Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/3138312e3231302e3132382e302f31372d3138203d3e2037373237.roa
File:                     3138312e3231302e3132382e302f31372d3138203d3e2037373237.roa (raw, json)
Hash identifier:          8yN0+Y+iG4KrpmcJCBHawtSYu8X1KD627Irn/U1lyz4=
Subject key identifier:   B6:F4:84:E3:07:7D:CD:CB:92:9D:21:2D:54:EA:3C:80:57:4B:AC:E6
Certificate issuer:       /CN=1BFA6C930F29F85B0B64884549D566A287510282
Certificate serial:       64CD18394CB0C0BB4E3934314AB437929089DFF8
Authority key identifier: 1B:FA:6C:93:0F:29:F8:5B:0B:64:88:45:49:D5:66:A2:87:51:02:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BFA6C930F29F85B0B64884549D566A287510282.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/3138312e3231302e3132382e302f31372d3138203d3e2037373237.roa
Signing time:             Tue 05 Mar 2024 18:16:54 +0000
ROA not before:           Tue 05 Mar 2024 18:11:54 +0000
ROA not after:            Tue 04 Mar 2025 18:16:54 +0000
asID:                     7727
IP address blocks:        181.210.128.0/17 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/1BFA6C930F29F85B0B64884549D566A287510282.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/1BFA6C930F29F85B0B64884549D566A287510282.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BFA6C930F29F85B0B64884549D566A287510282.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:cd:18:39:4c:b0:c0:bb:4e:39:34:31:4a:b4:37:92:90:89:df:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BFA6C930F29F85B0B64884549D566A287510282
        Validity
            Not Before: Mar  5 18:11:54 2024 GMT
            Not After : Mar  4 18:16:54 2025 GMT
        Subject: CN=B6F484E3077DCDCB929D212D54EA3C80574BACE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2f:49:77:33:54:41:6d:94:21:7a:cf:e6:3f:
                    25:67:a2:c6:7e:1a:c5:b3:9d:38:fb:2f:08:2b:6c:
                    73:35:a1:f8:dc:1d:ab:22:b1:16:1f:c6:69:b9:3e:
                    33:cc:2d:bd:51:45:a4:69:bf:a6:00:d6:77:7e:bc:
                    41:54:63:9d:28:bb:05:8c:b9:04:dd:6f:2e:3d:3d:
                    74:8e:41:5c:10:da:9d:42:e5:eb:a4:d2:e5:ad:ad:
                    f0:6b:45:d5:67:31:60:b9:dc:9b:50:19:c2:c4:0b:
                    aa:ec:27:07:5f:96:83:fa:b1:74:00:e1:a7:e4:47:
                    3b:59:0d:31:e4:85:76:2d:d9:68:48:1d:0d:08:cb:
                    5d:e4:95:69:65:48:c7:6e:8d:62:e7:ee:fd:5f:28:
                    3d:a2:8b:7e:f4:37:2c:c8:dd:f7:37:42:9f:bf:a5:
                    c6:d9:40:e7:49:ba:57:25:91:55:db:5b:85:76:10:
                    a9:58:98:59:f6:89:bb:06:39:c7:99:79:cd:4a:1b:
                    f0:55:e0:35:ce:b1:b1:83:2a:d6:fc:71:2f:ca:a5:
                    7f:2d:a5:8a:a7:ec:00:df:d9:bb:9d:05:17:8f:fc:
                    eb:60:fa:46:26:5b:d3:ab:b0:c8:5f:4c:f0:a5:cc:
                    94:fa:15:c9:36:8e:01:70:71:df:3f:cb:cc:29:70:
                    e6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F4:84:E3:07:7D:CD:CB:92:9D:21:2D:54:EA:3C:80:57:4B:AC:E6
            X509v3 Authority Key Identifier:
                keyid:1B:FA:6C:93:0F:29:F8:5B:0B:64:88:45:49:D5:66:A2:87:51:02:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/1BFA6C930F29F85B0B64884549D566A287510282.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BFA6C930F29F85B0B64884549D566A287510282.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/3138312e3231302e3132382e302f31372d3138203d3e2037373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.210.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0f:3e:1f:1c:6e:57:43:cc:e0:6b:82:41:90:2a:73:39:e5:86:
         9b:f0:c3:02:10:07:fa:ce:0a:25:72:ba:71:6b:c0:d8:64:73:
         3b:b7:31:18:02:ae:fd:43:e1:ca:67:b0:34:56:17:19:39:9f:
         47:d2:aa:e2:ee:de:1a:70:53:31:48:8b:12:3c:60:7b:c5:b0:
         14:10:42:2d:ab:a4:cb:ed:97:03:ab:55:33:db:aa:d5:3c:a0:
         d1:90:1b:c5:55:68:20:f6:0a:ec:89:1e:d7:1f:7c:17:d2:b1:
         ae:61:2c:9b:f4:c3:ab:8a:2d:b6:2f:f0:09:f7:5e:79:74:21:
         c6:fb:16:dd:f0:14:34:52:fd:29:85:61:0b:27:2e:ad:23:cd:
         62:e5:db:c1:61:55:bb:69:d7:0c:f2:90:1c:6b:f9:40:5b:3a:
         5d:ae:cc:3e:8c:6a:6a:b6:38:e6:93:54:7f:2e:f3:c5:75:1a:
         e9:f1:75:e6:d9:a2:d9:f1:68:26:1a:18:cb:59:88:7c:4a:2c:
         20:60:89:4a:68:0f:4a:a4:5f:7f:c4:65:3c:83:a7:bf:80:b6:
         d8:fa:3b:e2:84:a3:72:af:c2:1c:aa:24:dc:49:9f:70:6d:75:
         77:26:47:d0:1d:0c:c1:a2:18:4e:20:26:ca:66:df:32:1e:33:
         e7:96:c5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:45:59 2024 by rpki-client on console-fra.rpki-client.org