Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38302e302f32332d3234203d3e203233323433.roa
File:                     3138312e3137342e38302e302f32332d3234203d3e203233323433.roa (raw, json)
Hash identifier:          QO7DFzwtm61KXWSzNOKXaAyh0iGpPoc5F3ohmRgnRJY=
Subject key identifier:   B6:30:65:B9:C5:D6:60:E0:39:94:F5:5B:6A:2B:F2:79:9A:4B:7E:BD
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       7CCE3CB01139808C35EFFA004F8A4AC2F6BA9BF6
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38302e302f32332d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:06 +0000
ROA not before:           Tue 05 Mar 2024 17:51:06 +0000
ROA not after:            Tue 04 Mar 2025 17:56:06 +0000
asID:                     23243
IP address blocks:        181.174.80.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ce:3c:b0:11:39:80:8c:35:ef:fa:00:4f:8a:4a:c2:f6:ba:9b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:51:06 2024 GMT
            Not After : Mar  4 17:56:06 2025 GMT
        Subject: CN=B63065B9C5D660E03994F55B6A2BF2799A4B7EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:63:13:a7:48:75:52:a8:12:c4:c9:ce:fa:
                    a6:a0:15:78:84:30:bb:f0:2c:c3:2d:23:d3:4d:97:
                    26:0b:11:e7:88:03:f5:ab:ad:d7:97:c4:1e:7f:9d:
                    73:0e:99:06:c8:1a:70:54:f9:0f:36:50:99:26:8a:
                    6e:98:6f:09:59:00:fb:03:88:34:41:bb:f8:af:b3:
                    62:d6:85:4e:39:c4:53:4b:e7:8a:0b:df:82:ec:0f:
                    69:03:d0:b5:31:63:aa:b1:3d:ea:5c:5c:9e:17:28:
                    1e:5c:29:9f:5b:fd:84:2a:fa:56:2a:9a:c1:98:44:
                    b6:70:28:4c:f7:59:78:55:d5:52:e9:f3:76:4b:f0:
                    2e:25:4a:d5:b0:4d:fa:dc:0c:57:7c:db:c0:05:8a:
                    de:0d:77:1a:87:5f:93:b4:d0:d1:f1:f0:bf:60:a2:
                    89:f0:15:cf:38:91:1e:08:ea:52:5b:e7:71:6f:b6:
                    fb:cf:5a:ee:57:e4:16:3e:17:22:14:95:d8:51:86:
                    92:58:14:55:5e:fe:6a:b7:8e:5c:7f:3e:2b:6d:84:
                    32:7a:d6:53:95:68:fe:46:61:e8:25:ec:aa:b2:13:
                    72:4d:3d:c6:8d:b7:03:33:3f:b3:45:5a:09:74:ae:
                    f8:50:3e:13:26:e4:7d:3b:83:cc:54:84:58:d5:2e:
                    2d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:30:65:B9:C5:D6:60:E0:39:94:F5:5B:6A:2B:F2:79:9A:4B:7E:BD
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38302e302f32332d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:83:4d:65:cb:33:88:5c:27:97:09:58:ae:4f:fa:29:88:53:
         06:6c:d1:28:b1:9e:9f:2e:9e:2e:b4:a0:b7:47:ae:95:73:23:
         00:05:65:09:fd:93:b7:cd:7d:cf:ec:bc:eb:65:bc:fd:bf:c8:
         4e:75:a4:0b:c4:96:d4:c2:58:c4:94:0d:30:cc:94:55:c3:95:
         92:4d:4f:db:5d:54:d5:18:d0:35:0b:ad:8a:b5:c8:d2:40:8d:
         5f:07:f0:3f:78:ff:e2:c3:de:a2:bf:8d:dc:2b:07:e2:dc:80:
         29:8d:bb:7a:f5:47:13:67:79:78:cb:e5:72:28:e8:88:73:e8:
         12:53:fd:bd:62:d2:51:21:20:46:b8:5b:c1:8f:a2:15:d1:17:
         46:65:8f:ed:54:83:7b:de:5f:11:f6:9e:05:da:4e:43:ca:6c:
         99:f0:79:1f:73:6c:36:35:a9:6a:1b:b0:df:77:64:f4:29:26:
         5c:f8:ee:a0:9f:a4:54:cf:d3:2c:40:25:83:d1:6a:28:41:e0:
         75:9e:95:e5:e8:fc:74:4c:8a:f4:8d:a9:09:52:ec:70:7b:0b:
         9e:1c:f8:1f:97:0a:70:90:35:26:82:3f:d4:3a:0f:39:4e:e7:
         12:e5:9c:a6:4b:d9:8b:e1:9f:d7:d8:53:0d:bc:0a:ab:48:e7:
         2d:3d:6a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:12 2024 by rpki-client on console-ams.rpki-client.org