Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3232362e302f32342d3234203d3e203532343731.roa
File:                     3138312e3138392e3232362e302f32342d3234203d3e203532343731.roa (raw, json)
Hash identifier:          XC8qrtaRtT43U2wV3MKE14Fwc8bPVH5084Pl+uCTbGM=
Subject key identifier:   AB:23:4C:76:17:02:71:DC:DA:0C:48:68:23:11:9C:99:C3:A4:80:80
Certificate issuer:       /CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
Certificate serial:       2FE8777C4F1A9BEF0A5C4AF32DB948675D3FE6A3
Authority key identifier: 99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3232362e302f32342d3234203d3e203532343731.roa
Signing time:             Fri 08 Mar 2024 17:00:00 +0000
ROA not before:           Fri 08 Mar 2024 16:55:00 +0000
ROA not after:            Fri 07 Mar 2025 17:00:00 +0000
asID:                     52471
IP address blocks:        181.189.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e8:77:7c:4f:1a:9b:ef:0a:5c:4a:f3:2d:b9:48:67:5d:3f:e6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
        Validity
            Not Before: Mar  8 16:55:00 2024 GMT
            Not After : Mar  7 17:00:00 2025 GMT
        Subject: CN=AB234C76170271DCDA0C486823119C99C3A48080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:74:73:9c:80:74:b8:3e:11:a9:4f:15:f6:
                    65:e4:a3:58:06:2a:8a:69:fb:3f:f6:c7:fd:5b:ff:
                    fe:6d:4c:9a:f8:3c:d4:77:23:dc:5d:d6:93:c6:5f:
                    4f:d0:96:39:68:35:fe:d2:59:45:42:0c:e5:8b:29:
                    f4:32:c3:a3:af:31:79:dc:77:6f:ab:6c:2f:ef:2c:
                    8b:a6:f1:5a:e3:fa:b7:82:9f:91:5d:81:44:b4:50:
                    02:9d:a0:5e:be:c5:78:9f:e4:28:b0:cc:25:68:4b:
                    ff:60:d3:84:b6:05:89:c1:d4:23:3a:e2:ca:d4:a5:
                    78:7f:bf:87:90:52:e6:d3:97:22:0b:07:d0:cf:31:
                    23:bc:59:b7:79:f7:89:a4:04:9b:31:a2:99:c0:07:
                    07:ad:19:0a:f3:93:b1:f1:8d:4f:3f:16:e5:8e:ec:
                    14:09:d3:eb:3a:35:b5:35:f6:29:0b:7f:ef:31:b2:
                    b1:67:52:2a:98:44:b9:cc:a9:52:e5:34:74:69:20:
                    c4:c6:bc:c5:2e:ea:7d:25:6d:08:9a:15:62:98:9d:
                    61:ec:46:ed:c1:4a:d1:84:1e:54:b1:bf:ac:24:05:
                    4a:c2:e0:dd:c0:87:98:cc:65:9a:4f:75:6f:f0:60:
                    cd:c6:e5:08:93:c7:ef:c1:db:78:bf:47:ca:69:ce:
                    91:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:23:4C:76:17:02:71:DC:DA:0C:48:68:23:11:9C:99:C3:A4:80:80
            X509v3 Authority Key Identifier:
                keyid:99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3232362e302f32342d3234203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:58:fd:8e:fb:77:93:50:9f:ab:e1:37:c0:3a:92:4c:d8:cc:
         0b:07:e3:9c:32:8e:91:e5:5b:23:3d:02:0e:7d:7d:fb:2f:1f:
         b9:d9:51:5a:d1:10:a6:33:99:0a:14:dd:d7:4f:96:43:3c:43:
         40:0d:54:60:af:11:f5:45:5f:20:a7:eb:30:f8:e1:b4:7c:9e:
         07:29:16:76:c0:0c:d9:4c:f1:93:ae:60:a1:ad:18:7a:ee:52:
         3d:c9:f3:d9:a6:c1:29:b7:9b:0d:b9:5e:a5:bb:56:27:c8:98:
         fb:47:f6:02:bf:f9:21:92:dd:de:8c:e9:42:31:01:5c:01:ca:
         bc:62:c8:5a:65:1b:0d:f0:e1:11:21:38:b9:e8:4c:50:44:55:
         36:b2:33:ea:da:3c:63:63:72:e6:ed:c6:e8:34:ae:87:06:2f:
         fb:2e:c2:67:eb:16:86:ac:f9:65:5e:63:c0:53:7a:87:8d:1e:
         b7:dd:aa:61:90:53:01:77:1e:60:3a:6a:5c:21:3a:ab:98:c4:
         b9:0a:f3:3a:59:00:e3:01:c4:4c:5d:cf:af:c3:3d:04:67:23:
         28:03:aa:da:ef:e4:aa:c5:8f:ac:7d:f8:f5:cf:b1:92:bf:fe:
         b2:bc:67:b0:b3:9c:9a:00:69:0e:c6:01:9c:c0:95:64:e5:26:
         48:e6:3a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org