Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/3138312e3131342e3233322e302f32312d3234203d3e20323635373134.roa
File:                     3138312e3131342e3233322e302f32312d3234203d3e20323635373134.roa (raw, json)
Hash identifier:          QVhNClMbIorFQST2Tsjw2gpVscmnsZjBYIETug0B0zc=
Subject key identifier:   ED:2D:63:B9:5E:18:6D:3C:3C:FE:17:34:A3:42:CA:A7:6D:D1:D7:EF
Certificate issuer:       /CN=942BABE0B62CFEB8749F1EBA716D62B61F58FE3B
Certificate serial:       2387F1CF4F1B971BBEAAC7DF792EF26C392168A0
Authority key identifier: 94:2B:AB:E0:B6:2C:FE:B8:74:9F:1E:BA:71:6D:62:B6:1F:58:FE:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/3138312e3131342e3233322e302f32312d3234203d3e20323635373134.roa
Signing time:             Tue 11 Jun 2024 03:15:01 +0000
ROA not before:           Tue 11 Jun 2024 03:10:01 +0000
ROA not after:            Tue 10 Jun 2025 03:15:01 +0000
asID:                     265714
IP address blocks:        181.114.232.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:87:f1:cf:4f:1b:97:1b:be:aa:c7:df:79:2e:f2:6c:39:21:68:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942BABE0B62CFEB8749F1EBA716D62B61F58FE3B
        Validity
            Not Before: Jun 11 03:10:01 2024 GMT
            Not After : Jun 10 03:15:01 2025 GMT
        Subject: CN=ED2D63B95E186D3C3CFE1734A342CAA76DD1D7EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:18:e8:6e:f0:17:25:c4:f6:e0:b1:a0:e0:11:
                    d1:f9:b7:11:18:01:f6:2d:c4:98:70:aa:ab:5d:68:
                    3a:49:4b:f5:a2:e5:ba:df:ed:d1:ad:b0:b0:10:77:
                    b9:9f:f8:a2:9b:4e:1d:f0:79:02:ea:5b:94:a2:cc:
                    df:b9:6e:12:2c:46:a3:07:2e:f8:57:ca:d8:ca:e7:
                    7f:32:3e:54:2c:5f:67:01:7a:78:9f:84:4e:3c:5b:
                    39:a7:9a:73:c6:3b:c0:89:11:96:ec:8b:dc:08:9f:
                    e2:79:3f:21:b5:1a:d5:bf:8a:09:4a:a6:ce:00:48:
                    da:38:28:45:fc:ea:76:46:c8:1a:11:02:1d:04:75:
                    fc:12:5d:e3:b9:2c:54:66:3f:51:e1:b8:2c:ab:86:
                    0f:ef:c2:bd:85:53:fd:7a:80:55:a9:73:27:34:71:
                    b7:0f:9f:35:64:68:f9:a8:e1:3b:b6:41:97:3c:46:
                    af:79:18:33:b7:45:69:56:82:28:76:47:2d:ab:e8:
                    4d:78:a4:cc:ca:c1:26:b5:77:60:85:d2:ec:70:43:
                    44:bc:5e:40:17:a7:33:30:02:32:4f:c8:6c:3c:55:
                    85:3d:4a:43:f6:07:80:31:1a:f8:03:04:1b:c7:74:
                    42:2b:d4:ec:1f:28:3e:55:aa:85:5f:30:d1:41:31:
                    bc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2D:63:B9:5E:18:6D:3C:3C:FE:17:34:A3:42:CA:A7:6D:D1:D7:EF
            X509v3 Authority Key Identifier:
                keyid:94:2B:AB:E0:B6:2C:FE:B8:74:9F:1E:BA:71:6D:62:B6:1F:58:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/3138312e3131342e3233322e302f32312d3234203d3e20323635373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:1e:aa:5d:a2:11:55:66:3c:ba:c5:e3:5a:4c:92:4c:45:59:
         09:f8:80:4d:b5:fc:fa:96:f0:5f:f5:a9:2c:5e:e4:09:f0:52:
         f5:e7:3e:56:2a:86:7a:ee:32:ef:b3:e2:d7:6b:3f:b3:dc:62:
         06:b7:a8:0f:cd:97:6a:6d:f0:46:55:90:b2:bc:fa:74:01:cd:
         4b:d0:dd:df:a7:1e:6f:af:7e:33:c3:22:c1:be:3d:24:d8:d8:
         d1:63:99:00:1a:34:8c:31:19:09:bc:6e:99:74:4b:f6:41:a4:
         45:4c:28:26:d2:20:c3:2c:5e:54:71:49:b2:44:53:63:ed:3f:
         77:90:d3:8d:8d:08:04:d3:1d:a9:d0:0e:48:30:7a:e3:4c:86:
         51:8a:12:4a:c9:bd:4a:35:2f:b4:4a:e9:2e:1c:f9:9c:92:2f:
         39:dc:1a:06:c6:01:c5:93:cd:8b:d0:72:40:7e:91:bd:a1:b5:
         f9:d7:45:14:c6:81:64:43:e2:d0:cc:e9:d6:1a:ae:39:70:a9:
         c1:87:cf:cf:f3:7e:b1:60:c4:42:5a:8e:ea:d9:f3:f7:61:bd:
         60:1f:77:d0:c9:e5:f5:8d:ec:70:58:49:f0:0c:5e:df:d4:77:
         33:80:0c:cf:e5:6e:ef:de:82:d1:83:a7:06:9e:e5:25:8c:a6:
         d7:9b:15:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:53 2024 by rpki-client on console-ams.rpki-client.org