Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/3138312e3137372e3231362e302f32322d3234203d3e203532343333.roa
File:                     3138312e3137372e3231362e302f32322d3234203d3e203532343333.roa (raw, json)
Hash identifier:          ZHCY28s/MC4xcotSPtihvdGRellwlOY5whGSjwr9I6k=
Subject key identifier:   9F:D0:A7:72:BD:C7:6F:D3:71:B5:71:D0:3B:7A:89:03:D1:2C:FA:ED
Certificate issuer:       /CN=366C86A35982162DA62035B192A9F9C2AC96FF52
Certificate serial:       7945D0CB3EC680266BDF05864E25347D2E82343B
Authority key identifier: 36:6C:86:A3:59:82:16:2D:A6:20:35:B1:92:A9:F9:C2:AC:96:FF:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/366C86A35982162DA62035B192A9F9C2AC96FF52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/3138312e3137372e3231362e302f32322d3234203d3e203532343333.roa
Signing time:             Tue 05 Mar 2024 18:16:58 +0000
ROA not before:           Tue 05 Mar 2024 18:11:58 +0000
ROA not after:            Tue 04 Mar 2025 18:16:58 +0000
asID:                     52433
IP address blocks:        181.177.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/366C86A35982162DA62035B192A9F9C2AC96FF52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/366C86A35982162DA62035B192A9F9C2AC96FF52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/366C86A35982162DA62035B192A9F9C2AC96FF52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:45:d0:cb:3e:c6:80:26:6b:df:05:86:4e:25:34:7d:2e:82:34:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366C86A35982162DA62035B192A9F9C2AC96FF52
        Validity
            Not Before: Mar  5 18:11:58 2024 GMT
            Not After : Mar  4 18:16:58 2025 GMT
        Subject: CN=9FD0A772BDC76FD371B571D03B7A8903D12CFAED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:b1:22:fd:de:b5:88:a6:73:3d:bc:cd:95:
                    18:c2:8c:39:f9:86:f1:30:79:af:67:9b:04:fc:92:
                    b0:75:22:24:12:74:b5:cd:07:23:46:66:64:f8:92:
                    98:30:6b:1b:6b:82:6c:3a:af:11:86:63:d4:ec:06:
                    0e:45:7a:6d:34:01:e3:f7:08:b1:7f:d0:11:8c:97:
                    d1:c1:db:31:b4:fa:e0:bf:46:cb:a6:e3:5e:b0:d5:
                    32:ad:53:5e:f0:50:e0:9d:20:70:db:2f:e1:95:8f:
                    5e:38:74:b7:7c:d3:44:a9:f5:8b:83:3a:0a:b2:48:
                    81:dc:9e:8e:e8:82:66:e6:fa:38:b8:10:d0:ee:77:
                    52:71:b0:3f:1f:0a:9b:2e:d1:30:06:e7:e4:e2:9a:
                    19:bf:f2:71:1f:1a:7c:dd:a8:98:3b:e2:39:70:10:
                    42:19:a0:25:57:5f:6f:49:53:20:22:8b:0a:39:26:
                    64:73:c3:cd:3e:e6:2b:3b:cb:be:03:a2:86:e7:a6:
                    a6:dc:5a:9a:47:21:cb:3a:d2:7a:e5:95:fa:93:da:
                    ba:ae:e6:48:f7:5d:c4:0b:af:75:60:7d:61:0a:b2:
                    c2:ba:7c:bc:d5:a3:0e:74:b8:12:6b:ee:e8:ea:9c:
                    e2:e3:b6:35:d8:fd:49:b5:7d:ff:bd:81:fb:d1:75:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D0:A7:72:BD:C7:6F:D3:71:B5:71:D0:3B:7A:89:03:D1:2C:FA:ED
            X509v3 Authority Key Identifier:
                keyid:36:6C:86:A3:59:82:16:2D:A6:20:35:B1:92:A9:F9:C2:AC:96:FF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/366C86A35982162DA62035B192A9F9C2AC96FF52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/366C86A35982162DA62035B192A9F9C2AC96FF52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/3138312e3137372e3231362e302f32322d3234203d3e203532343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:d6:d6:92:76:b4:50:85:98:3d:51:35:a7:f8:4b:5b:e1:c0:
         63:c2:b0:78:9a:e7:b1:a3:6f:b7:16:5c:d4:fa:2a:f8:b6:a7:
         62:42:45:61:dd:b2:25:95:66:24:52:8b:22:d3:e6:8f:6e:a1:
         9f:76:84:a2:ea:93:46:12:fc:a4:3e:55:e7:5c:c4:35:a9:0a:
         e7:05:85:7e:f3:12:9e:6f:a6:67:45:92:55:1f:0e:3a:4d:50:
         6c:01:78:22:93:ce:dc:1f:a2:7a:69:e1:82:57:ec:77:bd:f0:
         fa:34:3b:a6:94:22:da:a8:8b:1c:15:3a:63:48:bb:f9:16:77:
         71:52:be:24:a3:fb:83:0c:28:2d:04:31:5e:3c:cb:f4:92:68:
         99:27:eb:f9:ef:5c:c5:8e:07:18:61:0e:3e:6e:21:89:37:37:
         29:5c:ce:a9:09:21:92:a4:fe:56:22:6c:f2:42:d0:d5:51:76:
         a6:66:f8:57:0c:f7:1f:6e:68:e6:74:0f:86:b9:28:d0:23:3e:
         18:e3:80:16:c7:96:e8:69:d9:b6:09:e8:8d:df:d1:c0:e4:5e:
         34:3e:99:15:c5:17:d6:5c:65:ec:cb:84:b6:5e:7a:19:cf:9e:
         a3:53:f9:48:a8:7f:af:c9:54:86:a9:7e:7f:28:76:7f:b9:33:
         4b:4b:dc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org