Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38322e302f32342d3234203d3e203532333632.roa
File:                     3138312e3137342e38322e302f32342d3234203d3e203532333632.roa (raw, json)
Hash identifier:          YboRWXWkfsArhL3RuDoRk1ALpx8AQ2kPRBYHUXmVsbI=
Subject key identifier:   21:7A:7C:DE:CE:BB:72:63:15:FF:E2:32:1E:8E:DE:C9:72:35:B8:54
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       48692A8B759F76EC4D3EC3C33EE567E0CAF86DDB
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38322e302f32342d3234203d3e203532333632.roa
Signing time:             Tue 05 Mar 2024 17:56:08 +0000
ROA not before:           Tue 05 Mar 2024 17:51:08 +0000
ROA not after:            Tue 04 Mar 2025 17:56:08 +0000
asID:                     52362
IP address blocks:        181.174.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:69:2a:8b:75:9f:76:ec:4d:3e:c3:c3:3e:e5:67:e0:ca:f8:6d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:51:08 2024 GMT
            Not After : Mar  4 17:56:08 2025 GMT
        Subject: CN=217A7CDECEBB726315FFE2321E8EDEC97235B854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:59:f3:82:27:eb:8e:25:35:ea:7c:d5:29:
                    32:a6:fd:56:fa:34:e4:48:8e:0c:fb:00:e7:9e:7d:
                    d1:de:21:7f:8f:07:08:45:f6:d1:6f:7c:d3:28:71:
                    c5:ca:17:20:9f:7c:e2:69:05:81:03:41:94:83:30:
                    39:76:8c:5e:17:84:fb:f6:da:d0:75:9a:05:fa:50:
                    06:ed:43:4d:b4:70:a3:f8:bc:32:bf:95:d4:08:47:
                    46:a6:33:12:d6:c2:76:57:8e:dd:d8:17:5a:22:a7:
                    90:8f:6e:fa:3d:1b:c1:4e:7b:1d:ae:c5:a0:0c:d1:
                    91:47:3e:13:d6:9a:02:4e:da:56:05:c2:8a:36:7d:
                    fb:28:cf:5a:a7:1f:fd:48:70:af:c6:fc:ca:71:62:
                    b2:67:56:49:00:f1:bc:b1:09:8e:0e:29:83:0e:e7:
                    0f:59:29:c3:81:67:48:30:58:08:74:21:d0:28:fc:
                    6c:30:70:07:55:e5:c4:49:fe:87:c9:60:56:69:90:
                    11:36:ef:48:06:ee:99:9d:e4:9d:3b:29:cf:ce:7f:
                    03:74:7b:9d:dc:62:32:f7:4a:66:f9:b8:30:0d:56:
                    cc:8e:15:75:25:b1:3e:09:67:c3:08:a2:01:ac:02:
                    71:49:55:18:68:01:86:f0:6b:35:e8:2f:a1:cc:79:
                    8f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7A:7C:DE:CE:BB:72:63:15:FF:E2:32:1E:8E:DE:C9:72:35:B8:54
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38322e302f32342d3234203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:13:7a:01:63:68:99:c1:90:a3:64:90:2e:89:de:96:d0:7b:
         3a:af:1d:db:86:26:9e:c1:81:68:46:78:13:66:f1:47:7e:f0:
         f4:a7:f5:30:1e:54:b2:7d:96:ac:45:9d:b1:f3:93:6f:41:09:
         9f:3c:93:f0:ab:b6:0c:76:43:23:c9:1c:46:87:af:54:ff:6b:
         a3:f3:e0:8b:94:5a:f6:b4:f1:39:e1:2c:ea:2a:96:76:6c:7a:
         2f:00:62:b5:26:16:57:18:0f:1c:b9:4d:5d:46:45:49:08:f1:
         24:63:8e:c4:fb:40:01:9e:92:d1:55:2b:c0:98:5f:74:1f:75:
         c5:8a:04:bc:89:03:14:a8:00:e0:be:62:e5:59:75:ce:10:2a:
         4a:2e:f3:80:df:b1:e8:a3:db:dd:d2:99:a3:36:2e:a1:f2:bb:
         a5:aa:09:a8:88:a3:43:c2:8d:c4:75:87:3a:2f:1d:ed:59:5b:
         be:58:58:ba:14:58:e8:e8:66:ce:d5:af:33:bd:b8:2b:ea:6c:
         ae:bc:4d:28:d5:53:e1:17:c2:d6:6a:89:52:f6:9c:4b:49:0a:
         43:50:fe:a5:e4:74:68:9c:89:9c:94:b7:b4:0c:b1:78:b7:23:
         bc:79:98:e1:b3:c8:b4:9b:40:0e:88:57:05:1e:6f:8b:e8:ad:
         10:a9:9f:54
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSGkqi3WfduxNPsPDPuVn4Mr4bdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxNDk5RDEyMDY3RjJCRUExMjg3QjYzNDI1RUEzQjcw
RkNBRkZDMTAeFw0yNDAzMDUxNzUxMDhaFw0yNTAzMDQxNzU2MDhaMDMxMTAvBgNV
BAMTKDIxN0E3Q0RFQ0VCQjcyNjMxNUZGRTIzMjFFOEVERUM5NzIzNUI4NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA91nzgifrjiU16nzVKTKm/Vb6
NORIjgz7AOeefdHeIX+PBwhF9tFvfNMoccXKFyCffOJpBYEDQZSDMDl2jF4XhPv2
2tB1mgX6UAbtQ020cKP4vDK/ldQIR0amMxLWwnZXjt3YF1oip5CPbvo9G8FOex2u
xaAM0ZFHPhPWmgJO2lYFwoo2ffsoz1qnH/1IcK/G/MpxYrJnVkkA8byxCY4OKYMO
5w9ZKcOBZ0gwWAh0IdAo/GwwcAdV5cRJ/ofJYFZpkBE270gG7pmd5J07Kc/OfwN0
e53cYjL3Smb5uDANVsyOFXUlsT4JZ8MIogGsAnFJVRhoAYbwazXoL6HMeY/dAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUIXp83s67cmMV/+IyHo7eyXI1uFQwHwYDVR0j
BBgwFoAUjhSZ0SBn8r6hKHtjQl6jtw/K/8EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NTdENjU5ODQ4M0IwRDFFNTJFMjJERkU2N0IzN0YwM0VB
RTE4QTMzQUVDQzZFQzFCQzM2NDg2MUIxQjIxNENCLzAvOEUxNDk5RDEyMDY3RjJC
RUExMjg3QjYzNDI1RUEzQjcwRkNBRkZDMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTE0OTlEMTIwNjdGMkJFQTEy
ODdCNjM0MjVFQTNCNzBGQ0FGRkMxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzU3RDY1OTg0ODNCMEQxRTUyRTIyREZFNjdCMzdGMDNFQUUxOEEzM0FF
Q0M2RUMxQkMzNjQ4NjFCMUIyMTRDQi8wLzMxMzgzMTJlMzEzNzM0MmUzODMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzYzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALWuUjAN
BgkqhkiG9w0BAQsFAAOCAQEAExN6AWNomcGQo2SQLoneltB7Oq8d24YmnsGBaEZ4
E2bxR37w9Kf1MB5Usn2WrEWdsfOTb0EJnzyT8Ku2DHZDI8kcRoevVP9ro/Pgi5Ra
9rTxOeEs6iqWdmx6LwBitSYWVxgPHLlNXUZFSQjxJGOOxPtAAZ6S0VUrwJhfdB91
xYoEvIkDFKgA4L5i5Vl1zhAqSi7zgN+x6KPb3dKZozYuofK7paoJqIijQ8KNxHWH
Oi8d7VlbvlhYuhRY6OhmztWvM724K+psrrxNKNVT4RfC1mqJUvacS0kKQ1D+peR0
aJyJnJS3tAyxeLcjvHmY4bPItJtADohXBR5vi+itEKmfVA==
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:12 2024 by rpki-client on console-ams.rpki-client.org