Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/3138312e3232342e3139392e302f32342d3234203d3e20323732303638.roa
File:                     3138312e3232342e3139392e302f32342d3234203d3e20323732303638.roa (raw, json)
Hash identifier:          dy783wJWGZ/6186+DIuRw6eTbftmW1xiswmSxXRD8eQ=
Subject key identifier:   E6:CD:AA:17:4A:0D:B7:79:9A:DE:B6:29:FA:30:4D:C4:BF:17:E1:18
Certificate issuer:       /CN=BFBFEAF49CCCA7EA7E944649178535787F34F0D7
Certificate serial:       207E992BEA4893A9F213CAFB4A9419ABEDFA8052
Authority key identifier: BF:BF:EA:F4:9C:CC:A7:EA:7E:94:46:49:17:85:35:78:7F:34:F0:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/3138312e3232342e3139392e302f32342d3234203d3e20323732303638.roa
Signing time:             Tue 05 Mar 2024 18:23:29 +0000
ROA not before:           Tue 05 Mar 2024 18:18:29 +0000
ROA not after:            Tue 04 Mar 2025 18:23:29 +0000
asID:                     272068
IP address blocks:        181.224.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 11:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7e:99:2b:ea:48:93:a9:f2:13:ca:fb:4a:94:19:ab:ed:fa:80:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFBFEAF49CCCA7EA7E944649178535787F34F0D7
        Validity
            Not Before: Mar  5 18:18:29 2024 GMT
            Not After : Mar  4 18:23:29 2025 GMT
        Subject: CN=E6CDAA174A0DB7799ADEB629FA304DC4BF17E118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:ac:c0:9b:f2:87:93:5f:d3:ad:9c:76:72:
                    67:aa:6a:af:65:75:7f:07:78:c5:26:b2:91:6a:75:
                    fd:ed:9e:ab:1d:92:54:bb:50:fb:f1:64:d0:d8:72:
                    f5:b4:bd:ad:90:21:cc:e4:94:cf:71:0c:aa:33:e2:
                    9e:0d:9a:17:98:20:2c:ff:d0:25:26:30:40:f2:a0:
                    c8:f9:d2:0f:56:09:38:f3:a0:b8:f9:b1:97:64:99:
                    71:fc:e1:30:08:3d:11:67:54:6d:8e:b8:7d:40:59:
                    b7:c4:ad:be:b8:4c:1a:5d:a5:f0:f9:ba:8b:9e:2b:
                    7b:dc:e5:e1:14:e7:34:f5:b5:66:97:eb:8e:ed:da:
                    15:2a:31:4b:f8:d1:bf:49:b7:07:9c:fc:67:10:56:
                    eb:bd:c4:7d:7c:a5:38:19:f4:39:13:d8:5f:c1:71:
                    2a:cb:27:94:98:b2:cc:33:13:fd:1e:95:bd:17:9c:
                    98:c2:f7:3e:15:99:31:9d:f0:1c:73:ef:6b:eb:9a:
                    67:f9:7c:e8:80:7d:8e:e2:64:f6:de:09:16:b0:59:
                    f8:b2:73:41:f0:79:ee:65:5c:c6:58:4e:f9:33:25:
                    a9:56:2f:cc:17:40:bc:5c:8b:e8:e1:a2:13:91:7e:
                    04:b9:da:26:57:35:57:b3:57:f4:ef:e5:60:1c:2a:
                    29:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CD:AA:17:4A:0D:B7:79:9A:DE:B6:29:FA:30:4D:C4:BF:17:E1:18
            X509v3 Authority Key Identifier:
                keyid:BF:BF:EA:F4:9C:CC:A7:EA:7E:94:46:49:17:85:35:78:7F:34:F0:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/3138312e3232342e3139392e302f32342d3234203d3e20323732303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:90:1d:c4:d9:b5:e1:cf:55:db:40:8d:e1:45:a8:8d:3e:4e:
         a0:ca:e6:f2:3d:95:43:35:08:9d:0e:b3:9e:45:ca:a3:f2:7f:
         d6:e1:bf:26:58:a1:d9:63:32:48:6d:a0:44:be:8d:fe:fb:a1:
         ee:ec:7d:6f:fc:df:cf:83:bf:56:65:9b:67:9f:eb:5a:d1:1d:
         d2:50:4a:5e:ea:db:22:7f:c4:5b:1a:a4:a6:41:3b:4a:bb:78:
         4b:3a:5c:ac:f9:de:2f:0d:9f:84:a4:f0:f2:fc:85:b7:7b:7d:
         4e:a9:d2:89:ea:20:4b:e2:8f:fb:6d:06:e1:cc:9b:42:9c:1b:
         7f:d4:21:62:80:00:81:0b:d2:14:2f:0f:42:87:a1:03:e1:da:
         a9:70:5b:17:95:ba:77:08:4c:f8:ee:bc:51:1d:67:a3:ba:a8:
         8b:2c:64:2c:98:cb:f4:92:63:c7:30:c6:20:02:09:93:b1:01:
         8b:df:4f:ec:d8:9f:03:40:08:5e:85:11:c6:6f:b9:09:7a:61:
         da:ae:bf:9f:f5:69:a1:1a:2c:83:08:ca:0e:11:1a:4e:98:11:
         f8:29:a5:9f:92:a1:1d:ca:ba:54:5b:f1:83:0b:07:da:00:43:
         e0:07:ac:fa:c0:4c:59:92:99:80:1a:14:e1:f0:37:8b:bb:54:
         f9:8e:e7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:59 2024 by rpki-client on console-fra.rpki-client.org