Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3234312e302f32342d3234203d3e20323632313931.roa
File:                     3138312e3138392e3234312e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          NJKO84mQQygmZ697ujjNna1/2pNXI4p4eFpNmQXSBa8=
Subject key identifier:   16:D4:9F:C0:C3:20:E8:2F:9E:46:1D:7B:4D:04:42:9E:9D:FD:32:6B
Certificate issuer:       /CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
Certificate serial:       77D0FB7C21D08EBA1C23E19B93D0917167749100
Authority key identifier: 99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3234312e302f32342d3234203d3e20323632313931.roa
Signing time:             Sat 04 May 2024 10:55:00 +0000
ROA not before:           Sat 04 May 2024 10:50:00 +0000
ROA not after:            Sat 03 May 2025 10:55:00 +0000
asID:                     262191
IP address blocks:        181.189.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d0:fb:7c:21:d0:8e:ba:1c:23:e1:9b:93:d0:91:71:67:74:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995577D85E32451D9695955CFACF83EA0CB6F2A8
        Validity
            Not Before: May  4 10:50:00 2024 GMT
            Not After : May  3 10:55:00 2025 GMT
        Subject: CN=16D49FC0C320E82F9E461D7B4D04429E9DFD326B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c3:61:e0:90:28:59:6f:b2:bb:86:d0:a2:8c:
                    c3:62:51:31:3e:90:87:07:b4:a0:80:c3:84:fe:3b:
                    e9:a9:06:78:67:ec:34:a9:74:cf:2a:17:5c:4f:49:
                    21:b4:2f:cc:cd:54:2a:41:20:71:d0:81:62:71:70:
                    77:9c:98:28:a0:be:de:39:15:1c:ff:05:78:fe:62:
                    bf:7b:75:9d:36:3c:96:b1:03:bd:cb:60:b1:63:ac:
                    cf:5f:03:3c:e6:f5:5c:67:b6:64:68:db:4f:b5:46:
                    b6:bd:79:c2:24:7d:b8:2a:9c:3a:a3:14:3f:bb:89:
                    20:9e:fd:d1:2d:6b:fb:1b:9a:51:f4:68:35:e1:9a:
                    6d:ba:1d:53:e9:a9:28:7a:cb:e3:33:b2:ae:48:31:
                    7a:49:83:0b:43:aa:e8:f7:5b:85:db:d1:38:48:a0:
                    ad:8f:fd:af:d7:fb:fc:a8:8b:fc:2b:4f:87:bf:01:
                    b7:17:2b:1e:6f:1f:ac:95:ef:81:56:26:0f:f5:43:
                    9e:e4:e4:66:1f:b0:b7:c2:68:bc:b8:81:82:2f:e1:
                    bb:34:a4:80:65:95:38:30:07:66:16:2d:37:28:65:
                    b1:2f:e4:2a:4c:e2:e1:1c:c0:1d:a1:fe:dc:8f:9d:
                    56:d9:79:11:e3:70:ca:b7:29:7d:85:96:e0:c6:6f:
                    d6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D4:9F:C0:C3:20:E8:2F:9E:46:1D:7B:4D:04:42:9E:9D:FD:32:6B
            X509v3 Authority Key Identifier:
                keyid:99:55:77:D8:5E:32:45:1D:96:95:95:5C:FA:CF:83:EA:0C:B6:F2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/995577D85E32451D9695955CFACF83EA0CB6F2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7067F50E2EB49A8426610765229BE99830AE3B7DBF1C0BE09AF42A129ED3F8FE/0/3138312e3138392e3234312e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:a1:df:b9:ef:1f:18:02:d6:ff:dd:8f:66:67:f8:2d:23:83:
         4a:49:46:d3:7e:bb:94:55:39:b1:69:dc:cc:c4:04:4b:98:e9:
         02:3c:61:62:cd:10:69:ca:68:4f:ba:2c:83:d7:c3:52:9d:fe:
         5b:5f:85:a5:40:d2:10:57:16:51:56:dc:bb:a9:6e:32:1e:78:
         71:c6:d4:b8:d9:b3:14:f8:e6:03:2d:88:88:ef:de:a8:ee:68:
         47:17:25:3f:3f:23:47:22:7c:51:87:dd:eb:1f:ce:3a:9b:7d:
         f4:6e:e3:67:35:4e:ce:73:6f:f5:f7:0c:45:8a:c1:69:78:9a:
         ad:72:cd:ee:c1:64:8a:8b:e6:0b:5a:98:84:76:52:d2:a9:f6:
         78:71:f3:03:dc:26:83:ba:2e:bf:d2:77:71:28:b5:15:8e:fb:
         7c:8b:91:f2:f8:56:e4:b1:7c:3f:5c:a8:03:f1:ca:74:da:2c:
         b7:9b:a0:f7:36:f5:ff:a8:3d:db:77:31:f8:f4:6f:a2:c9:3b:
         7c:8c:17:80:6f:49:ac:9a:42:24:11:c9:64:12:3a:cd:1a:ac:
         c6:8d:79:0b:91:e4:7a:43:92:da:df:0e:5e:f9:70:1c:3b:7e:
         3a:60:8d:91:fe:42:02:e4:69:5a:49:ac:d8:8a:70:84:cd:39:
         f0:72:9f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:26:12 2024 by rpki-client on console-ams.rpki-client.org