Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135342e302f32342d3234203d3e203233323433.roa
File:                     3138312e3138392e3135342e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          SUj/qRXpZAknXPya1EW+KDTWqf0/lySflm860WyYbZo=
Subject key identifier:   BE:2F:59:D0:10:43:09:AA:A8:34:1C:62:48:A7:13:78:2C:17:5A:32
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       59E54302F23822197F11BD03FB13582B2357CEDE
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135342e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:41:06 +0000
ROA not before:           Tue 05 Mar 2024 17:36:06 +0000
ROA not after:            Tue 04 Mar 2025 17:41:06 +0000
asID:                     23243
IP address blocks:        181.189.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e5:43:02:f2:38:22:19:7f:11:bd:03:fb:13:58:2b:23:57:ce:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 17:36:06 2024 GMT
            Not After : Mar  4 17:41:06 2025 GMT
        Subject: CN=BE2F59D0104309AAA8341C6248A713782C175A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b5:e2:3a:f9:cc:bb:88:15:ff:a4:9d:99:c6:
                    4a:ca:69:f1:b6:82:83:ec:c9:3f:9b:7f:54:02:e8:
                    42:11:62:63:65:94:93:ae:15:0c:9f:09:6a:3d:05:
                    5d:e3:fb:cf:8c:d8:ad:c6:ea:df:9a:6c:ed:f9:5d:
                    a1:01:4b:50:29:eb:8e:d3:be:cc:c3:c1:0c:f2:99:
                    9b:38:3f:4d:03:aa:48:47:36:11:6c:6c:49:47:41:
                    d0:64:93:14:eb:ac:4e:15:62:28:26:9a:c0:07:ba:
                    66:a2:62:38:64:6d:d5:da:a4:d5:cb:ab:be:12:ba:
                    ef:9f:07:b1:d3:ad:aa:f8:eb:e6:97:ff:46:23:20:
                    c0:09:ee:bd:f6:f4:42:3e:56:5e:28:9d:6a:a0:98:
                    a1:f7:20:ea:fc:23:33:99:10:ae:12:0e:1f:f7:10:
                    64:3c:42:0f:b3:aa:73:8e:47:31:76:dd:0b:00:ba:
                    27:ef:49:d6:9c:9d:2e:3e:3f:11:09:f0:32:66:17:
                    10:9f:80:6f:fb:6f:ed:8a:9a:b3:5e:f1:26:67:75:
                    91:10:33:4c:d0:ac:bf:b6:fc:e1:af:c0:b4:bb:39:
                    53:85:12:e1:ee:38:31:4e:ad:7c:41:be:bd:4f:b5:
                    f3:6b:8d:47:50:9c:06:d8:9b:b5:09:71:ba:72:35:
                    44:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2F:59:D0:10:43:09:AA:A8:34:1C:62:48:A7:13:78:2C:17:5A:32
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135342e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:a6:3f:e9:a3:47:3a:ce:24:fa:8b:ad:93:36:9f:c3:21:eb:
         a6:51:da:9c:7c:fd:2e:93:05:2b:06:f7:b0:8f:3e:b4:4c:64:
         28:5c:63:d1:99:ee:3c:72:35:86:ed:83:da:26:06:5f:da:1e:
         ab:f8:2b:a3:ac:c4:7c:6d:bf:4d:cc:5f:bf:46:44:cf:b1:5b:
         c5:a5:80:1d:21:7a:2c:bd:a6:1f:46:ee:77:e9:a0:86:59:c9:
         1e:4c:52:85:e2:fd:5b:db:18:31:e5:e8:29:c6:8a:75:04:32:
         7a:fa:d9:e4:b0:6b:5f:8b:ea:05:07:ce:89:19:e8:ef:d9:f4:
         d3:e8:e0:dc:a2:71:c5:74:cd:fb:da:1b:3b:b7:c0:51:4d:51:
         9c:2d:0d:44:7a:87:be:24:db:7b:54:6b:e6:79:00:d5:5c:cb:
         66:ad:42:ba:f8:d8:d0:5c:92:91:05:5e:8b:dc:d0:4c:c4:a1:
         95:fb:3e:d3:73:3b:31:97:e2:9c:e3:ff:99:26:7c:45:70:cc:
         fb:cb:af:40:48:4c:ac:e8:5e:d8:90:85:e4:75:b3:c2:a0:2e:
         95:92:6b:66:1b:6c:00:da:87:17:8f:49:76:4d:8b:d5:02:e0:
         38:33:ce:56:de:03:7b:6e:1c:86:01:49:e1:74:52:cb:e1:f7:
         65:1c:6e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org