39:02:5b:7b:fe:4b:97:b5:35:37:ed:6b:6a:19:
                    5e:7a:5d:1c:75:aa:dd:e7:a0:e3:66:4a:97:7d:d4:
                    53:12:de:62:2e:6a:89:2c:20:5c:16:4f:49:8d:13:
                    88:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8D:AD:FB:4F:F5:15:EA:0B:63:90:DB:1F:37:9D:C5:7B:EE:33:47
            X509v3 Authority Key Identifier:
                keyid:FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36362e302f32342d3234203d3e20323732303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:eb:ec:e8:4b:49:4f:04:4e:98:4f:56:00:a7:f3:c6:73:52:
         4a:47:73:c1:fc:25:94:ec:a6:02:ec:6c:b1:d4:a8:1e:90:f0:
         07:6b:3e:b3:57:a7:79:d6:50:f3:9c:59:a4:83:e7:e5:08:6b:
         d9:ce:0b:45:c7:24:d0:44:ed:62:9d:34:d1:e7:f4:43:78:34:
         5e:fb:06:ad:3c:37:fe:65:66:7e:4f:3d:01:25:3a:7a:99:02:
         23:1b:83:43:91:2a:5e:15:1c:48:de:b3:c8:d3:4c:65:dc:4f:
         07:b2:bf:b5:0c:97:d7:4b:15:f8:35:64:0b:04:ac:07:d6:99:
         84:7b:36:81:36:54:df:e2:7d:42:0f:42:43:58:25:e0:34:12:
         e5:95:e2:d7:82:a5:34:7d:8b:ca:ab:45:ce:19:34:2b:32:94:
         a2:1a:7d:cd:42:22:88:d1:57:e2:4f:88:31:2e:dd:7d:53:0c:
         02:3f:60:a1:5a:f7:0a:06:b4:41:ac:88:49:a8:91:a8:00:ec:
         fd:cb:8c:18:c8:e9:16:a4:07:f5:ab:6a:90:68:44:d6:fc:27:
         86:16:9c:04:f6:a2:88:8b:a7:54:37:de:a9:95:75:02:34:e1:
         7c:be:3b:de:3d:0f:d0:a3:29:28:68:d3:b4:00:13:9d:b8:80:
         5a:39:11:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 27 23:48:34 2024 by rpki-client on console-fra.rpki-client.org