Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/3138312e3139312e3134302e302f32332d3234203d3e20323639383531.roa
File:                     3138312e3139312e3134302e302f32332d3234203d3e20323639383531.roa (raw, json)
Hash identifier:          zDb/qcFE7ccLOG7EiaB7w1CAZXv/gm8U0ZG/0DkeqxY=
Subject key identifier:   65:F8:C6:F9:91:6D:58:53:17:37:80:B1:CA:45:1C:EF:7C:70:75:89
Certificate issuer:       /CN=8DA187B6784AB92BC5FCB172157C2EAD2698915C
Certificate serial:       5494E08A51027B74093838535CEBBC04A323EA65
Authority key identifier: 8D:A1:87:B6:78:4A:B9:2B:C5:FC:B1:72:15:7C:2E:AD:26:98:91:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/3138312e3139312e3134302e302f32332d3234203d3e20323639383531.roa
Signing time:             Tue 05 Mar 2024 17:57:06 +0000
ROA not before:           Tue 05 Mar 2024 17:52:06 +0000
ROA not after:            Tue 04 Mar 2025 17:57:06 +0000
asID:                     269851
IP address blocks:        181.191.140.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:94:e0:8a:51:02:7b:74:09:38:38:53:5c:eb:bc:04:a3:23:ea:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA187B6784AB92BC5FCB172157C2EAD2698915C
        Validity
            Not Before: Mar  5 17:52:06 2024 GMT
            Not After : Mar  4 17:57:06 2025 GMT
        Subject: CN=65F8C6F9916D5853173780B1CA451CEF7C707589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:f0:5d:6a:2e:56:d8:b6:a5:9a:e6:e1:63:
                    e3:99:86:2c:f8:40:b3:c1:57:e3:76:54:90:6e:24:
                    c4:9f:e7:5b:16:21:38:dc:cd:45:aa:78:cf:a1:91:
                    de:3d:b8:fe:69:b0:94:36:13:66:46:c1:0c:24:89:
                    01:c1:cf:32:3e:53:45:1c:a1:9f:be:47:46:b5:98:
                    f0:f8:3d:fa:6e:4e:ba:69:e4:7a:6d:a7:7d:91:71:
                    90:bd:4a:31:f7:45:11:1b:04:7c:c7:d4:85:39:94:
                    44:a3:67:05:e2:ea:9b:0d:0c:91:a5:5e:f5:8a:37:
                    5f:0a:5d:09:dc:96:1f:50:b8:b2:14:13:18:e6:59:
                    d4:f2:9e:42:63:ed:f1:db:6d:25:52:80:33:bc:f4:
                    97:cb:85:28:b2:88:c6:2e:a0:39:4b:63:e8:ac:e9:
                    06:ee:e5:5b:0b:52:13:03:65:e0:dd:ce:6a:25:0e:
                    07:f0:13:63:8a:a4:9c:85:b6:e3:b0:09:8d:83:5f:
                    18:69:7c:be:e8:7c:5e:46:4e:a9:da:12:2f:0b:64:
                    d1:6c:27:f2:35:b7:72:a9:a6:a7:f5:1e:ca:db:04:
                    a5:31:15:c0:46:39:6b:43:4c:97:ab:49:cd:cd:41:
                    68:7f:36:4c:36:98:ba:8f:56:b7:b6:8c:a1:74:9e:
                    66:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F8:C6:F9:91:6D:58:53:17:37:80:B1:CA:45:1C:EF:7C:70:75:89
            X509v3 Authority Key Identifier:
                keyid:8D:A1:87:B6:78:4A:B9:2B:C5:FC:B1:72:15:7C:2E:AD:26:98:91:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/3138312e3139312e3134302e302f32332d3234203d3e20323639383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:ed:9b:7b:2b:05:78:71:37:21:8e:09:1e:7b:94:1d:c5:5e:
         50:2e:e8:04:3e:22:41:07:79:65:ad:08:54:8b:cc:a8:1f:a7:
         00:3b:65:01:6c:3c:ee:81:f2:6e:f4:32:26:b7:e1:88:e9:1f:
         d4:44:1b:82:f6:46:05:99:8e:6e:b6:6d:ac:09:fb:f0:6e:9b:
         cb:1d:4e:ac:56:29:fe:13:3d:e0:f9:5b:81:b3:a0:d4:34:50:
         3c:24:14:e4:5a:08:e2:3d:6b:a0:51:6e:7b:5e:1e:42:f6:88:
         23:89:f1:2b:6f:0e:fc:5a:49:f4:c6:87:1c:e2:bb:59:d1:37:
         9e:f7:e2:c8:45:dd:46:97:76:41:19:c7:c6:11:42:a0:31:57:
         70:80:dd:82:12:e5:a5:89:4c:20:2a:97:0a:18:7a:d7:38:59:
         f3:b7:54:0a:8b:f1:c5:6a:e4:d9:3f:75:aa:b4:63:10:e8:62:
         af:d8:93:b6:e4:27:a7:8b:bc:b5:f0:a9:0f:cd:3c:c9:48:02:
         ff:27:5c:38:69:ae:6b:d0:c8:38:71:79:41:12:5d:af:17:8e:
         5b:f8:1e:13:d3:02:6c:a0:32:a9:9b:bf:06:9b:5b:8b:45:57:
         a7:72:9b:b0:00:d8:40:16:66:71:9b:cd:16:7b:ad:4f:fa:2b:
         0f:4a:32:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:34:17 2024 by rpki-client on console-fra.rpki-client.org