Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138312e3137352e302e302f31362d3234203d3e203134353232.roa
File:                     3138312e3137352e302e302f31362d3234203d3e203134353232.roa (raw, json)
Hash identifier:          c9bmNXu0qdmU4JhO/XmxWmKiBnSBAes8RCO1+KpXuEM=
Subject key identifier:   A2:F7:8F:39:8D:6B:5C:13:92:04:A3:17:FD:8D:C2:B0:79:11:FD:6F
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       5F097382FFBD84E46D1B6AD542B5C21BA6E6FFE6
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138312e3137352e302e302f31362d3234203d3e203134353232.roa
Signing time:             Tue 05 Mar 2024 18:20:53 +0000
ROA not before:           Tue 05 Mar 2024 18:15:53 +0000
ROA not after:            Tue 04 Mar 2025 18:20:53 +0000
asID:                     14522
IP address blocks:        181.175.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:09:73:82:ff:bd:84:e4:6d:1b:6a:d5:42:b5:c2:1b:a6:e6:ff:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Mar  5 18:15:53 2024 GMT
            Not After : Mar  4 18:20:53 2025 GMT
        Subject: CN=A2F78F398D6B5C139204A317FD8DC2B07911FD6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:34:77:4b:bc:7d:b1:78:25:3a:cd:d4:33:2e:
                    f3:1f:8e:00:58:27:8d:7f:14:1c:3e:4a:5c:7f:da:
                    f3:81:ad:06:b8:f9:00:9a:59:f6:2d:4d:2d:65:df:
                    7b:03:20:0c:4d:42:e9:61:f8:e6:b7:65:84:94:56:
                    ec:45:c1:83:2f:70:d3:08:1b:c0:67:cd:b6:15:f5:
                    b0:b5:7b:11:79:41:56:5d:0b:20:a1:64:83:2a:17:
                    e4:e9:7b:78:06:a6:17:f9:57:a9:5f:d1:17:ee:f5:
                    31:15:2d:e5:14:f5:2d:4c:fd:e0:62:c4:e4:5d:bd:
                    7e:e2:87:76:80:a3:8f:87:95:db:c1:ff:3b:27:52:
                    e4:33:bf:00:1a:ae:c6:f5:44:5f:3b:6c:f7:82:ef:
                    2f:67:49:d8:7e:88:16:cb:75:23:4a:16:90:32:87:
                    bb:1a:7a:11:e0:7f:85:ff:da:88:91:00:89:95:46:
                    11:42:ad:c0:a0:33:24:4e:a4:3c:92:43:fb:96:ab:
                    be:22:c1:ca:c6:e7:15:fd:8b:a3:b7:0d:46:c7:39:
                    8b:73:21:15:86:92:e2:66:54:4c:60:ec:08:da:36:
                    ba:af:2a:30:a8:13:00:90:bc:f7:5d:58:46:84:b2:
                    f4:0a:38:0e:d1:3f:dd:49:fb:46:1d:eb:5f:b3:a7:
                    68:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F7:8F:39:8D:6B:5C:13:92:04:A3:17:FD:8D:C2:B0:79:11:FD:6F
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3138312e3137352e302e302f31362d3234203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.175.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:f8:1e:9f:03:f3:ec:05:2a:f0:d0:a2:4e:40:5e:11:84:6c:
         98:60:a9:a5:76:8d:07:ec:e8:88:37:bf:f6:d8:70:c7:5a:c2:
         27:38:e2:a9:e7:fd:fb:2a:03:c0:8e:9a:50:c4:a2:f0:72:d2:
         46:41:58:92:78:d5:1a:7a:89:fc:93:62:94:c9:5c:90:c1:0e:
         8c:31:03:0e:a9:3b:9b:e5:18:9b:11:f5:a6:98:f7:67:52:a6:
         24:a3:09:b1:72:8d:69:8c:f0:67:aa:7f:0a:0b:4f:85:4b:f6:
         17:7d:d4:42:a1:44:32:7f:4c:b0:e1:8a:2f:53:14:19:8c:7c:
         fb:1f:50:60:55:90:20:ce:1f:9b:ff:29:9a:ad:f6:85:83:b9:
         05:45:52:f6:a9:4a:8c:26:57:a0:53:7b:22:60:56:d9:99:d7:
         28:8b:2f:6e:4c:40:ec:30:05:8a:71:85:12:3d:51:c1:f3:84:
         3d:52:34:30:71:8e:fe:a0:60:a8:bd:19:23:a7:25:bd:7e:78:
         cc:7b:ce:59:e9:2e:6a:4b:cb:a4:08:14:ea:f2:46:3c:ef:ca:
         19:47:43:4e:f9:ad:b2:b7:0d:ec:58:c5:65:4c:1e:1f:41:87:
         b7:ef:bd:5b:90:d9:56:ec:37:03:43:93:0e:6e:69:30:1f:90:
         b7:9d:eb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org