Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/3138312e3233322e3139302e302f32332d3234203d3e20323731393335.roa
File:                     3138312e3233322e3139302e302f32332d3234203d3e20323731393335.roa (raw, json)
Hash identifier:          +rTiBamLLcgniWnQQr64Ou2pQAWQ/8X+n+X/ZUy8H0o=
Subject key identifier:   71:EF:2D:B1:94:20:B3:30:8F:A7:4A:25:C5:A0:E8:27:2A:D6:42:95
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       1DE95DC7D6951B7DD5C3F9F17A6810DA3DDE8006
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/3138312e3233322e3139302e302f32332d3234203d3e20323731393335.roa
Signing time:             Tue 05 Mar 2024 17:50:52 +0000
ROA not before:           Tue 05 Mar 2024 17:45:52 +0000
ROA not after:            Tue 04 Mar 2025 17:50:52 +0000
asID:                     271935
IP address blocks:        181.232.190.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e9:5d:c7:d6:95:1b:7d:d5:c3:f9:f1:7a:68:10:da:3d:de:80:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Mar  5 17:45:52 2024 GMT
            Not After : Mar  4 17:50:52 2025 GMT
        Subject: CN=71EF2DB19420B3308FA74A25C5A0E8272AD64295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:75:6e:f0:e2:8a:a9:54:57:ad:a5:17:00:
                    16:7d:52:bb:2b:66:2a:3a:f7:d2:11:d4:8e:3e:c5:
                    3a:69:bc:a8:70:f8:15:1c:37:83:2e:fa:9c:8a:75:
                    81:4e:6e:0e:6c:b6:84:3e:39:c6:7f:bf:2b:5f:ce:
                    ba:48:0c:e9:6d:ec:7d:29:b4:8d:f7:86:de:2c:fe:
                    75:a1:c4:8b:0d:7f:ea:ed:cb:db:e6:fd:ac:9e:f9:
                    3f:4a:61:bf:ad:a5:f1:99:66:d8:a0:1a:f7:3b:74:
                    5a:53:fe:92:c5:18:67:d8:83:8d:b8:60:cb:5d:32:
                    ae:d1:ac:f7:8b:18:46:bb:50:6c:05:1c:90:ad:ee:
                    00:82:82:ac:b0:9c:75:58:f9:ad:a6:cd:f0:ee:f1:
                    05:64:70:ab:a3:7d:a8:38:84:e9:22:f7:01:f5:01:
                    ec:9f:dd:3b:ac:2a:39:6f:90:6b:eb:d0:f7:5f:f9:
                    8d:28:9e:ea:41:e9:42:e4:e1:f2:65:0d:b1:3a:32:
                    e4:b0:47:cf:3d:ba:41:e9:ea:26:7c:5c:0b:b1:a8:
                    2a:d6:17:a6:e0:6c:14:a6:b3:3c:2e:4c:8e:dd:c9:
                    f1:e3:cc:30:83:64:fd:23:9a:c9:0d:9f:de:44:bd:
                    ff:43:55:04:a2:aa:07:df:b8:2e:98:b0:38:7e:92:
                    12:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EF:2D:B1:94:20:B3:30:8F:A7:4A:25:C5:A0:E8:27:2A:D6:42:95
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/3138312e3233322e3139302e302f32332d3234203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:3d:c3:a2:11:ae:b3:5a:a2:ef:cd:90:5a:40:9e:d0:0d:db:
         d2:c2:27:7d:4d:b6:fd:52:e1:60:ce:49:26:fe:d6:4d:11:02:
         16:d5:6c:b1:e2:48:09:3a:1b:14:34:34:d7:8e:e0:7d:15:6c:
         67:2a:c7:92:71:8f:bb:a5:37:d0:f9:fb:70:9a:9a:5b:97:83:
         49:c9:48:44:49:6a:e0:a6:7b:dd:0d:ac:b7:e3:bc:d0:1e:d8:
         0d:5f:4a:78:b6:c4:80:08:cc:89:18:99:17:4d:6e:7c:d5:47:
         ce:f3:2d:95:37:53:27:01:19:d5:d3:28:e2:11:b6:e6:f3:5c:
         9b:1d:f2:aa:63:2b:92:a0:ae:e3:f8:ea:20:92:8e:5b:17:f0:
         5b:6f:58:ce:49:0d:88:88:13:77:b7:a2:21:d9:54:53:97:e3:
         24:56:af:9f:4c:68:be:9a:f4:b9:2d:31:2b:e7:9d:c3:2b:18:
         ef:2f:c9:a7:65:21:95:f3:af:b6:16:c5:c5:6c:77:e5:5b:04:
         fe:1f:1f:cb:94:b0:bc:69:bf:16:6f:d6:56:aa:f3:6f:4e:c2:
         37:b9:b0:1c:d6:f8:6d:e4:c8:4f:a6:14:4e:dc:32:32:cc:1a:
         4f:8c:7b:18:3c:a0:03:15:a6:54:c4:91:22:18:19:86:8c:4e:
         ba:86:0d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org