Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/506ECE54D58C312C1FE909CAF7F01B08F98DD88F9C419F32BC16A1A824202DFF/0/3138312e3139312e3233332e302f32342d3234203d3e20323733323333.roa
File:                     3138312e3139312e3233332e302f32342d3234203d3e20323733323333.roa (raw, json)
Hash identifier:          ZugzjhwX0vMRSUfbjsFqt6GpYSiXLVrH0Knb0eLX/JU=
Subject key identifier:   3C:A0:CE:FA:36:5B:EF:FB:5D:16:A4:97:26:45:99:17:9F:B4:3B:20
Certificate issuer:       /CN=EAABADF60F7D8392AF593C14898736FBCA05391A
Certificate serial:       1E9FD8E44E611C38A7052AC4E9BBC629724AF35F
Authority key identifier: EA:AB:AD:F6:0F:7D:83:92:AF:59:3C:14:89:87:36:FB:CA:05:39:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAABADF60F7D8392AF593C14898736FBCA05391A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/506ECE54D58C312C1FE909CAF7F01B08F98DD88F9C419F32BC16A1A824202DFF/0/3138312e3139312e3233332e302f32342d3234203d3e20323733323333.roa
Signing time:             Wed 01 May 2024 15:45:00 +0000
ROA not before:           Wed 01 May 2024 15:40:00 +0000
ROA not after:            Wed 30 Apr 2025 15:45:00 +0000
asID:                     273233
IP address blocks:        181.191.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/506ECE54D58C312C1FE909CAF7F01B08F98DD88F9C419F32BC16A1A824202DFF/0/EAABADF60F7D8392AF593C14898736FBCA05391A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/506ECE54D58C312C1FE909CAF7F01B08F98DD88F9C419F32BC16A1A824202DFF/0/EAABADF60F7D8392AF593C14898736FBCA05391A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAABADF60F7D8392AF593C14898736FBCA05391A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9f:d8:e4:4e:61:1c:38:a7:05:2a:c4:e9:bb:c6:29:72:4a:f3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAABADF60F7D8392AF593C14898736FBCA05391A
        Validity
            Not Before: May  1 15:40:00 2024 GMT
            Not After : Apr 30 15:45:00 2025 GMT
        Subject: CN=3CA0CEFA365BEFFB5D16A497264599179FB43B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fb:b2:78:ba:18:d1:02:ce:c0:6f:77:0b:32:
                    1f:88:40:8d:68:6e:cd:92:ca:8e:28:b0:6d:13:40:
                    e9:36:67:05:7d:f0:e6:f4:42:6a:c4:68:ad:bd:a1:
                    3a:c7:62:b1:0b:67:33:6a:47:f9:38:7d:51:00:53:
                    0a:5d:92:38:34:79:8c:57:2d:d8:45:6b:9a:d0:2b:
                    78:46:d7:a6:49:97:e1:e9:2d:b2:b1:8f:30:5c:52:
                    5f:2b:e2:00:70:07:7b:2a:a6:34:e9:42:da:7f:4a:
                    1e:82:0a:26:e5:30:38:0f:b0:24:87:bc:47:46:e2:
                    d3:93:ce:29:b9:c8:40:87:ff:fa:81:5b:a2:11:f9:
                    fe:e6:ed:5e:88:2c:1f:bb:0d:19:23:4e:05:ed:49:
                    80:f5:1f:60:8f:44:93:59:a4:81:6c:97:d7:c0:b9:
                    91:5b:a0:f6:b5:49:d9:3d:89:9a:71:ed:9a:ee:21:
                    ea:ba:df:24:4a:f5:95:ec:c2:61:05:17:68:ea:db:
                    bc:47:3a:20:00:67:65:eb:5a:7e:c6:c3:e0:83:5c:
                    45:54:9f:18:9e:4e:ba:c7:7f:54:d9:71:97:7b:5c:
                    fc:bc:cf:16:57:00:4a:6f:e9:80:6e:7f:f0:f7:af:
                    12:fd:ab:14:28:e1:87:af:00:e3:66:44:8a:09:ee:
                    e1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A0:CE:FA:36:5B:EF:FB:5D:16:A4:97:26:45:99:17:9F:B4:3B:20
            X509v3 Authority Key Identifier:
                keyid:EA:AB:AD:F6:0F:7D:83:92:AF:59:3C:14:89:87:36:FB:CA:05:39:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/506ECE54D58C312C1FE909CAF7F01B08F98DD88F9C419F32BC16A1A824202DFF/0/EAABADF60F7D8392AF593C14898736FBCA05391A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAABADF60F7D8392AF593C14898736FBCA05391A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/506ECE54D58C312C1FE909CAF7F01B08F98DD88F9C419F32BC16A1A824202DFF/0/3138312e3139312e3233332e302f32342d3234203d3e20323733323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:10:66:92:b8:c3:e0:3c:bd:bd:f6:22:b6:66:cb:8c:06:26:
         18:90:97:10:ff:3d:89:bd:03:56:55:9b:e4:ad:f6:29:47:5f:
         7f:22:ec:01:d0:a6:c7:eb:1b:79:7b:cb:56:6a:45:97:9d:06:
         e3:5b:ad:87:ce:ba:e6:36:d8:c9:3f:8f:a1:0b:ea:b3:4a:bd:
         90:ad:39:6f:3f:cd:35:bc:34:57:ef:84:0e:22:4a:99:df:5b:
         38:93:66:5d:e3:e5:78:8e:3d:a3:1f:b7:eb:96:0b:00:a8:7c:
         67:fc:44:55:69:9e:60:7d:cd:76:2a:80:1e:7e:4b:3c:70:1f:
         64:25:25:71:72:c3:0e:f0:1b:62:85:7f:32:5e:10:09:cb:89:
         27:6a:ea:0f:23:60:55:71:0d:b2:eb:12:80:30:3f:b2:d9:03:
         d3:c6:bc:50:29:64:11:fc:95:52:47:98:1d:01:ee:7a:19:35:
         3b:d9:63:d1:2e:e8:9c:55:4b:c6:c8:a1:70:3b:ed:9c:77:52:
         27:9c:eb:49:6b:a7:a9:60:a4:2e:d5:f4:94:6e:62:87:e7:34:
         bc:c2:3f:97:fb:b8:59:7f:4c:8b:e0:3a:00:e2:4e:32:10:80:
         54:13:4e:7c:38:97:85:e5:d2:cf:4d:80:4a:63:95:5b:97:db:
         55:04:c9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 15:58:33 2024 by rpki-client on console-fra.rpki-client.org