Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/3138312e3233322e3139302e302f32342d3234203d3e20323732303832.roa
File:                     3138312e3233322e3139302e302f32342d3234203d3e20323732303832.roa (raw, json)
Hash identifier:          WxjGK56nN7sfaR4nyhEj9HSFHef746GBMtDNoknVw1I=
Subject key identifier:   68:94:A5:E4:8B:6E:C5:CA:68:01:E3:5A:03:36:72:8F:A4:78:23:42
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       69883C33912AB27415DBE3B8CB6CBFCEFB8D12F4
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/3138312e3233322e3139302e302f32342d3234203d3e20323732303832.roa
Signing time:             Tue 05 Mar 2024 17:50:55 +0000
ROA not before:           Tue 05 Mar 2024 17:45:55 +0000
ROA not after:            Tue 04 Mar 2025 17:50:55 +0000
asID:                     272082
IP address blocks:        181.232.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:88:3c:33:91:2a:b2:74:15:db:e3:b8:cb:6c:bf:ce:fb:8d:12:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Mar  5 17:45:55 2024 GMT
            Not After : Mar  4 17:50:55 2025 GMT
        Subject: CN=6894A5E48B6EC5CA6801E35A0336728FA4782342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:30:0e:3b:43:33:8d:1a:8b:73:90:25:e4:b0:
                    d3:4d:0a:14:02:df:15:b3:6b:60:c8:80:44:1e:0d:
                    11:37:85:cd:0b:b6:e6:89:96:f6:b1:b0:0f:b7:b1:
                    db:25:1d:2c:b0:d4:7d:e4:bf:76:e4:99:50:ba:96:
                    5c:92:1f:75:71:23:16:3c:9b:e7:f6:d6:0b:b4:f5:
                    7c:53:67:05:ad:d3:ad:f4:f5:4a:17:1b:5e:be:dd:
                    e9:94:ba:86:f5:15:77:16:25:50:9f:82:67:a2:5d:
                    0b:16:8d:70:c9:fa:7c:85:e2:b3:63:12:34:4c:86:
                    de:6c:ca:ae:d8:1e:54:f1:61:6c:ee:0a:ab:38:37:
                    92:e7:28:ee:d8:24:a8:80:49:ec:83:70:bc:6d:f3:
                    6d:72:8d:50:ee:21:ef:00:52:a7:71:d3:77:c8:67:
                    14:aa:87:04:d8:56:f5:de:95:08:b6:b2:a4:13:05:
                    47:ea:34:36:31:d6:80:00:34:62:af:4e:28:37:30:
                    c8:35:3e:2a:87:2f:17:10:88:1e:0a:3e:da:da:47:
                    68:cc:84:cc:be:5e:b6:de:3e:73:99:4f:eb:d4:75:
                    f8:01:05:d7:02:1c:59:39:d3:01:bf:d4:d3:1f:cc:
                    67:b0:ed:1f:5b:25:ab:f6:65:91:1a:25:93:cc:65:
                    d8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:94:A5:E4:8B:6E:C5:CA:68:01:E3:5A:03:36:72:8F:A4:78:23:42
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/3138312e3233322e3139302e302f32342d3234203d3e20323732303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:8e:07:68:7c:ef:4d:5a:ed:8e:f6:39:a4:38:76:f4:51:32:
         ab:ca:86:4a:ce:bc:3a:c9:d1:39:ba:00:26:3c:49:8a:a4:ea:
         20:9a:4e:08:a1:c8:15:54:c4:f7:35:d1:57:32:0d:c4:4e:ac:
         da:a4:fc:5c:52:e2:29:f6:45:a0:27:44:c9:a3:91:8b:b7:d1:
         57:31:e8:d7:99:0c:6f:51:c2:8f:9f:ea:9d:04:a5:d2:50:d9:
         d7:b1:4f:a9:fa:38:8d:61:1f:52:07:de:c4:b6:11:8a:b9:ed:
         a6:ae:32:8e:f4:b2:26:f1:0a:c6:dc:0e:78:53:34:65:a5:e3:
         f8:21:18:cd:c1:02:91:07:88:73:d8:0b:b2:a5:20:d9:13:e4:
         4b:93:68:19:41:24:42:c9:4a:c8:4a:20:3e:25:a9:03:d9:fb:
         85:d0:a6:8e:e0:df:eb:5c:9f:83:04:bb:42:d9:31:80:2e:8e:
         a3:79:10:3c:94:21:31:d9:cf:05:69:72:35:93:03:0a:a4:60:
         77:4d:b5:82:2c:22:b4:05:c1:c6:7d:e5:71:44:73:c4:b5:d5:
         01:68:a9:fe:c1:76:a8:14:93:a3:d8:8c:ce:02:94:df:1f:0e:
         53:02:a6:0b:f5:ac:3e:53:3f:fc:88:b4:4b:74:f1:88:a9:b1:
         f5:2d:b1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org