Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3138312e3137372e3139322e302f32312d3234203d3e203532333132.roa
File:                     3138312e3137372e3139322e302f32312d3234203d3e203532333132.roa (raw, json)
Hash identifier:          UirzTNeyH9cjyUAHaf5Nk1BZqBar6P62Tpj1KEZKyag=
Subject key identifier:   0F:C2:4A:9C:52:EC:F8:74:66:AD:CD:5F:A8:61:9C:05:6E:BD:2A:C8
Certificate issuer:       /CN=46B816F254BE102454BE2E382FEA14873A13755C
Certificate serial:       22626A7CB1CC252D0BFD9D38DD3F041222306996
Authority key identifier: 46:B8:16:F2:54:BE:10:24:54:BE:2E:38:2F:EA:14:87:3A:13:75:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3138312e3137372e3139322e302f32312d3234203d3e203532333132.roa
Signing time:             Tue 05 Mar 2024 18:12:15 +0000
ROA not before:           Tue 05 Mar 2024 18:07:15 +0000
ROA not after:            Tue 04 Mar 2025 18:12:15 +0000
asID:                     52312
IP address blocks:        181.177.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:62:6a:7c:b1:cc:25:2d:0b:fd:9d:38:dd:3f:04:12:22:30:69:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B816F254BE102454BE2E382FEA14873A13755C
        Validity
            Not Before: Mar  5 18:07:15 2024 GMT
            Not After : Mar  4 18:12:15 2025 GMT
        Subject: CN=0FC24A9C52ECF87466ADCD5FA8619C056EBD2AC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:0c:d1:18:53:65:d7:bd:0a:96:db:d4:8b:
                    f2:ab:dd:b3:a1:94:25:67:98:f8:15:b6:ab:4d:38:
                    a2:6f:32:00:5b:c8:dc:9e:60:56:49:98:9a:40:48:
                    5d:bb:58:bf:62:81:38:03:0c:d2:07:b0:b5:14:e3:
                    c8:67:4b:80:52:ad:d9:38:df:d8:a0:f1:31:d0:79:
                    8f:1f:d3:92:47:05:a0:08:b6:39:83:33:1c:ab:49:
                    73:f2:41:ca:ac:c9:cc:f7:39:07:31:4c:20:ca:cb:
                    26:06:bd:75:31:0b:c7:39:9f:19:d5:4c:32:11:37:
                    08:3f:fa:bf:ae:72:3f:cd:89:a8:c8:24:ff:23:5a:
                    81:95:75:a5:2c:05:0b:06:cd:7f:fa:80:d0:5c:39:
                    d5:ad:ba:93:bf:a8:b5:bf:7c:09:d1:09:2d:3f:c7:
                    d1:25:e9:b8:62:48:71:16:af:0a:1d:9e:57:ef:43:
                    0f:f3:b4:e3:32:0b:fd:2a:43:79:1d:3d:5a:d7:ff:
                    86:7a:1d:03:66:dc:1b:65:9e:97:fb:1d:16:de:16:
                    4b:06:8a:97:dc:39:39:29:d0:f6:4f:2a:07:5e:41:
                    70:5d:e3:e4:32:8c:c6:b7:05:d8:ea:6d:ce:06:cb:
                    38:ef:11:a9:1a:01:77:34:b7:f9:0b:2a:65:98:67:
                    39:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C2:4A:9C:52:EC:F8:74:66:AD:CD:5F:A8:61:9C:05:6E:BD:2A:C8
            X509v3 Authority Key Identifier:
                keyid:46:B8:16:F2:54:BE:10:24:54:BE:2E:38:2F:EA:14:87:3A:13:75:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3138312e3137372e3139322e302f32312d3234203d3e203532333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:f7:6e:75:85:0b:29:d4:17:b3:9d:c3:07:21:00:1d:48:a8:
         2b:8f:17:fe:44:eb:10:68:94:28:32:e7:1d:b7:c6:0c:04:6b:
         1f:10:44:b3:06:5c:40:e6:de:63:34:d8:19:ae:49:a9:7d:d6:
         81:c4:59:59:00:50:27:77:21:81:1c:ec:82:a2:e7:f2:a1:8c:
         58:c8:42:7a:53:6c:bd:1f:b2:88:81:60:e5:75:96:a9:57:a3:
         f4:a0:eb:86:aa:07:78:e9:a7:d2:d4:17:64:10:6f:a2:b1:f6:
         ed:21:36:02:30:58:c7:a6:8c:36:c5:a9:0d:ff:cc:d8:91:54:
         d7:0e:5d:3a:03:d9:24:25:44:d5:2d:85:35:c2:c0:22:ec:9e:
         69:22:d2:87:de:c7:6a:b8:96:d5:3a:6c:f5:89:28:32:ab:83:
         87:27:1e:11:ad:81:6d:ed:ee:4c:d9:9a:99:14:6d:b0:d4:14:
         9c:ec:76:f5:58:e0:a3:61:75:40:ed:91:be:f6:db:0d:ec:e3:
         ab:b9:d2:99:f9:ce:03:0c:d6:6c:f2:3f:15:55:d5:a3:54:d5:
         31:fe:1d:28:16:be:b4:c2:57:f7:d5:48:24:8b:00:d3:c1:e4:
         ac:08:0c:83:a9:92:79:ef:c8:ae:ac:f5:4d:65:1d:2a:33:a6:
         9f:4c:31:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org