Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/3138312e3139312e3134322e302f32332d3234203d3e20323634373338.roa
File:                     3138312e3139312e3134322e302f32332d3234203d3e20323634373338.roa (raw, json)
Hash identifier:          zISQ2zOImMrtvIUCl1GQMZNDnjEN7EkWfbGweJBT2Lc=
Subject key identifier:   C9:48:EE:E8:DA:E1:13:E9:05:FD:D6:90:5B:63:5A:54:F4:B1:69:00
Certificate issuer:       /CN=8DA187B6784AB92BC5FCB172157C2EAD2698915C
Certificate serial:       797B012D66486F75629ABE244934166CCC40D0F3
Authority key identifier: 8D:A1:87:B6:78:4A:B9:2B:C5:FC:B1:72:15:7C:2E:AD:26:98:91:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/3138312e3139312e3134322e302f32332d3234203d3e20323634373338.roa
Signing time:             Tue 05 Mar 2024 17:57:07 +0000
ROA not before:           Tue 05 Mar 2024 17:52:07 +0000
ROA not after:            Tue 04 Mar 2025 17:57:07 +0000
asID:                     264738
IP address blocks:        181.191.142.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7b:01:2d:66:48:6f:75:62:9a:be:24:49:34:16:6c:cc:40:d0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA187B6784AB92BC5FCB172157C2EAD2698915C
        Validity
            Not Before: Mar  5 17:52:07 2024 GMT
            Not After : Mar  4 17:57:07 2025 GMT
        Subject: CN=C948EEE8DAE113E905FDD6905B635A54F4B16900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:08:44:97:b2:84:ac:c6:d6:11:94:46:fa:
                    6d:e8:90:e2:b2:5d:88:22:52:33:88:9f:4c:6c:c0:
                    e6:ac:5e:16:38:16:75:dd:33:35:39:90:4d:ea:8c:
                    96:a3:d7:f0:41:5f:71:9d:be:ae:89:12:ef:63:80:
                    58:63:d4:65:fb:76:4a:69:21:7e:26:a9:bd:44:a0:
                    fc:98:8c:d5:ea:78:89:b5:a4:0b:b4:3b:0d:7c:24:
                    fd:4f:8e:c6:b6:a6:11:97:a1:a7:e9:ec:cd:28:a8:
                    f0:7c:10:f8:79:26:83:8e:ae:3f:18:2d:69:d2:f1:
                    17:64:e2:9d:22:54:32:3a:ed:b5:db:d6:01:9f:42:
                    14:0b:bf:3c:ba:16:cf:89:30:6f:1f:19:b2:fb:54:
                    9b:02:15:a5:19:dc:a8:a0:53:f8:fb:cb:91:b3:29:
                    2d:84:56:df:2a:e5:e3:92:9a:51:3c:95:a0:1a:58:
                    c7:a3:2f:da:d0:5c:ca:a0:fa:1b:df:d2:af:53:04:
                    e0:a9:0b:8b:7a:78:68:74:4b:de:b2:1a:73:6b:55:
                    d2:4a:01:dc:ec:2f:34:2c:10:11:72:8d:18:d8:4c:
                    cc:2e:8c:67:cb:96:23:f7:13:62:fd:5b:09:01:7a:
                    2d:68:3a:4f:ed:fa:88:4c:c6:f2:64:4c:21:2f:66:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:48:EE:E8:DA:E1:13:E9:05:FD:D6:90:5B:63:5A:54:F4:B1:69:00
            X509v3 Authority Key Identifier:
                keyid:8D:A1:87:B6:78:4A:B9:2B:C5:FC:B1:72:15:7C:2E:AD:26:98:91:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA187B6784AB92BC5FCB172157C2EAD2698915C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49D1A38572A71EEEEAFC0E1BF973D25E3ACE0A56DBA6F628C4143822B15B5D35/0/3138312e3139312e3134322e302f32332d3234203d3e20323634373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:82:41:5a:c0:04:50:bd:ad:c2:b5:e4:af:02:77:9a:65:d3:
         eb:58:f2:4f:e5:bd:61:22:79:24:9a:2e:64:c4:5a:19:91:95:
         87:c7:2a:ce:02:62:79:fa:93:80:9e:a2:81:80:f2:37:16:b4:
         e0:98:a2:ef:9d:ca:3c:47:d9:82:ef:a7:61:4f:a4:34:7a:f4:
         07:57:8b:7b:5e:5e:f0:b7:22:b3:32:3a:ad:54:1a:f4:b7:67:
         42:c0:d7:d5:72:f8:10:66:48:5d:f6:62:a1:2f:73:5b:aa:92:
         b3:47:e4:b2:46:55:ea:b2:eb:b1:cc:dc:59:f3:97:c6:a3:dc:
         d4:32:dd:58:b1:a0:a7:b3:e4:3a:12:da:13:66:af:d5:4e:01:
         99:ad:7d:91:56:70:32:b1:e8:e4:a7:53:52:a9:d6:58:fd:4e:
         1d:2e:78:9f:c7:f5:4b:72:0a:15:64:96:0b:2e:a9:9c:79:bc:
         9d:9a:d0:fc:c9:9c:62:6e:06:b9:1a:fe:bd:be:2a:de:e5:c7:
         a6:04:57:17:c8:5c:78:38:12:67:ab:4c:65:e6:aa:bf:c4:23:
         7a:a4:96:1d:7f:a8:0b:a4:5e:c0:24:80:23:f9:c9:e8:0a:a9:
         89:f3:f9:50:8f:3e:a0:7e:ef:ea:51:ab:27:52:69:f8:84:24:
         fb:af:e6:06
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUeXsBLWZIb3Vimr4kSTQWbMxA0PMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERBMTg3QjY3ODRBQjkyQkM1RkNCMTcyMTU3QzJFQUQy
Njk4OTE1QzAeFw0yNDAzMDUxNzUyMDdaFw0yNTAzMDQxNzU3MDdaMDMxMTAvBgNV
BAMTKEM5NDhFRUU4REFFMTEzRTkwNUZERDY5MDVCNjM1QTU0RjRCMTY5MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmiwhEl7KErMbWEZRG+m3okOKy
XYgiUjOIn0xswOasXhY4FnXdMzU5kE3qjJaj1/BBX3Gdvq6JEu9jgFhj1GX7dkpp
IX4mqb1EoPyYjNXqeIm1pAu0Ow18JP1Pjsa2phGXoafp7M0oqPB8EPh5JoOOrj8Y
LWnS8Rdk4p0iVDI67bXb1gGfQhQLvzy6Fs+JMG8fGbL7VJsCFaUZ3KigU/j7y5Gz
KS2EVt8q5eOSmlE8laAaWMejL9rQXMqg+hvf0q9TBOCpC4t6eGh0S96yGnNrVdJK
AdzsLzQsEBFyjRjYTMwujGfLliP3E2L9WwkBei1oOk/t+ohMxvJkTCEvZrELAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUyUju6NrhE+kF/daQW2NaVPSxaQAwHwYDVR0j
BBgwFoAUjaGHtnhKuSvF/LFyFXwurSaYkVwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OUQxQTM4NTcyQTcxRUVFRUFGQzBFMUJGOTczRDI1RTNB
Q0UwQTU2REJBNkY2MjhDNDE0MzgyMkIxNUI1RDM1LzAvOERBMTg3QjY3ODRBQjky
QkM1RkNCMTcyMTU3QzJFQUQyNjk4OTE1Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84REExODdCNjc4NEFCOTJCQzVG
Q0IxNzIxNTdDMkVBRDI2OTg5MTVDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDlEMUEzODU3MkE3MUVFRUVBRkMwRTFCRjk3M0QyNUUzQUNFMEE1NkRC
QTZGNjI4QzQxNDM4MjJCMTVCNUQzNS8wLzMxMzgzMTJlMzEzOTMxMmUzMTM0MzIy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzQzNzMzMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG1
v44wDQYJKoZIhvcNAQELBQADggEBAAGCQVrABFC9rcK15K8Cd5pl0+tY8k/lvWEi
eSSaLmTEWhmRlYfHKs4CYnn6k4CeooGA8jcWtOCYou+dyjxH2YLvp2FPpDR69AdX
i3teXvC3IrMyOq1UGvS3Z0LA19Vy+BBmSF32YqEvc1uqkrNH5LJGVeqy67HM3Fnz
l8aj3NQy3VixoKez5DoS2hNmr9VOAZmtfZFWcDKx6OSnU1Kp1lj9Th0ueJ/H9Uty
ChVklgsuqZx5vJ2a0PzJnGJuBrka/r2+Kt7lx6YEVxfIXHg4EmerTGXmqr/EI3qk
lh1/qAukXsAkgCP5yegKqYnz+VCPPqB+7+pRqydSafiEJPuv5gY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:53 2024 by rpki-client on console-ams.rpki-client.org