Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/3138312e3131342e31322e302f32342d3234203d3e20323634373634.roa
File:                     3138312e3131342e31322e302f32342d3234203d3e20323634373634.roa (raw, json)
Hash identifier:          2khU2H0ITOS/5GeQ/11iUAMqiYSE5Np0qR6GoupH1HM=
Subject key identifier:   05:AD:28:51:AF:78:04:39:15:11:5B:C2:AD:29:44:B8:42:2C:53:92
Certificate issuer:       /CN=241DE049AC3C932631785D79E6569AB7CF57A340
Certificate serial:       38FB29992B33E20632027BA94A2228F704E0B916
Authority key identifier: 24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/3138312e3131342e31322e302f32342d3234203d3e20323634373634.roa
Signing time:             Tue 05 Mar 2024 17:54:31 +0000
ROA not before:           Tue 05 Mar 2024 17:49:31 +0000
ROA not after:            Tue 04 Mar 2025 17:54:31 +0000
asID:                     264764
IP address blocks:        181.114.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fb:29:99:2b:33:e2:06:32:02:7b:a9:4a:22:28:f7:04:e0:b9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241DE049AC3C932631785D79E6569AB7CF57A340
        Validity
            Not Before: Mar  5 17:49:31 2024 GMT
            Not After : Mar  4 17:54:31 2025 GMT
        Subject: CN=05AD2851AF78043915115BC2AD2944B8422C5392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:35:2c:d6:5a:41:76:b1:4f:9e:89:2b:77:
                    84:68:fe:d5:30:55:b0:d0:38:78:8d:52:4d:00:05:
                    f2:7e:96:72:d9:6b:cc:0c:21:3e:c9:00:c2:06:06:
                    2a:ca:e2:cc:80:a8:ab:54:5e:0a:fc:4e:1c:02:ed:
                    16:10:c1:c5:c1:0f:75:96:a4:33:2f:04:92:ba:89:
                    d0:95:72:d3:b9:c4:87:26:c6:bc:d2:f8:52:e6:be:
                    4d:6b:c6:57:fd:80:8f:f4:7f:9a:a9:ee:21:7c:34:
                    8f:bb:68:7d:cd:46:55:11:38:56:09:61:6e:48:84:
                    ed:06:08:fe:80:e8:fe:c8:9e:91:73:f0:8c:25:28:
                    56:ae:31:92:44:c1:43:9d:2f:64:cd:b4:21:79:ab:
                    9e:29:fe:42:6e:d7:51:0e:8a:8e:8b:2a:74:1e:86:
                    58:14:bd:2b:5e:64:cb:a9:3f:08:e9:c2:93:2e:af:
                    f9:90:a5:0b:7f:4d:d5:e8:08:54:67:08:b4:ab:3d:
                    0c:46:b3:07:11:f5:4a:35:07:d1:98:de:30:59:d0:
                    83:8c:b9:71:d6:74:48:a4:b1:ff:ec:4d:ac:62:a9:
                    07:5c:bd:f2:19:6a:0a:bf:6d:44:3b:21:4b:18:bf:
                    4b:a3:7b:de:80:49:63:2f:e5:1f:d3:16:42:d9:02:
                    0a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AD:28:51:AF:78:04:39:15:11:5B:C2:AD:29:44:B8:42:2C:53:92
            X509v3 Authority Key Identifier:
                keyid:24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/3138312e3131342e31322e302f32342d3234203d3e20323634373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:dc:34:fb:78:63:4e:6e:45:e2:aa:ee:8a:f1:3f:95:eb:de:
         4e:09:9f:61:cb:ca:e7:fa:02:e8:3e:7b:15:36:e1:8f:7a:bb:
         ed:6f:cc:07:78:31:b7:65:8f:de:c0:f4:60:88:32:0f:f5:97:
         eb:e9:60:05:54:21:db:67:37:25:1f:50:4b:16:22:8a:ab:67:
         4a:c7:42:c2:ba:c8:fc:25:35:6a:84:2e:04:f1:d1:41:97:ea:
         6b:cc:ee:1b:48:56:13:fa:b4:3b:02:a6:da:a5:22:ea:e3:73:
         e6:6f:db:04:56:77:8d:05:58:45:b9:90:4f:31:a2:b8:02:b8:
         98:01:e0:19:92:49:18:9c:f4:e4:19:e8:f1:5d:9b:0a:35:85:
         a4:70:db:a0:e4:a0:92:19:fc:27:8b:13:09:e4:b0:4f:d0:2d:
         8c:06:6f:69:fc:7f:9b:e6:dc:a1:61:43:10:3f:08:83:93:5c:
         71:cd:d4:66:db:bb:94:d9:0d:82:04:6f:7f:25:1f:b6:35:2c:
         43:87:fb:ab:db:4c:f5:8e:66:be:2f:c5:fb:0d:a7:99:f2:ad:
         12:0d:37:83:ba:43:63:d5:c8:97:e8:1b:ae:28:24:a9:ad:8a:
         44:88:de:24:93:a5:b6:c5:d7:8f:36:9f:6e:33:15:c0:2e:68:
         45:62:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org