Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3232342e302f31392d3234203d3e203237363936.roa
File:                     3138312e3138392e3232342e302f31392d3234203d3e203237363936.roa (raw, json)
Hash identifier:          RkefR/K84gURh85JVWsJGx8Xhso6gMe0C63iAFawW3s=
Subject key identifier:   EC:22:9E:5D:AF:03:81:79:88:BB:91:96:1A:47:4F:CA:53:68:E1:DD
Certificate issuer:       /CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
Certificate serial:       18ACB322C4A95401B6CF308AC7496A43B3AF6474
Authority key identifier: 99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3232342e302f31392d3234203d3e203237363936.roa
Signing time:             Tue 05 Mar 2024 18:04:24 +0000
ROA not before:           Tue 05 Mar 2024 17:59:24 +0000
ROA not after:            Tue 04 Mar 2025 18:04:24 +0000
asID:                     27696
IP address blocks:        181.189.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ac:b3:22:c4:a9:54:01:b6:cf:30:8a:c7:49:6a:43:b3:af:64:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
        Validity
            Not Before: Mar  5 17:59:24 2024 GMT
            Not After : Mar  4 18:04:24 2025 GMT
        Subject: CN=EC229E5DAF03817988BB91961A474FCA5368E1DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4c:5a:16:6e:4f:2f:9f:4a:6e:9c:b3:a8:f4:
                    a2:f4:a5:5a:64:f9:d3:3d:cc:c2:4f:bb:22:31:f8:
                    4b:c4:a4:51:80:96:87:0f:64:7d:47:ca:9d:66:78:
                    bb:ed:3f:ed:0f:9c:a2:a5:82:ca:b6:f4:ff:be:af:
                    a3:be:be:d9:ab:10:42:23:81:68:99:98:90:25:73:
                    5d:9d:d4:6c:bf:3a:7e:f2:71:42:da:06:c6:a2:be:
                    83:6d:a5:66:23:08:b0:4c:39:6e:d8:d1:b7:5e:9e:
                    68:a6:63:6c:f8:f5:08:7b:45:90:ab:b5:59:63:5d:
                    ed:58:a1:dd:77:d4:19:7d:a4:6e:a7:ec:8a:66:7e:
                    84:55:fd:9e:5f:6a:43:76:bd:ca:fe:0d:99:f8:7d:
                    c6:2d:d7:fb:36:d7:77:5a:7e:76:1d:04:fd:1c:18:
                    f9:b8:32:81:73:dc:6c:5a:cb:97:bf:14:a9:31:66:
                    d7:39:16:82:50:f9:56:9c:c2:51:c9:2c:e8:23:b5:
                    bf:45:15:9a:e2:b3:97:bf:9c:d5:3f:24:83:80:57:
                    94:44:ba:a1:e4:b3:56:99:6b:9a:a6:b1:40:d1:a2:
                    8c:26:fa:24:39:06:84:22:4b:f5:08:14:36:92:a9:
                    6c:a6:4f:8d:81:c6:81:de:34:8d:25:4c:7b:8a:37:
                    62:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:22:9E:5D:AF:03:81:79:88:BB:91:96:1A:47:4F:CA:53:68:E1:DD
            X509v3 Authority Key Identifier:
                keyid:99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3232342e302f31392d3234203d3e203237363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ab:38:56:d1:be:dd:c0:a6:a9:4d:52:f1:f0:e8:10:6b:11:b4:
         8d:ad:ab:28:2b:5c:69:89:7d:f2:73:e3:56:0e:f9:60:ff:ec:
         22:b4:9e:1d:0f:ff:59:e6:2e:85:b4:5d:ad:e8:28:f2:1b:12:
         28:cf:87:0f:d8:c2:3f:15:49:89:87:78:97:26:ce:84:43:6a:
         f6:da:42:66:d0:2f:35:c6:36:b3:1e:2c:3b:8d:c9:28:72:60:
         fe:22:8d:ab:d2:74:05:e9:e9:53:5e:cc:43:15:11:ec:9c:80:
         bb:8b:75:4d:19:9c:1d:bc:aa:b8:2d:dd:1f:3c:4f:be:6f:27:
         9e:1b:50:8b:00:6a:64:42:d4:aa:b4:ec:09:a4:13:7b:da:55:
         33:13:5c:a6:76:cd:d8:5f:39:f3:c4:02:c4:b9:96:6a:55:64:
         55:86:78:9a:59:ed:f2:e5:19:c1:08:76:f5:bf:c0:e2:06:78:
         4f:94:cc:1d:3b:4e:5b:fc:82:33:56:f6:e8:d1:b5:5e:8f:1c:
         09:ee:23:8a:1c:3a:55:1e:60:28:84:03:30:11:dc:71:94:56:
         d6:53:3a:bf:56:3a:10:e4:b6:51:40:85:d5:d7:13:40:ce:75:
         8e:d2:37:8b:98:c7:a7:de:0f:3a:4d:cd:a0:c9:bf:0f:be:d2:
         e1:39:a9:78
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGKyzIsSpVAG2zzCKx0lqQ7OvZHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk1NTc3RDg1RTMyNDUxRDk2OTU5NTVDRkFDRjgzRUEw
Q0I2RjJBODAeFw0yNDAzMDUxNzU5MjRaFw0yNTAzMDQxODA0MjRaMDMxMTAvBgNV
BAMTKEVDMjI5RTVEQUYwMzgxNzk4OEJCOTE5NjFBNDc0RkNBNTM2OEUxREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClTFoWbk8vn0punLOo9KL0pVpk
+dM9zMJPuyIx+EvEpFGAlocPZH1Hyp1meLvtP+0PnKKlgsq29P++r6O+vtmrEEIj
gWiZmJAlc12d1Gy/On7ycULaBsaivoNtpWYjCLBMOW7Y0bdenmimY2z49Qh7RZCr
tVljXe1Yod131Bl9pG6n7IpmfoRV/Z5fakN2vcr+DZn4fcYt1/s213dafnYdBP0c
GPm4MoFz3Gxay5e/FKkxZtc5FoJQ+VacwlHJLOgjtb9FFZris5e/nNU/JIOAV5RE
uqHks1aZa5qmsUDRoowm+iQ5BoQiS/UIFDaSqWymT42BxoHeNI0lTHuKN2JtAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU7CKeXa8DgXmIu5GWGkdPylNo4d0wHwYDVR0j
BBgwFoAUmVV32F4yRR2WlZVc+s+D6gy28qgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MDY3RjUwRTJFQjQ5QTg0MjY2MTA3NjUyMjlCRTk5ODMw
QUUzQjdEQkYxQzBCRTA5QUY0MkExMjlFRDNGOEZFLzAvOTk1NTc3RDg1RTMyNDUx
RDk2OTU5NTVDRkFDRjgzRUEwQ0I2RjJBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OTU1NzdEODVFMzI0NTFEOTY5
NTk1NUNGQUNGODNFQTBDQjZGMkE4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzA2N0Y1MEUyRUI0OUE4NDI2NjEwNzY1MjI5QkU5OTgzMEFFM0I3REJG
MUMwQkUwOUFGNDJBMTI5RUQzRjhGRS8wLzMxMzgzMTJlMzEzODM5MmUzMjMyMzQy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM3MzYzOTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFtb3g
MA0GCSqGSIb3DQEBCwUAA4IBAQCrOFbRvt3ApqlNUvHw6BBrEbSNrasoK1xpiX3y
c+NWDvlg/+witJ4dD/9Z5i6FtF2t6CjyGxIoz4cP2MI/FUmJh3iXJs6EQ2r22kJm
0C81xjazHiw7jckocmD+Io2r0nQF6elTXsxDFRHsnIC7i3VNGZwdvKq4Ld0fPE++
byeeG1CLAGpkQtSqtOwJpBN72lUzE1ymds3YXznzxALEuZZqVWRVhniaWe3y5RnB
CHb1v8DiBnhPlMwdO05b/IIzVvbo0bVejxwJ7iOKHDpVHmAohAMwEdxxlFbWUzq/
VjoQ5LZRQIXV1xNAznWO0jeLmMen3g86Tc2gyb8PvtLhOal4
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org