Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/3138312e3231302e36342e302f31382d3138203d3e2037373237.roa
File:                     3138312e3231302e36342e302f31382d3138203d3e2037373237.roa (raw, json)
Hash identifier:          F7ihSJ5a1S3E+/8WXmRbc4EID4jcNdpyERXQrkqmEIw=
Subject key identifier:   33:EA:33:8B:CE:42:1D:87:8B:F7:14:B4:A5:2C:68:E8:2A:56:4A:6F
Certificate issuer:       /CN=1BFA6C930F29F85B0B64884549D566A287510282
Certificate serial:       5A6106CDB0C43E5487BBBC8B84B318FA8937DCB8
Authority key identifier: 1B:FA:6C:93:0F:29:F8:5B:0B:64:88:45:49:D5:66:A2:87:51:02:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BFA6C930F29F85B0B64884549D566A287510282.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/3138312e3231302e36342e302f31382d3138203d3e2037373237.roa
Signing time:             Tue 05 Mar 2024 18:16:55 +0000
ROA not before:           Tue 05 Mar 2024 18:11:55 +0000
ROA not after:            Tue 04 Mar 2025 18:16:55 +0000
asID:                     7727
IP address blocks:        181.210.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/1BFA6C930F29F85B0B64884549D566A287510282.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/1BFA6C930F29F85B0B64884549D566A287510282.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BFA6C930F29F85B0B64884549D566A287510282.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:61:06:cd:b0:c4:3e:54:87:bb:bc:8b:84:b3:18:fa:89:37:dc:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BFA6C930F29F85B0B64884549D566A287510282
        Validity
            Not Before: Mar  5 18:11:55 2024 GMT
            Not After : Mar  4 18:16:55 2025 GMT
        Subject: CN=33EA338BCE421D878BF714B4A52C68E82A564A6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7e:fc:aa:a0:0b:4c:ca:86:5b:0a:43:ae:6b:
                    00:c1:23:b6:e8:5e:fe:78:8a:0e:cd:c4:01:3e:ed:
                    f6:40:48:fb:3b:dd:ff:28:6d:56:16:c6:6e:b8:11:
                    a8:7b:fc:46:2f:72:24:d1:bf:f5:1f:56:92:7f:63:
                    89:3d:b5:4d:7d:54:37:79:93:a9:70:c5:73:b0:98:
                    8e:d3:55:87:60:d3:36:a3:a5:3b:26:b2:9e:77:f7:
                    71:36:aa:17:f1:ad:3b:4b:ec:81:58:5d:98:f2:ee:
                    55:05:b2:58:12:80:a6:f2:9f:b6:ed:e4:42:f9:29:
                    75:d0:8e:dd:25:ef:09:d0:48:5b:62:10:86:27:3a:
                    88:d6:2e:04:67:34:1a:28:48:5d:9b:82:bc:cd:cb:
                    35:89:a2:3b:53:47:e1:af:ed:dc:68:cb:e4:4a:16:
                    d3:a4:68:be:8e:ce:00:7f:9c:c0:25:53:9a:02:8d:
                    82:6e:f7:df:01:cc:ec:b9:79:8d:0d:6c:a7:76:7c:
                    1a:26:35:2a:13:2b:b9:8f:fe:0c:07:e9:8e:00:32:
                    f8:de:0e:74:30:ec:d5:ff:0d:1c:ab:76:db:7c:52:
                    56:fb:d0:72:0b:47:aa:f2:cd:d1:02:8b:da:94:8f:
                    6d:f8:5e:54:93:e4:05:89:44:19:d7:ee:c3:c5:95:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EA:33:8B:CE:42:1D:87:8B:F7:14:B4:A5:2C:68:E8:2A:56:4A:6F
            X509v3 Authority Key Identifier:
                keyid:1B:FA:6C:93:0F:29:F8:5B:0B:64:88:45:49:D5:66:A2:87:51:02:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/1BFA6C930F29F85B0B64884549D566A287510282.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BFA6C930F29F85B0B64884549D566A287510282.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C2BE413E3CD1005F73E3C734995FC7259E803E9C00091AFACA93C4DFA5078DD/0/3138312e3231302e36342e302f31382d3138203d3e2037373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.210.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         66:46:27:f2:10:5f:1d:eb:9d:7f:d4:09:9a:ed:53:db:e7:0e:
         08:61:e7:c5:b3:13:c9:e0:21:a5:21:66:96:0a:72:b1:f5:3b:
         cb:64:64:a9:d5:ba:2b:9f:ea:25:3b:7f:3c:f0:8b:b9:4e:9a:
         94:aa:df:49:a2:40:9e:07:64:7c:b8:63:7b:c9:39:29:6b:df:
         ff:f1:8c:bf:c8:b1:0f:57:a0:4d:df:32:80:ac:25:10:c2:b1:
         a2:21:67:e1:69:ed:b8:a1:46:18:c6:9c:63:2e:f3:c0:2f:55:
         26:c9:2c:51:67:0e:79:87:c0:e6:d3:5d:7d:0b:81:5a:99:f6:
         72:d3:71:ee:ef:7a:a7:52:76:bd:ab:8b:d8:32:f9:8e:ac:5f:
         a1:51:bb:a3:f0:16:a3:19:01:ad:d0:51:c8:db:6f:8e:c6:31:
         9b:2f:60:da:da:ec:ee:3b:a0:66:b4:08:e9:14:8a:15:2d:12:
         c7:0e:66:03:d7:cf:44:e1:7f:0b:91:3d:c4:b8:02:e7:e7:81:
         5b:40:6e:5b:ba:11:4a:e9:cd:4e:40:f3:f3:c3:a8:e6:8c:ef:
         d7:b8:60:d6:cd:3b:34:24:cc:f6:39:f7:99:72:ff:27:0e:f8:
         99:b9:82:5f:54:dd:8e:14:32:01:cc:b8:cb:89:54:bf:b2:42:
         db:34:8e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:21 2024 by rpki-client on console-ams.rpki-client.org