Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36372e302f32342d3234203d3e20323732303235.roa
File:                     3138312e3232342e36372e302f32342d3234203d3e20323732303235.roa (raw, json)
Hash identifier:          nH8lPzBZyrquLB+DntmnRI3CYrgYTb7zX9GaPXHbT8c=
Subject key identifier:   DD:27:E9:90:CF:1C:23:8C:1C:A6:D4:79:5E:62:36:BA:1F:8A:D3:76
Certificate issuer:       /CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
Certificate serial:       1AE920701496669FCA4E5A01FBA6B67E445A4233
Authority key identifier: FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36372e302f32342d3234203d3e20323732303235.roa
Signing time:             Fri 13 Sep 2024 16:00:00 +0000
ROA not before:           Fri 13 Sep 2024 15:55:00 +0000
ROA not after:            Fri 12 Sep 2025 16:00:00 +0000
asID:                     272025
IP address blocks:        181.224.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e9:20:70:14:96:66:9f:ca:4e:5a:01:fb:a6:b6:7e:44:5a:42:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
        Validity
            Not Before: Sep 13 15:55:00 2024 GMT
            Not After : Sep 12 16:00:00 2025 GMT
        Subject: CN=DD27E990CF1C238C1CA6D4795E6236BA1F8AD376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:a0:e0:fb:f3:f8:d5:aa:fa:be:b6:59:9b:
                    e5:3f:e6:5e:b8:83:c2:5d:c7:df:89:1d:d9:07:58:
                    ad:41:2e:7c:dd:db:98:e5:cf:57:a7:a9:89:96:0e:
                    29:3c:42:2b:c0:2d:97:a6:aa:be:85:a8:f1:4a:49:
                    83:80:30:bb:6a:07:fc:65:89:ab:e9:31:79:76:11:
                    80:b6:a7:34:d0:23:9c:90:43:da:de:74:84:a8:52:
                    e7:e7:72:9c:a5:43:31:c3:83:a8:67:b8:d5:ab:a4:
                    5b:1b:82:fd:fe:1d:c5:85:7b:18:27:7a:56:48:d8:
                    45:7b:21:01:c9:2f:7a:aa:51:f1:df:a8:a5:69:e4:
                    68:37:e0:3a:30:0b:83:3a:ea:89:6b:65:50:be:19:
                    c4:9d:65:b3:df:f5:5a:dd:a4:02:df:fc:ea:09:82:
                    71:ca:55:a0:18:ec:86:2f:e5:f2:a3:7e:18:40:cf:
                    52:ed:97:07:f5:ee:a0:7a:e7:80:ce:7a:4d:16:74:
                    0b:8f:17:d2:45:37:91:50:dc:b7:83:74:64:37:44:
                    0c:44:84:cb:a6:23:9a:8e:52:34:0b:5f:c4:d5:2d:
                    8b:15:01:a3:b0:fc:a1:4c:e4:d9:f8:b6:0d:2a:66:
                    22:fd:b1:34:2a:e4:df:84:f2:43:21:5c:43:db:f8:
                    ee:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:27:E9:90:CF:1C:23:8C:1C:A6:D4:79:5E:62:36:BA:1F:8A:D3:76
            X509v3 Authority Key Identifier:
                keyid:FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36372e302f32342d3234203d3e20323732303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:0a:64:97:3f:63:74:8a:82:27:7f:ff:a5:10:cf:a8:ca:94:
         43:33:76:31:da:41:71:88:84:88:86:89:84:f4:b4:fc:ab:c0:
         9c:1e:66:fa:41:cc:22:63:2a:f2:3d:5c:31:81:37:af:3d:7f:
         2e:ba:a8:c4:4b:74:ba:f4:2e:ad:5d:94:8b:02:63:bf:0a:57:
         05:af:4e:f1:65:83:44:09:8d:69:b4:6e:47:fc:b9:ea:fe:0a:
         d2:33:b6:c9:6a:84:17:dc:dc:27:0e:df:56:8f:45:32:d3:95:
         60:2a:69:8a:13:36:ee:6b:7f:27:a5:bd:18:69:de:5d:10:39:
         92:84:1d:47:8b:6a:c3:64:fd:49:e5:cf:d4:95:0c:05:80:91:
         12:e1:53:98:ac:cb:cf:e9:39:21:73:8a:e4:5e:c9:fb:ab:73:
         b9:a6:d3:cd:48:df:6d:da:50:85:42:d3:66:71:75:e9:a8:a8:
         b5:dc:bf:20:cd:42:a3:1d:a7:1e:ae:ab:8d:c0:c5:1f:fb:a7:
         49:81:93:4f:44:a5:32:82:ed:8c:f1:fa:94:63:b2:1e:9f:4b:
         d5:db:04:53:ae:18:d0:2a:99:48:35:78:72:53:90:49:56:df:
         ae:a5:0d:7e:87:5e:5a:67:74:2f:89:44:f9:55:e0:88:2c:5f:
         3a:c0:6e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:21 2024 by rpki-client on console-fra.rpki-client.org