Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130302e302f32342d3234203d3e203233323433.roa
File:                     3138312e3137342e3130302e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          G7iUTZ7ovdXOixZ6AU/y5TcifmkLoownFJ/TdZA8psY=
Subject key identifier:   31:F0:C5:B6:62:5A:C2:9C:71:10:05:B8:32:1C:9F:0F:71:7A:E8:99
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       6FF600A8363EE4354B4129E8E32EC74058B11362
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130302e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:55:56 +0000
ROA not before:           Tue 05 Mar 2024 17:50:56 +0000
ROA not after:            Tue 04 Mar 2025 17:55:56 +0000
asID:                     23243
IP address blocks:        181.174.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f6:00:a8:36:3e:e4:35:4b:41:29:e8:e3:2e:c7:40:58:b1:13:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:50:56 2024 GMT
            Not After : Mar  4 17:55:56 2025 GMT
        Subject: CN=31F0C5B6625AC29C711005B8321C9F0F717AE899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:03:fa:59:1c:ee:a5:c7:ae:3a:1f:93:bd:
                    89:b6:ad:d6:7a:6b:15:58:33:ca:87:a7:58:7c:aa:
                    fa:1e:3a:60:72:3b:a3:d2:68:88:51:ed:5f:8c:22:
                    21:9c:68:72:de:fc:8b:02:97:65:20:f0:b4:c9:d9:
                    ee:16:b1:7f:8b:cb:1d:14:83:15:4d:22:10:c9:b2:
                    74:81:fe:20:3a:16:8c:6e:3a:53:63:10:1e:69:2a:
                    e5:5e:94:9d:f3:ab:af:b4:43:e5:65:d5:a9:70:29:
                    a2:da:db:2b:61:5b:af:df:c3:c5:18:2b:aa:c7:25:
                    df:1c:95:f0:05:7c:58:01:03:5a:7d:e4:46:8e:5e:
                    46:50:b9:ff:7e:80:fc:f6:b9:a6:e9:ce:11:6b:5d:
                    77:3f:d3:b9:ca:18:3b:a5:0e:ee:a1:3c:c5:55:a7:
                    42:08:2f:98:7f:64:63:2d:67:43:fe:ef:50:72:29:
                    5b:ef:b8:e6:e3:ca:6e:0a:0f:68:30:fd:7d:11:17:
                    3e:bf:40:8f:30:b7:5a:34:59:d8:ee:74:1c:27:49:
                    99:c7:9b:5c:8a:65:eb:32:f6:d1:6f:0f:54:11:68:
                    c8:04:fa:e2:2c:d3:b2:41:92:dc:35:9e:c7:50:55:
                    3b:4c:c6:86:ec:d7:9f:18:06:60:9d:79:a2:3a:54:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F0:C5:B6:62:5A:C2:9C:71:10:05:B8:32:1C:9F:0F:71:7A:E8:99
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130302e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:b9:31:ab:74:67:5f:de:8a:f3:6e:6c:de:86:a6:f6:cc:2c:
         da:a6:67:9c:fe:c9:f3:e6:40:a5:38:5d:44:4d:a8:78:b0:32:
         04:53:2c:97:e3:84:dc:82:e2:9d:dd:59:aa:a8:0a:04:4f:b3:
         3d:e1:0e:eb:f3:17:a0:4d:29:2b:26:98:26:53:7f:24:b7:90:
         8f:72:47:ec:50:d7:a5:db:0b:06:ae:c7:28:64:12:bc:12:e0:
         b7:ce:03:8e:a6:61:39:f5:33:9e:de:67:c9:2e:76:f0:85:ca:
         33:ba:f7:40:af:03:a6:1c:07:9d:1b:9e:2a:99:e7:52:3c:24:
         f9:86:e3:6c:df:1d:ac:de:76:3b:6b:0c:01:7a:f2:cb:2b:62:
         a3:ab:50:84:ff:d0:85:2f:cd:8f:e2:f0:e6:45:8f:bf:3d:8d:
         17:4f:2e:d4:f2:0f:f1:04:38:96:e3:e4:1c:3f:2f:8a:40:5a:
         74:21:a0:25:80:3a:f6:e6:7d:a0:03:48:e4:94:44:94:e1:9c:
         96:b1:a1:ad:5b:56:39:a0:f0:83:82:9c:e5:47:e0:da:ad:b7:
         84:67:90:62:f2:db:11:ab:fb:db:ff:5c:48:16:b3:01:17:bc:
         2d:a3:61:0f:05:58:8a:12:d4:24:45:89:29:c7:10:e2:07:16:
         23:c7:64:bf
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUb/YAqDY+5DVLQSno4y7HQFixE2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxNDk5RDEyMDY3RjJCRUExMjg3QjYzNDI1RUEzQjcw
RkNBRkZDMTAeFw0yNDAzMDUxNzUwNTZaFw0yNTAzMDQxNzU1NTZaMDMxMTAvBgNV
BAMTKDMxRjBDNUI2NjI1QUMyOUM3MTEwMDVCODMyMUM5RjBGNzE3QUU4OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDswP6WRzupceuOh+TvYm2rdZ6
axVYM8qHp1h8qvoeOmByO6PSaIhR7V+MIiGcaHLe/IsCl2Ug8LTJ2e4WsX+Lyx0U
gxVNIhDJsnSB/iA6FoxuOlNjEB5pKuVelJ3zq6+0Q+Vl1alwKaLa2ythW6/fw8UY
K6rHJd8clfAFfFgBA1p95EaOXkZQuf9+gPz2uabpzhFrXXc/07nKGDulDu6hPMVV
p0IIL5h/ZGMtZ0P+71ByKVvvuObjym4KD2gw/X0RFz6/QI8wt1o0WdjudBwnSZnH
m1yKZesy9tFvD1QRaMgE+uIs07JBktw1nsdQVTtMxobs158YBmCdeaI6VFPJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUMfDFtmJawpxxEAW4MhyfD3F66JkwHwYDVR0j
BBgwFoAUjhSZ0SBn8r6hKHtjQl6jtw/K/8EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NTdENjU5ODQ4M0IwRDFFNTJFMjJERkU2N0IzN0YwM0VB
RTE4QTMzQUVDQzZFQzFCQzM2NDg2MUIxQjIxNENCLzAvOEUxNDk5RDEyMDY3RjJC
RUExMjg3QjYzNDI1RUEzQjcwRkNBRkZDMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTE0OTlEMTIwNjdGMkJFQTEy
ODdCNjM0MjVFQTNCNzBGQ0FGRkMxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzU3RDY1OTg0ODNCMEQxRTUyRTIyREZFNjdCMzdGMDNFQUUxOEEzM0FF
Q0M2RUMxQkMzNjQ4NjFCMUIyMTRDQi8wLzMxMzgzMTJlMzEzNzM0MmUzMTMwMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMzMzIzNDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAta5k
MA0GCSqGSIb3DQEBCwUAA4IBAQCPuTGrdGdf3orzbmzehqb2zCzapmec/snz5kCl
OF1ETah4sDIEUyyX44TcguKd3VmqqAoET7M94Q7r8xegTSkrJpgmU38kt5CPckfs
UNel2wsGrscoZBK8EuC3zgOOpmE59TOe3mfJLnbwhcozuvdArwOmHAedG54qmedS
PCT5huNs3x2s3nY7awwBevLLK2Kjq1CE/9CFL82P4vDmRY+/PY0XTy7U8g/xBDiW
4+QcPy+KQFp0IaAlgDr25n2gA0jklESU4ZyWsaGtW1Y5oPCDgpzlR+DarbeEZ5Bi
8tsRq/vb/1xIFrMBF7wto2EPBViKEtQkRYkpxxDiBxYjx2S/
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org