Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138312e3138392e3137302e302f32342d3234203d3e20323634383330.roa
File:                     3138312e3138392e3137302e302f32342d3234203d3e20323634383330.roa (raw, json)
Hash identifier:          yv27nSsZAOrFryvT9ziQ9BMI0g7DgL/9kPOj0QRPTVw=
Subject key identifier:   EF:3C:7D:47:49:3E:02:32:EF:05:15:78:BB:2E:D2:AD:75:A9:65:5D
Certificate issuer:       /CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
Certificate serial:       10115DA4A452FD378A1F3E515A3FA0085D5BCAD3
Authority key identifier: 13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138312e3138392e3137302e302f32342d3234203d3e20323634383330.roa
Signing time:             Tue 05 Mar 2024 17:46:43 +0000
ROA not before:           Tue 05 Mar 2024 17:41:43 +0000
ROA not after:            Tue 04 Mar 2025 17:46:43 +0000
asID:                     264830
IP address blocks:        181.189.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:11:5d:a4:a4:52:fd:37:8a:1f:3e:51:5a:3f:a0:08:5d:5b:ca:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
        Validity
            Not Before: Mar  5 17:41:43 2024 GMT
            Not After : Mar  4 17:46:43 2025 GMT
        Subject: CN=EF3C7D47493E0232EF051578BB2ED2AD75A9655D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:66:0e:5f:0f:a4:e4:0f:e3:04:3c:32:cf:
                    12:94:d7:67:0d:37:89:7b:8d:cd:b3:bc:20:8f:99:
                    6f:44:51:36:eb:d5:f8:ee:aa:69:f7:ce:b8:65:bb:
                    7b:f3:19:64:05:5c:74:f4:34:1b:ba:83:75:0e:49:
                    0a:59:37:84:01:7f:e9:b6:eb:c5:4f:b8:28:a7:4b:
                    7b:58:7c:69:a9:ce:5e:23:2a:43:f5:ab:b7:7d:49:
                    d7:f7:ef:67:ac:fd:17:43:01:e9:a0:ab:19:4f:12:
                    ca:f2:01:9f:fd:61:e0:40:46:84:d3:c5:43:f9:9b:
                    bd:5f:b6:c1:26:70:0b:58:d1:d7:21:d1:11:36:8d:
                    15:ce:3b:9c:d1:dd:1e:2d:02:cc:b6:f0:42:a0:79:
                    fc:c6:cd:1e:8a:d0:55:bb:4e:7d:76:92:79:b5:92:
                    f0:e9:9e:08:32:62:82:96:e3:53:ae:5c:05:d7:af:
                    ed:98:48:d7:88:6c:88:b9:0d:d2:27:00:c4:e0:1d:
                    50:81:1a:5e:67:bd:1c:e2:ea:50:bb:0f:e3:84:e4:
                    0c:49:87:ef:11:22:fb:52:09:c1:95:31:f6:22:96:
                    41:dd:41:08:c5:53:13:5a:fb:44:9a:4d:0f:7c:5d:
                    01:6a:70:bb:f6:2a:b1:3d:54:63:ee:be:b1:80:55:
                    f9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3C:7D:47:49:3E:02:32:EF:05:15:78:BB:2E:D2:AD:75:A9:65:5D
            X509v3 Authority Key Identifier:
                keyid:13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3138312e3138392e3137302e302f32342d3234203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:ab:cd:94:27:e4:7d:b5:f8:ab:92:a2:ba:1b:58:59:17:7e:
         8c:5b:74:4d:f3:3b:42:75:39:9c:61:e5:bb:2e:4c:a1:74:2b:
         6d:f0:0e:93:61:49:12:97:91:43:b6:8c:38:76:50:92:8d:9b:
         6d:e7:df:65:fa:5f:ab:dc:10:89:54:28:e7:c2:c9:fa:8a:55:
         69:49:14:c0:38:d6:98:aa:30:32:fd:8c:f8:e8:94:da:25:64:
         1a:5e:75:e0:ea:f0:39:ad:89:ee:fa:2c:37:33:a5:28:85:85:
         e8:f3:2b:4f:5c:1f:12:9e:ec:54:9c:d0:09:30:e2:a9:ae:1e:
         ad:22:4c:bb:d3:ae:07:b5:21:66:19:6a:23:49:73:b8:a6:c6:
         5c:3a:ae:72:fb:8b:fb:57:b8:ca:46:05:99:94:4e:5b:a8:4e:
         04:e4:1f:f6:30:ca:35:db:dc:84:80:5f:dc:1c:d0:a7:8f:af:
         79:aa:59:35:ad:b1:9f:56:65:fe:73:05:b9:63:16:5e:7d:e4:
         7d:b2:da:e0:da:d3:3b:86:02:0f:7d:a7:8e:67:8b:27:53:51:
         a6:9d:bf:84:01:dc:c4:78:63:6a:46:27:71:71:72:31:b0:6d:
         31:c4:c4:9f:c4:9b:c6:e6:0f:59:50:ea:8c:83:b4:92:28:f4:
         2e:2f:db:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org