Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/3138312e3131342e302e302f31392d3234203d3e203532323836.roa
File:                     3138312e3131342e302e302f31392d3234203d3e203532323836.roa (raw, json)
Hash identifier:          sj8BTrmfJn0P4SYGbxBAU8DhsIRcr8R9DxM0bzIlj/k=
Subject key identifier:   2B:24:19:12:45:E8:DC:FF:06:77:70:78:C2:69:F6:F4:0C:6E:03:E0
Certificate issuer:       /CN=241DE049AC3C932631785D79E6569AB7CF57A340
Certificate serial:       11F6FCF80C4F48EA5006F6019CB63A26D8081F99
Authority key identifier: 24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/3138312e3131342e302e302f31392d3234203d3e203532323836.roa
Signing time:             Tue 05 Mar 2024 17:54:33 +0000
ROA not before:           Tue 05 Mar 2024 17:49:33 +0000
ROA not after:            Tue 04 Mar 2025 17:54:33 +0000
asID:                     52286
IP address blocks:        181.114.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f6:fc:f8:0c:4f:48:ea:50:06:f6:01:9c:b6:3a:26:d8:08:1f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241DE049AC3C932631785D79E6569AB7CF57A340
        Validity
            Not Before: Mar  5 17:49:33 2024 GMT
            Not After : Mar  4 17:54:33 2025 GMT
        Subject: CN=2B24191245E8DCFF06777078C269F6F40C6E03E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:dc:55:41:d2:60:eb:17:b1:f4:2f:e2:18:
                    6e:a3:26:07:06:55:a2:4e:6e:8d:37:72:ba:77:f9:
                    04:26:33:8c:4f:54:44:71:cb:ed:2e:32:f0:c5:04:
                    63:5a:ed:77:5e:c0:b2:84:ad:5a:94:4e:ca:46:bb:
                    fa:91:a7:a7:41:6b:7d:51:a9:e9:f9:b1:80:64:28:
                    04:ae:f4:d8:f1:d0:d9:35:8c:21:3f:e6:9c:af:b3:
                    9c:72:9d:38:6f:77:c8:3d:66:70:ff:3f:60:e9:6f:
                    5a:9b:98:84:06:69:6e:3c:c1:08:94:6e:30:a5:5a:
                    ab:2a:b0:de:f5:ad:af:04:f7:a9:f2:5e:15:62:ab:
                    47:64:0f:6d:88:ce:da:73:51:72:f5:27:bc:f3:13:
                    d9:5e:e9:36:d0:a6:ff:9b:c7:ee:43:3d:68:c1:01:
                    11:8c:f3:42:4b:12:c4:23:8d:43:31:c3:f9:81:49:
                    e4:4a:2c:eb:a6:8b:9a:f8:64:9f:09:fd:89:74:f1:
                    bf:67:6c:e3:86:27:26:74:a4:d0:66:52:76:2f:f3:
                    01:46:8e:6c:bb:83:b5:97:9d:c3:a6:12:0b:5f:65:
                    a0:82:37:02:15:90:33:61:bc:8e:d6:9d:a1:82:c3:
                    f2:25:b6:b7:71:7f:4d:f5:a4:a8:47:af:d3:40:3b:
                    3a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:24:19:12:45:E8:DC:FF:06:77:70:78:C2:69:F6:F4:0C:6E:03:E0
            X509v3 Authority Key Identifier:
                keyid:24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/3138312e3131342e302e302f31392d3234203d3e203532323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9f:24:54:96:e6:42:d5:7c:68:42:7b:03:eb:87:64:14:d6:07:
         ec:14:07:04:11:f0:9b:79:92:3c:aa:33:b3:de:0d:0c:a4:cf:
         ae:d5:fb:d1:f5:38:86:7e:67:5e:a7:11:3a:53:d8:b7:bd:31:
         d8:ac:93:c6:c2:f6:45:67:50:41:32:b4:ca:1a:32:12:d1:74:
         6c:8b:53:39:e0:26:39:d5:c5:7b:f4:4e:d7:84:ae:03:21:82:
         5d:bd:73:34:3a:86:e8:0e:59:14:ac:c3:55:7f:73:54:43:26:
         a8:f2:5d:85:e3:aa:36:92:11:fc:fa:c6:d7:ce:c9:30:95:18:
         e9:cb:e6:ed:35:2a:f6:ad:d6:94:cb:62:c4:9f:94:43:b9:70:
         29:ac:c7:67:86:67:ce:ff:01:78:9c:cb:b6:60:bf:38:ae:e6:
         af:53:c4:75:52:de:7d:af:36:88:9b:12:1d:ac:4d:89:c4:12:
         e3:cc:df:60:50:8d:1e:f4:ec:7d:69:0f:f7:79:49:e6:33:8b:
         0f:63:93:b5:7c:b7:f5:fd:4b:c9:27:7c:40:f6:50:6c:d0:3f:
         6d:75:25:10:6c:fb:dd:30:c5:bd:55:86:0f:1a:66:0b:00:28:
         fd:76:cd:19:0f:45:9e:63:12:f6:0f:26:e9:b0:3a:6c:4b:12:
         89:c7:81:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org