Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3132302e302f32322d3234203d3e203233323433.roa
File:                     3138312e3137342e3132302e302f32322d3234203d3e203233323433.roa (raw, json)
Hash identifier:          mH67lEyt01oYYD5Vx4dwk6f83f/zHYiYvUDwEDRYNgs=
Subject key identifier:   C5:E0:E4:77:C9:6E:75:37:98:50:ED:0E:2C:3D:BF:D4:83:C9:1C:AC
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       1921BBE1877A21D0FE9949F5C09F78F1868297F2
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3132302e302f32322d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:55:59 +0000
ROA not before:           Tue 05 Mar 2024 17:50:59 +0000
ROA not after:            Tue 04 Mar 2025 17:55:59 +0000
asID:                     23243
IP address blocks:        181.174.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:21:bb:e1:87:7a:21:d0:fe:99:49:f5:c0:9f:78:f1:86:82:97:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:50:59 2024 GMT
            Not After : Mar  4 17:55:59 2025 GMT
        Subject: CN=C5E0E477C96E75379850ED0E2C3DBFD483C91CAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b2:2f:a1:d3:65:36:ca:bb:72:96:cc:fc:5d:
                    ae:98:5a:19:e3:d3:13:6b:8a:55:a2:dd:ad:d1:fb:
                    e4:da:84:8b:c0:2e:25:d6:bc:4f:cd:fa:1a:8c:68:
                    6c:d6:05:fb:24:f5:23:30:51:b5:4c:bd:56:c1:e9:
                    cf:ab:12:7a:b9:2a:eb:7d:60:a0:da:42:f7:02:e8:
                    b1:21:40:83:70:bc:2d:24:ee:f0:cf:48:29:6f:19:
                    67:83:88:75:aa:5d:b1:e5:5e:14:81:7c:f6:8f:b7:
                    b1:68:8c:e6:f8:76:58:43:82:0c:22:82:6f:cc:70:
                    81:35:ba:a1:1b:2a:cb:12:3c:20:f6:c7:96:46:bb:
                    2c:b5:1c:08:91:30:b2:a8:87:8c:62:11:77:88:57:
                    11:31:b8:11:3d:bb:1e:46:bb:b8:11:60:4d:51:e4:
                    9d:32:b0:e4:30:04:6c:79:dd:d2:72:f3:76:94:9c:
                    63:13:ef:cb:f9:3b:32:bf:b6:fa:de:b4:e2:a9:41:
                    79:6e:69:e2:7d:f9:35:97:cc:8c:46:b4:20:ad:20:
                    1f:a5:6e:4d:b0:e7:a4:f5:8a:5f:89:84:7a:52:47:
                    3b:85:a7:17:9b:a1:bd:80:8d:24:d4:02:8c:95:f2:
                    88:65:67:2b:3e:17:26:ae:09:71:ff:06:e0:6f:d2:
                    79:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E0:E4:77:C9:6E:75:37:98:50:ED:0E:2C:3D:BF:D4:83:C9:1C:AC
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3132302e302f32322d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:ba:91:31:6c:3a:54:31:5f:1d:b7:68:76:1d:c0:fb:6d:9d:
         fb:dd:2c:41:58:d0:0e:e0:13:aa:f9:cf:af:d5:ce:81:68:83:
         a2:b4:3b:35:45:bc:18:cf:ea:c5:9d:6d:c3:76:df:25:00:d1:
         c2:cf:03:05:53:03:25:ee:1d:c7:27:14:fb:43:b1:21:db:64:
         8b:a9:5b:10:96:4f:cd:80:c5:88:f3:90:b0:39:cf:4f:25:0b:
         e6:ec:6b:9a:d3:db:eb:49:d8:47:f5:b8:a6:33:c9:ca:77:3b:
         bd:aa:1b:fc:e5:94:fc:b9:7c:5f:cd:28:58:6e:72:59:64:19:
         53:38:8e:09:89:ed:b0:4f:80:48:d3:31:20:3e:53:69:2c:4c:
         4c:22:2e:1f:ba:26:e1:15:ba:9f:70:04:ec:75:2d:3e:5a:c6:
         48:2a:00:08:61:1d:8f:68:d8:4d:6c:48:5a:24:41:04:dd:99:
         bd:01:bc:39:cf:3e:7e:db:2b:33:19:ed:1d:76:6e:d5:bf:64:
         1d:39:84:0c:18:0f:f1:b4:4f:7f:10:63:6a:cc:c1:6c:ca:10:
         a1:a6:d7:0c:97:9f:97:21:3c:6a:70:45:98:3a:c1:a8:fc:3d:
         2f:a1:03:e1:69:83:ee:ca:de:92:fb:ec:fb:3d:8e:35:e5:e3:
         48:dd:58:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:12 2024 by rpki-client on console-ams.rpki-client.org