Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3132362e302f32332d3234203d3e203233323433.roa
File:                     3138312e3137342e3132362e302f32332d3234203d3e203233323433.roa (raw, json)
Hash identifier:          JetLPKAI/xmY2Fd32y/HNfmM+CZKMK5LCrQJeaEPGFk=
Subject key identifier:   C2:8D:F5:EC:B0:A0:91:3A:6D:25:7C:F5:B5:1F:EE:3B:45:D1:75:A4
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       523D6863D05E8179AA67F9AAD1FBC97EFA439099
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3132362e302f32332d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:00 +0000
ROA not before:           Tue 05 Mar 2024 17:51:00 +0000
ROA not after:            Tue 04 Mar 2025 17:56:00 +0000
asID:                     23243
IP address blocks:        181.174.126.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3d:68:63:d0:5e:81:79:aa:67:f9:aa:d1:fb:c9:7e:fa:43:90:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:51:00 2024 GMT
            Not After : Mar  4 17:56:00 2025 GMT
        Subject: CN=C28DF5ECB0A0913A6D257CF5B51FEE3B45D175A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:49:0c:20:d1:60:49:ad:a4:06:b9:23:4a:7e:
                    2b:d2:32:39:33:12:80:a7:69:81:30:b5:c0:77:5d:
                    34:67:ec:67:0a:bb:1c:31:d6:2a:c8:47:64:9a:33:
                    03:b9:b6:c4:25:a3:0a:c3:74:4f:69:b2:fb:f9:6c:
                    24:71:1c:ce:0f:56:8f:5b:15:24:85:d4:97:2c:dc:
                    29:68:3a:2e:89:15:0f:8a:bb:03:72:20:5a:cb:33:
                    b2:31:20:03:ee:f5:da:7a:07:8b:2a:4a:e8:8b:3f:
                    b6:85:61:06:43:6f:e1:57:87:25:ca:3a:a0:38:6f:
                    48:9f:4a:fb:c0:f1:ba:36:86:d8:e9:0c:3a:53:79:
                    e2:97:f8:97:b4:10:fb:95:33:f6:52:e3:8a:d1:5d:
                    98:77:2c:67:0e:b0:cb:72:6c:bb:78:b0:f5:bd:12:
                    38:d0:7a:74:22:87:d1:ee:59:b4:68:8b:76:3c:8b:
                    e2:65:8f:f5:0e:6d:47:8c:91:43:85:a4:7e:4b:1d:
                    64:0e:52:5e:56:c4:57:16:20:55:57:9d:b8:64:f3:
                    c9:df:54:f0:c1:9a:95:dd:41:4d:a2:e1:e1:0e:0e:
                    76:49:30:0f:a3:07:21:c0:80:d1:11:fd:20:7b:16:
                    79:93:a9:15:c9:a1:5b:3d:46:e6:64:db:f2:b3:f3:
                    5d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8D:F5:EC:B0:A0:91:3A:6D:25:7C:F5:B5:1F:EE:3B:45:D1:75:A4
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3132362e302f32332d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:8c:b3:11:4e:18:ad:bf:6f:07:4e:16:33:12:40:0b:0a:9c:
         68:95:6e:99:a7:93:09:a0:5c:82:e0:b5:f5:b5:b8:ae:b8:e6:
         73:34:f1:8c:cc:40:72:ba:6e:ac:41:94:c1:86:3c:99:e6:68:
         8d:44:26:ba:2e:07:97:f9:3d:39:98:f6:63:24:af:04:21:e7:
         bb:db:29:98:4a:6f:f0:c5:57:6a:6a:39:d3:45:18:46:6d:41:
         54:16:b2:32:69:e7:d6:4c:a4:5d:53:fa:80:25:29:b3:a6:f9:
         fa:0e:db:f5:96:cc:91:09:8d:70:59:6b:2e:4d:07:11:af:32:
         dc:f8:77:79:57:a7:89:93:50:70:e4:f6:b0:69:c9:e0:cf:e1:
         c2:44:77:09:46:93:de:0f:71:e4:ff:d8:f8:56:2e:74:81:24:
         c2:d1:c7:5f:53:6e:08:e8:af:6a:2d:56:e9:53:3b:5b:81:88:
         c2:5d:30:31:50:de:45:fc:85:a4:ed:6e:d0:10:af:f3:35:f5:
         d4:e4:43:f1:be:06:76:63:0f:eb:d3:0d:04:64:ac:0d:06:bb:
         94:a5:7e:10:68:e7:dd:2d:10:f2:0d:b5:31:e3:9e:fd:98:00:
         18:cf:25:19:fa:b1:1a:7d:ff:73:0c:45:72:34:88:d5:0b:b2:
         9b:62:69:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:12 2024 by rpki-client on console-ams.rpki-client.org