Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/3138312e3231302e302e302f31382d3139203d3e2037373237.roa
File:                     3138312e3231302e302e302f31382d3139203d3e2037373237.roa (raw, json)
Hash identifier:          Ckt8X6IGF40UNIh3MupXPC/bbOdcTyKan6w84PA2414=
Subject key identifier:   A1:41:46:FA:08:C0:77:E4:D2:BD:3A:99:F4:C7:71:41:BF:67:9F:A5
Certificate issuer:       /CN=1BFA6C930F29F85B0B64884549D566A287510282
Certificate serial:       0976C0293561DF4AE0B3B84B5F039914B9AB6A0C
Authority key identifier: 1B:FA:6C:93:0F:29:F8:5B:0B:64:88:45:49:D5:66:A2:87:51:02:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BFA6C930F29F85B0B64884549D566A287510282.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/3138312e3231302e302e302f31382d3139203d3e2037373237.roa
Signing time:             Tue 05 Mar 2024 18:16:53 +0000
ROA not before:           Tue 05 Mar 2024 18:11:53 +0000
ROA not after:            Tue 04 Mar 2025 18:16:53 +0000
asID:                     7727
IP address blocks:        181.210.0.0/18 maxlen: 19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/1BFA6C930F29F85B0B64884549D566A287510282.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/1BFA6C930F29F85B0B64884549D566A287510282.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BFA6C930F29F85B0B64884549D566A287510282.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:76:c0:29:35:61:df:4a:e0:b3:b8:4b:5f:03:99:14:b9:ab:6a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BFA6C930F29F85B0B64884549D566A287510282
        Validity
            Not Before: Mar  5 18:11:53 2024 GMT
            Not After : Mar  4 18:16:53 2025 GMT
        Subject: CN=A14146FA08C077E4D2BD3A99F4C77141BF679FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f6:b6:2c:10:01:99:96:56:22:83:d4:0a:af:
                    77:85:92:57:c7:52:22:64:21:68:5e:82:64:6d:6d:
                    4b:e4:49:93:4b:42:9e:84:6f:a4:4c:e6:20:50:99:
                    77:26:c5:5d:ed:cd:05:89:70:b7:30:36:67:fd:89:
                    1b:de:99:c5:de:25:d7:f1:f4:e8:51:6b:05:15:18:
                    c5:74:8a:d2:8d:93:22:3c:8d:b9:6d:8d:c7:a1:42:
                    d2:79:d2:a5:8f:0c:76:9d:72:c2:9f:27:f1:da:af:
                    df:3e:b1:fc:d9:09:46:1a:a3:1b:41:a5:e1:90:2f:
                    a7:15:f9:b2:ab:7e:2d:37:d7:2c:ce:d4:ed:71:26:
                    fe:dd:6a:10:bf:9f:f6:f1:82:7f:45:f2:2a:78:69:
                    f5:42:1f:f0:6f:96:ba:89:c5:03:ca:37:cc:e0:02:
                    87:e2:76:68:93:7b:09:ad:b9:2e:15:3e:29:58:1d:
                    f5:c8:21:d5:a9:c4:07:7c:7e:ff:6f:63:94:f3:3a:
                    7a:e2:a2:a9:29:8d:fe:f1:4a:1b:c9:80:c8:76:e2:
                    29:5b:2c:66:c2:61:52:0e:3f:59:25:7e:73:4c:60:
                    cd:44:48:4a:e7:a7:64:7d:f6:d8:86:ea:6e:03:96:
                    e3:45:38:84:b7:1a:de:30:ae:5d:29:40:9e:85:70:
                    a1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:41:46:FA:08:C0:77:E4:D2:BD:3A:99:F4:C7:71:41:BF:67:9F:A5
            X509v3 Authority Key Identifier:
                keyid:1B:FA:6C:93:0F:29:F8:5B:0B:64:88:45:49:D5:66:A2:87:51:02:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/1BFA6C930F29F85B0B64884549D566A287510282.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BFA6C930F29F85B0B64884549D566A287510282.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/3138312e3231302e302e302f31382d3139203d3e2037373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.210.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5d:3d:35:73:f6:fa:88:7c:66:57:b5:8f:a2:55:b7:4d:01:bf:
         db:a7:0e:78:ab:37:62:c8:10:1d:a7:43:61:61:81:c0:9d:68:
         d6:3d:f0:52:ec:5f:32:b6:44:3f:c3:0e:0c:7d:14:a3:d2:05:
         8a:f4:fa:5d:e8:af:34:ca:ee:8b:53:eb:56:8b:76:e3:3e:b3:
         d7:80:c0:82:9a:eb:48:a2:8d:e6:77:eb:ca:24:fc:b5:5d:15:
         42:6f:1a:c1:66:d9:3e:fb:51:ff:de:8f:18:19:9e:6f:04:90:
         e4:6b:19:f9:8f:ed:bf:96:35:39:78:86:db:92:2e:2a:6e:2c:
         8a:83:10:c4:ee:dd:cc:0c:54:5d:35:1d:3f:88:74:07:13:34:
         f8:42:87:f7:65:86:cc:42:c7:4e:f3:e4:05:ea:77:d1:7a:c0:
         85:8e:4f:65:ff:17:bf:a6:42:63:4c:c2:4c:d9:f5:de:26:e9:
         31:ba:ae:c6:7e:c7:3e:f0:4f:55:7a:3c:92:c0:67:0e:03:c8:
         ae:a4:d1:5e:c1:63:91:d1:3c:80:f2:29:9d:cf:67:d6:f8:24:
         bd:6b:a5:e6:7b:42:d1:02:e7:7f:da:04:b3:39:87:46:ac:b4:
         5f:56:84:49:8b:69:20:19:58:cf:aa:94:d1:e1:23:61:c9:e3:
         df:5b:6f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:45:59 2024 by rpki-client on console-fra.rpki-client.org