Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/3138312e3233332e38382e302f32322d3234203d3e20323731393037.roa
File:                     3138312e3233332e38382e302f32322d3234203d3e20323731393037.roa (raw, json)
Hash identifier:          MZMBWWugePuyZA8I+wphD0AOryME6zNY38aijcuiJEw=
Subject key identifier:   E2:3A:AA:D1:52:DD:8E:93:4F:F3:DC:68:1F:A5:08:86:1C:B7:6E:F8
Certificate issuer:       /CN=2240B644D1FD422B45BF149B24CCCE788AE6DF25
Certificate serial:       1FA8CCE872D29ED70364B087765767D14B82EECF
Authority key identifier: 22:40:B6:44:D1:FD:42:2B:45:BF:14:9B:24:CC:CE:78:8A:E6:DF:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/3138312e3233332e38382e302f32322d3234203d3e20323731393037.roa
Signing time:             Tue 05 Mar 2024 17:45:24 +0000
ROA not before:           Tue 05 Mar 2024 17:40:24 +0000
ROA not after:            Tue 04 Mar 2025 17:45:24 +0000
asID:                     271907
IP address blocks:        181.233.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a8:cc:e8:72:d2:9e:d7:03:64:b0:87:76:57:67:d1:4b:82:ee:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2240B644D1FD422B45BF149B24CCCE788AE6DF25
        Validity
            Not Before: Mar  5 17:40:24 2024 GMT
            Not After : Mar  4 17:45:24 2025 GMT
        Subject: CN=E23AAAD152DD8E934FF3DC681FA508861CB76EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:04:8b:68:38:34:47:65:5c:87:38:d9:9a:ff:
                    0f:6e:3f:d9:67:cf:6c:41:58:20:c5:28:20:dd:13:
                    b0:19:f1:dd:54:0a:d0:33:3b:ac:26:8a:bd:bd:80:
                    9e:66:79:f1:4e:2f:7e:7e:e9:0d:83:78:bc:69:69:
                    96:58:c6:5f:a2:82:d9:39:0c:ea:9b:f3:50:56:4c:
                    1b:35:a1:23:24:ce:c5:0d:6f:64:7a:5a:b7:ee:28:
                    13:99:4e:0d:b4:7d:c6:a1:fe:be:59:3c:ac:cc:ed:
                    22:2c:ef:b6:24:0c:99:54:dc:1e:a6:1a:24:66:29:
                    81:68:2b:df:34:07:fa:bc:21:86:72:00:4a:59:41:
                    98:d2:ed:ce:40:80:95:7b:b2:8b:7a:68:d7:e0:38:
                    89:50:59:3c:16:e0:4b:bd:0c:6a:16:58:a4:b4:23:
                    82:1c:88:9d:75:0d:31:f6:66:f3:a0:ea:8a:06:99:
                    cc:a1:3a:87:ca:6d:54:33:fc:6a:8c:6f:16:21:07:
                    70:65:6c:80:f0:97:fb:9f:38:8a:26:2d:de:9c:34:
                    f4:55:71:db:56:5f:04:55:a7:b3:df:cc:63:8b:41:
                    e6:ba:d0:d9:a4:42:9f:23:a5:e4:da:0f:cf:28:fb:
                    87:40:c7:d0:65:fb:7f:08:8d:1d:2f:93:d0:31:3f:
                    b1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3A:AA:D1:52:DD:8E:93:4F:F3:DC:68:1F:A5:08:86:1C:B7:6E:F8
            X509v3 Authority Key Identifier:
                keyid:22:40:B6:44:D1:FD:42:2B:45:BF:14:9B:24:CC:CE:78:8A:E6:DF:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2240B644D1FD422B45BF149B24CCCE788AE6DF25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54C44F39A16EA01F4700CA77DC5F9303139D23448EB7171A35A2AD0B08FF0371/0/3138312e3233332e38382e302f32322d3234203d3e20323731393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:ea:b8:bc:c0:74:84:55:19:0a:6e:30:5b:84:5d:f0:83:72:
         d6:5f:5c:2f:58:32:95:59:67:0f:50:c1:d1:b2:34:05:c0:7b:
         91:77:9f:ae:af:cf:16:12:89:b9:4b:5f:01:1e:c3:17:a8:02:
         77:ae:42:6d:56:03:78:44:18:d6:46:db:d2:e5:51:53:89:6c:
         a0:6a:88:70:56:28:b8:a8:6a:66:be:94:e0:c6:e5:9c:8b:cf:
         c1:eb:4b:9a:43:26:f6:4d:9e:53:d8:46:0b:cc:89:ab:6c:07:
         d2:d3:47:39:cf:38:1b:85:d5:3d:81:d6:62:97:c1:9a:3e:c7:
         da:78:cc:3f:79:28:a8:c6:25:35:eb:38:90:6a:11:00:bc:a6:
         05:93:b7:5c:82:57:a0:ad:ce:81:c8:8f:b6:5a:02:52:e2:41:
         36:9d:79:f3:04:fd:09:b7:be:a6:0b:3a:9b:55:27:53:ec:cd:
         18:a5:1a:22:50:64:88:f6:33:a5:5e:49:9b:d2:90:06:a1:34:
         3f:7e:de:8c:76:f4:66:37:04:86:f3:94:a1:8d:1e:08:94:36:
         5d:8e:58:6d:a1:29:08:d8:de:3a:cc:19:d5:42:26:1f:2b:60:
         23:e7:46:17:ce:87:33:9f:9e:4e:ba:41:21:7a:c9:fb:7f:a2:
         46:d5:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org