Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3138312e3137342e3136302e302f32322d3234203d3e20323633373137.roa
File:                     3138312e3137342e3136302e302f32322d3234203d3e20323633373137.roa (raw, json)
Hash identifier:          pWiiLxbcwMctQztLca1GKa85nJqbk8LKQ2hJB/Hnxd8=
Subject key identifier:   FB:48:64:EF:91:1A:C9:E8:6D:A5:F3:C9:3C:2E:C3:03:AF:21:83:95
Certificate issuer:       /CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
Certificate serial:       025E5F520EDF076643B7A32E2395EACFCBDFBBBE
Authority key identifier: 84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3138312e3137342e3136302e302f32322d3234203d3e20323633373137.roa
Signing time:             Tue 05 Mar 2024 18:00:06 +0000
ROA not before:           Tue 05 Mar 2024 17:55:06 +0000
ROA not after:            Tue 04 Mar 2025 18:00:06 +0000
asID:                     263717
IP address blocks:        181.174.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5e:5f:52:0e:df:07:66:43:b7:a3:2e:23:95:ea:cf:cb:df:bb:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
        Validity
            Not Before: Mar  5 17:55:06 2024 GMT
            Not After : Mar  4 18:00:06 2025 GMT
        Subject: CN=FB4864EF911AC9E86DA5F3C93C2EC303AF218395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:36:d2:ff:09:ea:c0:51:ea:7b:95:6a:52:
                    cd:02:ac:fa:72:5b:e6:24:52:ca:12:bb:71:55:0a:
                    c0:cd:2f:f8:85:47:b4:83:c2:c8:8a:39:86:aa:19:
                    33:c7:71:0f:fe:50:03:96:50:3c:10:60:8d:ca:52:
                    58:0d:f2:04:e8:e0:b6:8d:8d:bd:0c:0b:c3:d3:f3:
                    67:86:f0:d6:ad:16:1a:7e:ff:46:a0:e0:9e:70:19:
                    36:8c:25:70:12:35:62:86:18:fe:92:fc:cc:67:79:
                    b6:71:ca:f1:eb:06:87:85:16:27:bd:4e:21:99:82:
                    a8:4e:10:cf:11:8a:c1:c7:f8:71:93:12:7e:8f:e9:
                    ba:f0:48:3d:d6:03:98:2c:47:34:cd:b1:d7:f9:65:
                    3c:61:dd:b8:49:49:37:d7:2a:c8:6f:c7:ea:a0:fd:
                    da:0a:f3:1c:95:09:b9:ac:4b:7a:6d:02:1b:83:54:
                    e8:1c:d2:83:c3:36:2c:17:b4:ba:1c:8e:0b:62:7b:
                    1c:6f:77:58:1a:7a:27:3f:8b:c8:ce:66:ec:1f:76:
                    7d:07:8d:91:3b:96:f0:75:95:11:e2:80:90:15:6c:
                    57:34:2b:3b:69:4b:bb:5e:ba:97:e8:44:67:4b:00:
                    bf:ff:9c:76:e4:03:16:2b:d2:f2:c2:a3:2e:89:62:
                    3b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:48:64:EF:91:1A:C9:E8:6D:A5:F3:C9:3C:2E:C3:03:AF:21:83:95
            X509v3 Authority Key Identifier:
                keyid:84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3138312e3137342e3136302e302f32322d3234203d3e20323633373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:e3:42:21:5d:50:c2:c0:21:7a:56:c3:0f:2b:b9:53:33:10:
         0f:6d:20:4d:d9:63:8f:01:d6:e9:3a:32:12:ad:6d:3b:49:5f:
         16:c2:14:33:96:ba:c8:70:c2:58:eb:0c:f6:18:c2:ac:97:04:
         66:f4:b6:b5:d2:4e:c4:d1:49:a1:e7:a6:a3:c8:df:8a:d4:ba:
         62:eb:34:7b:9a:60:96:11:ff:50:1f:b5:11:e6:5f:80:a7:ce:
         b1:49:a9:ca:e0:eb:69:71:a9:82:c4:2c:f1:12:81:c1:03:3b:
         85:a6:bf:75:a4:57:3a:70:c8:5f:c4:78:76:64:42:07:7a:b1:
         fc:5d:23:41:73:cc:2f:58:49:31:4d:88:e8:9e:44:0c:eb:07:
         7e:00:2b:b0:b6:03:9c:d0:a9:1e:5e:86:20:c7:38:55:fc:65:
         44:02:7a:ef:45:2e:5e:5b:eb:37:18:11:8c:26:21:12:0a:79:
         42:4d:ae:4a:08:65:94:15:6c:96:a0:29:a8:f5:b1:49:82:76:
         cc:e2:f8:1d:fc:72:e9:b8:ea:5c:d6:2d:2f:44:a4:38:b3:ea:
         46:4b:d8:ae:ff:3a:df:ce:66:c7:52:44:22:41:1e:80:5f:1b:
         23:95:d9:a9:ec:f1:e3:87:8a:81:aa:06:9f:33:51:25:e0:7b:
         92:9c:b2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org