Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3233392e302f32342d3234203d3e203532323836.roa
File:                     3138312e3138392e3233392e302f32342d3234203d3e203532323836.roa (raw, json)
Hash identifier:          dnmbzK2rSjgzLX/IvpS0mEf9X5BS/wUfQwsbJ2rPwKs=
Subject key identifier:   D3:85:B1:03:D2:96:B6:98:B9:9F:53:09:F4:2C:86:A9:46:18:66:D3
Certificate issuer:       /CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
Certificate serial:       449F35CFAFB3CFC06416FB99B4B55362F679CC3C
Authority key identifier: 99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3233392e302f32342d3234203d3e203532323836.roa
Signing time:             Mon 11 Mar 2024 15:20:00 +0000
ROA not before:           Mon 11 Mar 2024 15:15:00 +0000
ROA not after:            Mon 10 Mar 2025 15:20:00 +0000
asID:                     52286
IP address blocks:        181.189.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9f:35:cf:af:b3:cf:c0:64:16:fb:99:b4:b5:53:62:f6:79:cc:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
        Validity
            Not Before: Mar 11 15:15:00 2024 GMT
            Not After : Mar 10 15:20:00 2025 GMT
        Subject: CN=D385B103D296B698B99F5309F42C86A9461866D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a6:90:c9:70:a2:b6:14:0b:8b:2b:71:d3:c7:
                    87:80:c2:b3:a2:06:65:38:c1:cd:5e:a6:e9:5d:86:
                    79:3b:c7:f1:c6:cb:42:d4:0e:22:ba:2f:c1:f1:4f:
                    c9:0a:ad:88:b2:c1:c7:cc:6b:f5:08:e0:0b:7f:18:
                    d2:98:f9:57:c2:77:99:2b:f8:13:60:2b:5c:8f:ee:
                    a8:4b:79:0a:27:6b:b4:a3:84:d2:6b:29:54:aa:2c:
                    cf:50:fd:7c:5d:f2:8b:bf:dd:b7:77:cc:54:a7:28:
                    0d:af:25:0e:84:73:10:4b:f5:f2:77:6c:33:a8:d4:
                    45:73:e7:c7:90:44:11:07:32:f6:43:f2:0c:de:45:
                    88:d6:10:fb:dc:74:c6:5e:0b:0e:d6:a2:c7:ec:17:
                    f4:eb:83:75:1b:eb:d1:e1:8c:2c:cb:c1:df:5f:e6:
                    82:0d:1f:b2:52:93:5c:91:22:c2:b5:e8:45:86:f9:
                    57:e0:e6:88:39:6f:c2:d9:36:84:d9:57:9c:89:5c:
                    48:ee:37:2f:e5:e2:f8:df:74:eb:9d:41:95:67:f5:
                    5c:24:d6:7e:6d:24:a0:13:5f:eb:e1:2f:4e:b7:e7:
                    9b:9c:54:65:e0:a0:ca:89:ea:bd:71:3a:e0:c1:0e:
                    0d:b2:fe:60:04:fe:a3:64:73:87:0a:52:ec:7b:09:
                    fc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:85:B1:03:D2:96:B6:98:B9:9F:53:09:F4:2C:86:A9:46:18:66:D3
            X509v3 Authority Key Identifier:
                keyid:99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3233392e302f32342d3234203d3e203532323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:e0:a3:86:6f:2c:f9:96:82:b3:49:37:a8:68:15:4f:77:f6:
         4a:dc:b6:90:ec:05:f9:23:0d:c2:58:9b:c8:02:51:c6:ce:65:
         bc:c4:53:af:41:16:9c:dd:19:0d:3e:98:9c:6d:f4:a3:bf:2e:
         19:79:8d:1e:12:83:18:1a:c0:91:a8:a2:12:af:23:87:0d:bd:
         38:f1:36:ff:c5:55:01:3d:26:ee:03:a8:48:a4:37:77:7a:ef:
         3b:21:e4:f0:43:6b:01:95:5c:0f:73:1b:1e:52:fc:01:fd:41:
         aa:09:d6:3d:26:f5:99:f2:41:79:98:61:77:47:5c:0f:70:47:
         44:62:e0:35:8f:3e:8f:63:7f:50:71:2a:34:2e:b3:d9:3e:0a:
         6f:75:b5:a7:67:f3:7e:10:a5:ca:e4:19:4b:f6:12:eb:5a:57:
         6c:3b:f0:45:d7:40:c0:65:fb:74:1a:21:3e:69:e7:62:10:0a:
         6d:92:9f:fe:d6:50:4f:06:b5:57:21:43:63:3e:c6:90:93:8b:
         e6:04:f8:dd:62:f8:b8:8e:96:9d:32:48:f8:2e:a3:6f:4c:cb:
         04:9c:d2:03:97:d0:08:c7:34:2b:91:22:ff:51:c5:0d:58:7a:
         5d:e5:e8:9c:bb:5c:99:35:dc:1c:bc:c0:3c:ea:8c:fc:e9:82:
         c5:7d:da:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org