Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3232392e302f32342d3234203d3e20323635363838.roa
File:                     3138312e3137342e3232392e302f32342d3234203d3e20323635363838.roa (raw, json)
Hash identifier:          kR5oKdKBjl+evrA4/ju1NZMhSTKothyBUw+/th1r290=
Subject key identifier:   F6:B4:DB:13:5C:B2:65:62:65:81:68:B8:ED:C2:F7:12:56:96:6E:7E
Certificate issuer:       /CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
Certificate serial:       283240AF444AC02DC7A02C746AC12281430E993D
Authority key identifier: C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3232392e302f32342d3234203d3e20323635363838.roa
Signing time:             Fri 05 Apr 2024 15:20:01 +0000
ROA not before:           Fri 05 Apr 2024 15:15:01 +0000
ROA not after:            Fri 04 Apr 2025 15:20:01 +0000
asID:                     265688
IP address blocks:        181.174.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:32:40:af:44:4a:c0:2d:c7:a0:2c:74:6a:c1:22:81:43:0e:99:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
        Validity
            Not Before: Apr  5 15:15:01 2024 GMT
            Not After : Apr  4 15:20:01 2025 GMT
        Subject: CN=F6B4DB135CB26562658168B8EDC2F71256966E7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ca:fb:32:db:59:3c:41:69:88:e3:29:ad:64:
                    aa:30:c1:c8:d5:38:01:2a:a0:1d:1a:6c:38:87:2c:
                    61:af:cb:68:09:4c:b8:be:e1:e3:9b:8d:52:55:ed:
                    03:c8:bc:c8:d2:2b:ab:d8:bb:a4:f5:66:6b:d0:54:
                    8a:16:04:49:47:d5:ce:61:ec:95:cf:e1:57:4d:26:
                    42:15:06:2e:02:01:92:d4:b4:07:90:5f:67:cf:c1:
                    7b:e7:33:dd:cd:20:ac:73:83:9d:fb:10:a3:be:48:
                    c5:4e:3c:c6:69:63:61:80:b1:20:13:38:cf:7e:94:
                    00:3b:26:e9:15:38:c2:88:d7:64:a0:32:9a:28:f8:
                    45:9c:df:f1:07:35:2a:8f:0b:3e:4b:4c:07:56:46:
                    a1:5f:f4:d3:b4:2a:74:7e:40:a1:9e:db:00:ef:df:
                    70:6e:0c:e0:71:67:ed:e0:12:32:d8:43:9a:62:9b:
                    97:56:41:01:f8:12:a3:11:92:3a:d7:40:01:3c:7c:
                    9c:4c:24:1a:07:fa:0c:de:9a:f8:1f:44:1a:16:4f:
                    50:cf:73:a2:5b:cc:c6:b4:91:aa:91:00:ee:56:3d:
                    22:34:7f:ae:1e:03:f8:94:70:e5:15:34:0d:75:51:
                    0f:8d:80:c1:84:47:08:a9:af:f6:7f:54:d1:d7:8b:
                    bd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B4:DB:13:5C:B2:65:62:65:81:68:B8:ED:C2:F7:12:56:96:6E:7E
            X509v3 Authority Key Identifier:
                keyid:C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3232392e302f32342d3234203d3e20323635363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:39:48:6f:b8:b6:fd:ac:e7:c8:72:72:f9:2a:c0:90:41:8e:
         6b:ce:d0:07:75:20:54:02:c0:e7:9c:b9:e2:49:48:a2:fb:91:
         74:99:25:be:ed:52:8e:72:f1:bc:e3:4d:49:d9:05:2c:43:5f:
         3f:59:6a:1a:ec:5d:20:36:9b:fa:55:48:4e:36:fb:86:f8:a6:
         e5:d5:54:c7:44:d4:6f:e2:dc:45:b0:f0:21:da:48:83:0e:5a:
         a5:82:b8:6b:9f:d9:8b:d0:e6:a7:ec:fd:55:f8:ec:49:a7:2f:
         a2:1c:c8:c7:58:85:e3:1f:7d:32:e6:66:e3:b5:db:f6:a1:b2:
         1b:9f:36:66:75:ab:22:e0:35:cc:7a:f7:5e:84:09:a4:74:c9:
         5a:4a:5a:eb:35:4c:df:42:62:3c:22:6e:77:a1:f7:05:f9:c3:
         b1:03:11:7f:fa:a9:56:93:7f:ad:6c:ef:23:cf:00:a8:14:a7:
         ae:05:ae:3d:6d:dd:2a:17:4d:68:30:b3:72:73:e2:16:e0:f8:
         ff:00:4e:2c:47:57:ef:13:0f:12:a8:45:3b:79:c0:44:96:9f:
         b9:8d:09:d1:95:7c:e7:9c:f6:ae:b2:b8:df:f3:69:3f:f7:6f:
         ff:d0:8d:3d:3d:ae:23:6e:b7:d8:8d:6d:53:1f:bd:f8:d2:31:
         ff:5e:45:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:23:43 2024 by rpki-client on console-fra.rpki-client.org