Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135322e302f32342d3234203d3e203233323433.roa
File:                     3138312e3138392e3135322e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          5yNm60yPP+mz7N7c4MZlHz2Y5cB7sBMrxPhaf0y3l+0=
Subject key identifier:   50:99:57:26:F4:92:81:08:9E:B8:24:6A:15:DA:C1:C0:77:A3:36:6D
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       2BE22C07FD8632F72348F7D72FBB6B35DF196065
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135322e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:41:04 +0000
ROA not before:           Tue 05 Mar 2024 17:36:04 +0000
ROA not after:            Tue 04 Mar 2025 17:41:04 +0000
asID:                     23243
IP address blocks:        181.189.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e2:2c:07:fd:86:32:f7:23:48:f7:d7:2f:bb:6b:35:df:19:60:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 17:36:04 2024 GMT
            Not After : Mar  4 17:41:04 2025 GMT
        Subject: CN=50995726F49281089EB8246A15DAC1C077A3366D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:57:21:ee:f5:df:b5:5b:2d:da:f3:a2:36:10:
                    13:e6:ec:67:3e:60:23:7e:19:39:a9:de:0e:2e:51:
                    09:14:61:2e:57:a4:21:b2:f5:7b:5c:22:01:39:f2:
                    a8:ba:8f:8c:57:2f:3b:e3:89:b1:1e:e3:73:ca:e3:
                    a7:38:24:19:71:ba:52:03:2d:ba:53:30:21:81:0d:
                    b4:96:8f:32:98:52:dd:18:c5:58:86:75:0e:1c:18:
                    69:bb:f0:9b:ed:03:eb:84:36:1a:0e:ab:ee:ee:0e:
                    0b:f8:73:2b:cb:95:2e:e4:59:05:a9:81:a2:bb:53:
                    cb:5e:53:f8:6e:1f:4a:e3:7a:c1:6c:43:ee:be:6f:
                    59:19:15:7a:59:66:cb:a3:6e:46:54:29:4a:1c:76:
                    10:39:84:e2:99:a3:19:e0:83:25:b8:4e:c9:a4:fb:
                    6f:b7:73:fa:a7:8d:89:00:e5:aa:e8:83:c3:64:41:
                    66:c2:0b:ef:ee:09:8a:2e:e2:4e:4b:f8:6b:56:ae:
                    42:2d:92:a2:a7:1d:fa:e2:03:7c:e6:3c:5e:7e:b1:
                    db:ed:b1:f7:55:53:09:01:5f:1e:b9:6d:a4:a1:2f:
                    e0:b3:0f:c6:bc:80:48:b1:63:64:e5:30:0b:46:ce:
                    fe:35:51:f3:c5:4e:8d:b1:d6:de:c5:5f:84:35:3a:
                    9b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:99:57:26:F4:92:81:08:9E:B8:24:6A:15:DA:C1:C0:77:A3:36:6D
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135322e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:64:a2:96:28:46:b4:cd:a8:b1:cd:02:57:a8:ae:ab:ae:7f:
         03:56:63:22:b5:0a:d3:7e:cc:9f:4e:cc:f3:cb:d8:7a:b5:b8:
         53:21:70:68:cc:5d:10:ad:cb:49:d5:41:63:df:6f:17:e1:1f:
         90:41:54:0c:f0:7b:c7:0b:15:e1:67:bf:79:12:58:b3:9d:5f:
         37:8a:9e:01:99:3b:da:e8:d2:21:af:35:fb:da:8f:2d:7b:75:
         de:af:24:09:6f:70:5e:9e:4a:00:6c:b8:d9:68:99:fc:1b:f1:
         cc:c7:9a:bf:3d:f7:60:7b:b6:9f:a7:40:99:18:d0:47:0d:61:
         ff:0f:7a:3b:db:3f:2e:d0:81:f0:ea:24:a5:48:f2:ba:5f:44:
         4c:3c:3b:36:d3:10:46:8a:55:25:f1:cb:21:c8:81:cf:96:93:
         ff:8c:2f:fb:96:21:67:e7:62:84:9b:6c:b7:5a:ac:b7:bb:99:
         b2:c7:87:47:64:e7:72:ad:7c:37:41:4e:1e:2f:6b:7e:94:13:
         63:f2:c6:a0:50:69:ec:c9:e8:00:45:8f:09:66:3a:4b:68:90:
         01:25:fb:de:ea:82:e0:24:a1:27:50:79:d1:d3:78:47:53:73:
         53:28:47:42:80:28:27:e1:86:98:74:36:b0:09:ba:fd:42:17:
         eb:bf:3f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org