Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3232382e302f32342d3234203d3e20323635363838.roa
File:                     3138312e3137342e3232382e302f32342d3234203d3e20323635363838.roa (raw, json)
Hash identifier:          BqNzm2qey975edI6eeNxd821yJ6gizGUTk0+fNUPCDQ=
Subject key identifier:   E3:52:31:FD:20:DB:53:4A:EC:3C:04:C8:1B:50:EC:3A:A7:91:4D:3E
Certificate issuer:       /CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
Certificate serial:       7E793B57ECE4CBD9D66F7EC4EC1EE53FC569D281
Authority key identifier: C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3232382e302f32342d3234203d3e20323635363838.roa
Signing time:             Fri 05 Apr 2024 15:20:00 +0000
ROA not before:           Fri 05 Apr 2024 15:15:00 +0000
ROA not after:            Fri 04 Apr 2025 15:20:00 +0000
asID:                     265688
IP address blocks:        181.174.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:79:3b:57:ec:e4:cb:d9:d6:6f:7e:c4:ec:1e:e5:3f:c5:69:d2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
        Validity
            Not Before: Apr  5 15:15:00 2024 GMT
            Not After : Apr  4 15:20:00 2025 GMT
        Subject: CN=E35231FD20DB534AEC3C04C81B50EC3AA7914D3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4a:28:21:09:ad:f2:9a:c6:62:40:fa:c2:7a:
                    58:64:b4:55:98:a0:9d:49:28:c2:ea:58:65:91:dc:
                    6e:fe:b6:90:1d:8d:e4:88:90:be:f4:30:58:cb:aa:
                    4e:54:c5:48:b4:b3:62:b4:9d:06:e2:0b:49:81:7a:
                    5e:5e:cc:62:da:32:8b:66:90:9d:19:62:41:14:41:
                    84:5f:ca:d8:fd:10:a2:e2:8d:14:8c:db:db:8b:3e:
                    90:50:b7:fc:1e:cf:a3:59:6a:87:90:a0:7f:7a:97:
                    b0:34:ba:a7:22:c1:07:ba:b4:65:2b:0c:f1:5d:15:
                    03:a6:11:4f:c3:91:82:17:87:fb:d3:85:92:24:e9:
                    27:9e:d1:a5:34:24:2c:0b:c8:98:f4:b6:ab:ad:d0:
                    1c:0d:cb:dc:d6:84:7a:ff:d5:b2:0b:e5:df:88:bd:
                    87:8c:72:f3:89:29:f9:49:fa:e9:9f:16:cd:f4:5d:
                    ec:a7:26:dc:35:16:a9:5c:12:0f:52:c5:b9:d7:fc:
                    5d:75:c2:ee:03:9a:6f:ce:ab:9a:b8:76:b0:20:59:
                    41:18:7b:4e:e4:3a:72:04:19:a0:f3:a0:8f:02:a1:
                    c6:8b:aa:a4:24:d1:d9:ef:61:50:a1:2d:40:a1:88:
                    90:b6:8d:28:40:79:b2:22:f9:4e:26:3b:d1:99:07:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:52:31:FD:20:DB:53:4A:EC:3C:04:C8:1B:50:EC:3A:A7:91:4D:3E
            X509v3 Authority Key Identifier:
                keyid:C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3232382e302f32342d3234203d3e20323635363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:63:f0:9b:cd:a9:3c:fc:c4:d8:9e:73:7e:7c:d6:dd:c2:f0:
         ba:c6:7e:49:ff:a4:33:9d:a4:b2:62:4a:00:95:02:d3:d6:d1:
         0b:7f:07:87:22:4c:94:41:28:34:f4:48:4b:a4:4a:28:ad:0d:
         a5:54:fa:70:74:be:90:0b:00:26:d1:48:3b:52:89:37:b3:6b:
         fd:ec:d5:f4:df:56:08:14:fa:58:67:ad:84:9a:d2:48:ea:1d:
         b9:eb:6b:70:31:4c:08:1e:60:34:73:93:f9:88:c0:01:0d:5a:
         08:13:96:f2:0d:2e:1c:68:4b:7e:1a:71:83:3f:f0:7f:d7:ef:
         4c:55:f7:67:f9:4f:a6:ba:2a:ce:b8:aa:1d:ec:ca:29:96:9f:
         44:aa:87:38:70:77:4c:da:c3:81:72:3f:99:99:71:ee:bd:b3:
         52:3c:79:91:40:26:84:a9:84:07:6b:f6:8f:8c:08:9d:cb:6e:
         79:76:02:a1:b9:9d:34:95:f5:db:8c:77:28:8b:ca:50:46:83:
         81:ef:9c:fd:5e:cd:81:94:83:b8:7a:62:b8:b2:33:c9:77:cc:
         8e:c7:8c:56:39:ec:86:1f:10:2c:92:84:58:5f:0e:65:04:3d:
         39:a1:b4:a0:4a:67:45:6a:db:c2:76:33:c4:a9:51:60:26:bb:
         88:36:ba:df
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUfnk7V+zky9nWb37E7B7lP8Vp0oEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI3NEZGNTVGQkU1NERDRjNBNDg3OUJFOTQ3OTI0NjJE
NEI5NURBMDAeFw0yNDA0MDUxNTE1MDBaFw0yNTA0MDQxNTIwMDBaMDMxMTAvBgNV
BAMTKEUzNTIzMUZEMjBEQjUzNEFFQzNDMDRDODFCNTBFQzNBQTc5MTREM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUSighCa3ymsZiQPrCelhktFWY
oJ1JKMLqWGWR3G7+tpAdjeSIkL70MFjLqk5UxUi0s2K0nQbiC0mBel5ezGLaMotm
kJ0ZYkEUQYRfytj9EKLijRSM29uLPpBQt/wez6NZaoeQoH96l7A0uqciwQe6tGUr
DPFdFQOmEU/DkYIXh/vThZIk6See0aU0JCwLyJj0tqut0BwNy9zWhHr/1bIL5d+I
vYeMcvOJKflJ+umfFs30XeynJtw1FqlcEg9SxbnX/F11wu4Dmm/Oq5q4drAgWUEY
e07kOnIEGaDzoI8CocaLqqQk0dnvYVChLUChiJC2jShAebIi+U4mO9GZB2kPAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU41Ix/SDbU0rsPATIG1DsOqeRTT4wHwYDVR0j
BBgwFoAUwnT/VfvlTc86SHm+lHkkYtS5XaAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QzY0QkQ1MjZBREQ1N0NFMThFN0FDMzZFQjgwODhCN0Iw
MThEQjAyMDNDN0M1MDA4OEI4MzJCOTFBNkVFODk3LzAvQzI3NEZGNTVGQkU1NERD
RjNBNDg3OUJFOTQ3OTI0NjJENEI5NURBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjc0RkY1NUZCRTU0RENGM0E0
ODc5QkU5NDc5MjQ2MkQ0Qjk1REEwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUM2NEJENTI2QURENTdDRTE4RTdBQzM2RUI4MDg4QjdCMDE4REIwMjAz
QzdDNTAwODhCODMyQjkxQTZFRTg5Ny8wLzMxMzgzMTJlMzEzNzM0MmUzMjMyMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNjM4Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1
ruQwDQYJKoZIhvcNAQELBQADggEBAFVj8JvNqTz8xNiec3581t3C8LrGfkn/pDOd
pLJiSgCVAtPW0Qt/B4ciTJRBKDT0SEukSiitDaVU+nB0vpALACbRSDtSiTeza/3s
1fTfVggU+lhnrYSa0kjqHbnra3AxTAgeYDRzk/mIwAENWggTlvINLhxoS34acYM/
8H/X70xV92f5T6a6Ks64qh3syimWn0Sqhzhwd0zaw4FyP5mZce69s1I8eZFAJoSp
hAdr9o+MCJ3Lbnl2AqG5nTSV9duMdyiLylBGg4HvnP1ezYGUg7h6YriyM8l3zI7H
jFY57IYfECyShFhfDmUEPTmhtKBKZ0Vq28J2M8SpUWAmu4g2ut8=
-----END CERTIFICATE-----
Generated at Tue May 7 22:35:07 2024 by rpki-client on console-ams.rpki-client.org