Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138312e3138392e3136302e302f32322d3234203d3e20323634383330.roa
File:                     3138312e3138392e3136302e302f32322d3234203d3e20323634383330.roa (raw, json)
Hash identifier:          XDiCeRVvBQNQWJ3qVuAldZ8p997aTt8S+oMs/sr5DOw=
Subject key identifier:   B7:3B:26:50:C7:37:8F:AE:49:55:97:A9:39:EC:4F:3D:BF:13:E5:6E
Certificate issuer:       /CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
Certificate serial:       382A998038E46625347212649E76013E60862160
Authority key identifier: 13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138312e3138392e3136302e302f32322d3234203d3e20323634383330.roa
Signing time:             Tue 05 Mar 2024 17:46:44 +0000
ROA not before:           Tue 05 Mar 2024 17:41:44 +0000
ROA not after:            Tue 04 Mar 2025 17:46:44 +0000
asID:                     264830
IP address blocks:        181.189.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2a:99:80:38:e4:66:25:34:72:12:64:9e:76:01:3e:60:86:21:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
        Validity
            Not Before: Mar  5 17:41:44 2024 GMT
            Not After : Mar  4 17:46:44 2025 GMT
        Subject: CN=B73B2650C7378FAE495597A939EC4F3DBF13E56E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:97:96:f4:3b:0f:a7:ee:eb:e4:c8:91:ef:
                    92:82:53:45:32:41:a3:2c:b5:87:52:ca:ea:5b:a5:
                    87:bd:0c:05:c8:ac:7b:85:1f:ef:dc:e6:db:f4:99:
                    68:95:e0:a3:73:95:4b:71:c2:d1:f5:8c:9f:67:10:
                    67:9d:79:dc:5c:f1:19:df:03:6a:7c:54:2f:22:55:
                    89:e6:51:ce:6e:25:24:fb:24:11:21:3f:a9:21:06:
                    e5:04:91:2b:5c:a6:19:c5:db:e7:8c:b9:bb:d6:09:
                    be:6a:1a:2e:e6:f1:37:b2:09:ed:74:9a:15:db:5d:
                    d4:0b:f1:3a:b8:96:48:3e:ba:2c:3e:83:af:e3:86:
                    d4:67:53:26:f3:24:14:bc:7c:95:96:03:13:b9:ba:
                    97:5c:8f:72:cf:8d:b3:14:a1:f5:b0:0d:69:a8:ea:
                    ba:57:3b:98:11:e0:04:a8:89:9d:33:ce:a5:e2:02:
                    45:9c:32:99:ec:8c:62:12:63:ae:e5:52:72:87:cf:
                    d6:6e:95:e8:b8:e3:70:ff:00:ce:38:aa:40:0d:59:
                    df:66:33:d6:28:f1:49:74:29:51:34:fc:15:30:c5:
                    1a:45:24:ff:a2:c8:42:00:f4:f1:be:fa:6e:b6:11:
                    00:c6:12:3f:bc:44:37:b7:3d:65:aa:11:3c:78:ed:
                    7c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3B:26:50:C7:37:8F:AE:49:55:97:A9:39:EC:4F:3D:BF:13:E5:6E
            X509v3 Authority Key Identifier:
                keyid:13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138312e3138392e3136302e302f32322d3234203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:73:21:54:0f:61:e6:d2:7e:76:55:00:41:e0:e5:3b:5f:3e:
         9a:1d:f7:11:55:0d:f9:b9:59:9d:2f:c4:b1:30:d6:41:3f:e4:
         d8:88:4f:05:78:ed:4c:01:ad:ed:1e:ff:74:06:d3:33:e0:43:
         8f:b4:b8:f9:6a:a8:b3:82:c1:d4:5c:96:f8:1b:af:7c:de:a3:
         9f:dd:7d:b2:85:87:2c:68:3d:94:57:4d:ac:a8:39:24:8c:5b:
         e8:0e:b8:73:49:10:4e:d2:4c:30:23:de:43:87:a1:1e:16:b2:
         1e:ac:c6:67:57:49:dc:1c:43:d5:c1:f2:28:1d:93:02:9d:b6:
         e9:57:dc:31:5e:42:ee:3c:18:ea:2a:07:f3:3e:5f:5a:2a:17:
         9f:5f:be:d0:12:f4:aa:c7:33:ce:ef:03:c4:7f:af:ec:59:61:
         db:8b:2b:2b:62:e1:73:e5:7b:72:29:ce:38:35:94:20:62:12:
         65:51:73:9a:59:42:2e:06:28:f7:37:28:65:bd:6e:e8:ad:a9:
         65:9c:d7:c6:cf:05:30:1c:95:49:33:dc:bf:84:17:e1:a3:f7:
         51:e2:cf:77:cc:61:51:17:06:13:7f:c8:79:a6:de:88:9b:de:
         d9:fd:f1:68:9f:9d:28:de:aa:54:3c:bb:db:d1:50:80:49:7f:
         a9:be:2f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:49:08 2024 by rpki-client on console-fra.rpki-client.org