Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3233302e302f32342d3234203d3e20323635363838.roa
File:                     3138312e3137342e3233302e302f32342d3234203d3e20323635363838.roa (raw, json)
Hash identifier:          8OjtH7xMT9Ro/TENZ6mQ/gj9TYF5XWpueuFqq3o8TvU=
Subject key identifier:   F8:F4:A6:1F:75:22:48:8F:53:71:F0:D7:CC:4F:CE:80:39:D6:38:D4
Certificate issuer:       /CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
Certificate serial:       133D0F533D66F25ABE472DACA789B59F3A670F52
Authority key identifier: C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3233302e302f32342d3234203d3e20323635363838.roa
Signing time:             Fri 05 Apr 2024 15:20:01 +0000
ROA not before:           Fri 05 Apr 2024 15:15:01 +0000
ROA not after:            Fri 04 Apr 2025 15:20:01 +0000
asID:                     265688
IP address blocks:        181.174.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3d:0f:53:3d:66:f2:5a:be:47:2d:ac:a7:89:b5:9f:3a:67:0f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
        Validity
            Not Before: Apr  5 15:15:01 2024 GMT
            Not After : Apr  4 15:20:01 2025 GMT
        Subject: CN=F8F4A61F7522488F5371F0D7CC4FCE8039D638D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:13:81:52:c9:c1:83:8e:9f:47:76:3b:a3:c5:
                    e4:8a:b4:e3:ff:cd:da:a2:68:ad:c7:ac:07:79:5f:
                    a5:b7:a5:f3:bf:e5:62:a1:83:7d:5b:c5:bd:d6:80:
                    f0:47:06:7b:88:18:36:19:b9:f8:90:45:a5:72:84:
                    18:2b:28:11:f3:00:f1:34:87:40:86:96:07:2e:3d:
                    4b:da:61:5a:aa:e7:a0:26:63:f6:db:ca:5b:5c:bb:
                    e2:ea:a0:1d:d0:2b:1e:ea:cc:e3:d9:fe:82:58:8d:
                    ef:db:b4:57:f2:56:84:d1:fd:c9:4e:69:ec:7a:32:
                    e8:0e:57:d3:92:ef:a6:8c:50:59:0e:bc:00:08:95:
                    f2:d8:1a:dc:60:a2:4b:1f:87:25:83:de:3d:7c:84:
                    64:99:3e:74:dd:cc:9e:bd:f5:7d:25:27:21:c3:3a:
                    71:a6:18:8b:d5:f7:06:ca:d6:a6:62:40:37:7d:26:
                    43:55:4b:6a:29:e9:8d:cd:51:ae:bd:e0:14:92:11:
                    01:63:2b:ce:81:8e:62:6b:63:ce:cd:56:3f:6c:8f:
                    9c:9c:ea:21:6d:90:8d:2f:dc:e0:dd:e8:93:8c:8d:
                    ba:88:fc:42:e0:01:46:47:70:f0:d2:25:1e:90:c9:
                    b1:ab:55:27:06:4b:b1:94:1f:11:9b:3f:cb:a8:24:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F4:A6:1F:75:22:48:8F:53:71:F0:D7:CC:4F:CE:80:39:D6:38:D4
            X509v3 Authority Key Identifier:
                keyid:C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3233302e302f32342d3234203d3e20323635363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:05:41:c0:fd:8c:41:15:22:23:ef:ef:32:1e:bd:0d:be:56:
         84:b3:ca:8b:bd:ae:61:b0:ba:55:f3:dd:c7:e7:95:53:28:38:
         d3:78:ea:ad:81:51:bb:66:10:e6:8a:b8:6f:8f:95:19:ec:1f:
         51:87:76:d2:75:b2:b4:51:e2:df:9a:d3:94:0c:d6:60:8d:c2:
         b7:99:41:c6:de:59:08:a2:34:0d:21:95:67:ed:d7:48:05:71:
         d3:12:61:40:4e:3d:38:88:2b:e3:65:db:e7:67:ea:72:9e:40:
         11:91:e8:c8:74:88:bd:f5:5c:ea:f9:8a:f8:ac:97:7a:91:ff:
         38:6e:97:a9:81:18:4d:c1:13:46:80:ac:59:fa:24:f3:9b:4e:
         27:8c:5a:63:dc:4d:b8:68:d6:4c:44:e0:8d:9c:cd:d4:b0:74:
         a0:ce:8d:c4:dc:99:0b:fe:d3:3f:93:8a:14:7d:0f:1a:bc:d4:
         cf:78:fa:f9:f1:9f:87:7b:e3:3c:c4:62:b0:9a:e7:bb:c8:76:
         7b:7d:05:e5:32:ca:05:85:95:52:0f:81:fc:98:44:db:83:9e:
         8d:f3:9a:d8:67:3d:24:bb:29:b9:be:20:f1:61:62:fa:ad:19:
         62:32:e0:23:29:03:76:e6:89:8e:75:db:33:de:e2:16:ff:cb:
         61:17:cf:ef
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUEz0PUz1m8lq+Ry2sp4m1nzpnD1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI3NEZGNTVGQkU1NERDRjNBNDg3OUJFOTQ3OTI0NjJE
NEI5NURBMDAeFw0yNDA0MDUxNTE1MDFaFw0yNTA0MDQxNTIwMDFaMDMxMTAvBgNV
BAMTKEY4RjRBNjFGNzUyMjQ4OEY1MzcxRjBEN0NDNEZDRTgwMzlENjM4RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxE4FSycGDjp9HdjujxeSKtOP/
zdqiaK3HrAd5X6W3pfO/5WKhg31bxb3WgPBHBnuIGDYZufiQRaVyhBgrKBHzAPE0
h0CGlgcuPUvaYVqq56AmY/bbyltcu+LqoB3QKx7qzOPZ/oJYje/btFfyVoTR/clO
aex6MugOV9OS76aMUFkOvAAIlfLYGtxgoksfhyWD3j18hGSZPnTdzJ699X0lJyHD
OnGmGIvV9wbK1qZiQDd9JkNVS2op6Y3NUa694BSSEQFjK86BjmJrY87NVj9sj5yc
6iFtkI0v3ODd6JOMjbqI/ELgAUZHcPDSJR6QybGrVScGS7GUHxGbP8uoJGKlAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU+PSmH3UiSI9TcfDXzE/OgDnWONQwHwYDVR0j
BBgwFoAUwnT/VfvlTc86SHm+lHkkYtS5XaAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QzY0QkQ1MjZBREQ1N0NFMThFN0FDMzZFQjgwODhCN0Iw
MThEQjAyMDNDN0M1MDA4OEI4MzJCOTFBNkVFODk3LzAvQzI3NEZGNTVGQkU1NERD
RjNBNDg3OUJFOTQ3OTI0NjJENEI5NURBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMjc0RkY1NUZCRTU0RENGM0E0
ODc5QkU5NDc5MjQ2MkQ0Qjk1REEwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUM2NEJENTI2QURENTdDRTE4RTdBQzM2RUI4MDg4QjdCMDE4REIwMjAz
QzdDNTAwODhCODMyQjkxQTZFRTg5Ny8wLzMxMzgzMTJlMzEzNzM0MmUzMjMzMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNjM4Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1
ruYwDQYJKoZIhvcNAQELBQADggEBABoFQcD9jEEVIiPv7zIevQ2+VoSzyou9rmGw
ulXz3cfnlVMoONN46q2BUbtmEOaKuG+PlRnsH1GHdtJ1srRR4t+a05QM1mCNwreZ
QcbeWQiiNA0hlWft10gFcdMSYUBOPTiIK+Nl2+dn6nKeQBGR6Mh0iL31XOr5ivis
l3qR/zhul6mBGE3BE0aArFn6JPObTieMWmPcTbho1kxE4I2czdSwdKDOjcTcmQv+
0z+TihR9Dxq81M94+vnxn4d74zzEYrCa57vIdnt9BeUyygWFlVIPgfyYRNuDno3z
mthnPSS7Kbm+IPFhYvqtGWIy4CMpA3bmiY512zPe4hb/y2EXz+8=
-----END CERTIFICATE-----
Generated at Tue May 7 22:23:43 2024 by rpki-client on console-fra.rpki-client.org