Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130342e302f32322d3234203d3e203532333632.roa
File:                     3138312e3137342e3130342e302f32322d3234203d3e203532333632.roa (raw, json)
Hash identifier:          k9mQoMNjGmbsFs5XQDepfZty5ZlnylQNIRF7mCm5Fw0=
Subject key identifier:   0E:70:3C:F9:49:C8:8B:8E:AF:51:47:AA:C0:5D:5D:CC:76:1C:D1:E5
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       21E7991E0E964D4C22C5CC0382997C27AC5DFD01
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130342e302f32322d3234203d3e203532333632.roa
Signing time:             Tue 05 Mar 2024 17:56:02 +0000
ROA not before:           Tue 05 Mar 2024 17:51:02 +0000
ROA not after:            Tue 04 Mar 2025 17:56:02 +0000
asID:                     52362
IP address blocks:        181.174.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e7:99:1e:0e:96:4d:4c:22:c5:cc:03:82:99:7c:27:ac:5d:fd:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:51:02 2024 GMT
            Not After : Mar  4 17:56:02 2025 GMT
        Subject: CN=0E703CF949C88B8EAF5147AAC05D5DCC761CD1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:51:03:92:4b:35:10:01:b6:14:84:62:c0:67:
                    67:f9:aa:26:e6:15:f6:91:df:a9:30:13:ba:a4:ba:
                    8c:c2:27:4b:c8:f4:52:fa:dc:74:87:2c:d9:7b:0b:
                    cd:c8:93:1b:be:14:6c:12:3f:19:a9:71:94:29:65:
                    e8:10:0a:6a:bf:ac:e3:6d:09:ce:2a:37:ef:dc:0c:
                    aa:64:1f:ab:20:49:50:ff:c0:37:14:04:9a:0d:1a:
                    dc:ee:22:cc:56:59:37:3a:a3:1a:35:61:ac:40:93:
                    a1:cc:87:83:ce:cf:bd:2b:23:19:ac:cf:f8:71:05:
                    37:ec:b0:73:f0:c6:9f:dd:46:7e:14:c7:3b:05:a3:
                    ce:80:08:49:11:d9:2f:b5:ef:14:43:62:b4:ee:27:
                    d2:b2:42:a9:72:c5:63:1d:ec:9a:a2:50:c9:18:f9:
                    f2:f7:4b:0c:ac:de:ea:3b:1c:f9:c9:0b:4e:b2:50:
                    a3:91:6a:7a:fd:54:fd:63:7a:bc:8d:71:bc:64:3a:
                    12:34:4c:d6:73:cf:cc:05:5c:4f:ae:96:a2:7a:bd:
                    cd:9a:a0:fd:f9:48:da:9a:82:ab:c6:7b:fb:ac:3f:
                    0b:8a:8f:ed:0b:2d:8f:27:72:fd:36:0b:0b:92:56:
                    61:9a:37:e4:16:dc:13:f6:9c:bc:e6:a3:e0:cc:c8:
                    e7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:70:3C:F9:49:C8:8B:8E:AF:51:47:AA:C0:5D:5D:CC:76:1C:D1:E5
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3130342e302f32322d3234203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:7f:3a:8b:2d:b1:7f:b7:75:77:92:96:ec:ff:61:68:00:a9:
         d3:9b:01:38:06:5f:10:b7:97:77:06:43:2c:1c:12:21:3a:34:
         b7:60:da:06:43:42:0a:74:ff:1a:1c:b5:43:8b:b9:80:f0:c3:
         2a:e0:7e:65:c9:ee:0c:35:3c:bb:0c:0f:44:4e:30:06:a9:1c:
         2f:e9:e5:0f:1d:f2:03:2d:19:27:ff:61:12:d5:00:3d:8a:2c:
         82:37:64:15:21:33:3d:ab:1b:3d:ba:a1:6c:03:74:3e:04:b9:
         32:40:1b:f3:53:16:f9:1e:47:5a:96:4b:bc:3c:08:ab:75:46:
         40:99:1a:9b:cd:b9:2c:10:cd:e2:1a:92:1b:0f:4f:e6:98:28:
         33:ee:94:fb:b3:ee:09:12:c8:63:18:d5:d1:ab:1a:3a:16:d2:
         24:ef:71:50:ed:e2:f8:94:82:31:11:2a:85:47:f1:be:c3:2b:
         26:23:4f:bf:b3:0f:57:06:c5:e5:28:c9:95:f1:ff:6b:f5:13:
         76:c7:47:94:ad:1b:47:56:15:da:e1:e0:6f:83:b6:13:68:db:
         76:18:e1:4e:bb:ac:ab:41:f1:24:81:bd:32:75:44:ce:db:00:
         69:b8:e2:c2:b3:1d:10:6b:50:9c:f7:4b:f9:7a:3b:80:68:cf:
         fc:af:bd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org