Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38332e302f32342d3234203d3e203233323433.roa
File:                     3138312e3137342e38332e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          UQx5DFrANNLNgJ+2JK8nPjwKdDGkESYjVMFFwJiUEyc=
Subject key identifier:   D4:07:E8:58:46:CF:AB:4C:63:23:41:7E:DF:4A:E8:09:20:40:0E:50
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       376C49A1D3DC17CD02843BE1A1FD884B420B4FFC
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38332e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:09 +0000
ROA not before:           Tue 05 Mar 2024 17:51:09 +0000
ROA not after:            Tue 04 Mar 2025 17:56:09 +0000
asID:                     23243
IP address blocks:        181.174.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6c:49:a1:d3:dc:17:cd:02:84:3b:e1:a1:fd:88:4b:42:0b:4f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:51:09 2024 GMT
            Not After : Mar  4 17:56:09 2025 GMT
        Subject: CN=D407E85846CFAB4C6323417EDF4AE80920400E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:99:ac:96:31:eb:be:b8:25:02:bd:89:74:9c:
                    cc:a7:70:4d:f3:50:3e:52:7c:51:ae:7f:91:6e:00:
                    4e:db:ff:22:b0:a0:0b:b5:47:52:c5:25:45:5f:51:
                    bd:4c:f9:ec:a1:bb:62:d5:bb:a2:29:60:61:d6:26:
                    ce:7a:39:18:c7:90:43:ee:c7:7d:ae:81:d9:eb:45:
                    4d:ba:b3:81:d0:4e:33:ad:2d:13:5c:2b:6d:8e:f8:
                    5a:fe:55:60:c7:94:0c:ce:ac:bd:62:ec:31:08:fa:
                    a7:91:ad:ea:d5:70:4c:8e:db:e8:2d:b4:bf:71:23:
                    2e:a2:ec:5a:f0:85:f0:79:e9:a4:56:9b:f4:cc:c4:
                    53:8b:a5:16:b0:57:43:dd:a1:a6:9f:0b:0b:16:2c:
                    3b:6c:f6:7f:b7:19:b5:04:c9:a6:44:05:f8:44:37:
                    96:fc:cf:16:c7:d8:03:15:c1:e3:cf:4f:bd:eb:9c:
                    5b:08:9e:93:43:09:5f:9e:6d:51:7d:f6:fe:9b:bc:
                    f5:6e:23:0f:b1:c2:3e:57:9e:cf:de:f2:41:14:b4:
                    26:0c:7e:72:9a:e9:21:bc:62:b8:f1:6e:2a:61:7b:
                    37:5a:8c:10:7a:49:cc:7a:37:d1:f2:92:45:4f:f1:
                    cf:4b:d0:9c:3a:e4:fd:c4:0b:b4:62:f3:3f:89:be:
                    00:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:07:E8:58:46:CF:AB:4C:63:23:41:7E:DF:4A:E8:09:20:40:0E:50
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38332e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:69:99:c5:b1:c3:3a:13:8c:83:04:29:bc:85:9d:fe:0f:20:
         d5:d4:84:fc:a5:d1:2f:39:8d:71:4c:a0:b0:3f:ac:d5:6e:cf:
         76:6b:71:41:b2:51:62:b9:b7:d1:86:27:96:c0:6f:f5:66:33:
         6e:7e:dd:f5:58:cb:0c:26:32:c8:2d:47:5a:76:cb:18:04:27:
         af:d5:6a:b6:14:4a:96:12:c6:56:aa:79:59:47:5d:8a:8b:9a:
         a4:91:2a:ec:e4:19:03:c9:6b:f5:c7:8f:7c:52:09:91:56:54:
         4e:c5:f5:14:3e:86:8c:36:1e:f2:c8:1e:c0:df:74:d9:08:13:
         ae:43:74:a4:78:00:57:0b:3b:7f:e8:1d:e6:9d:41:00:9d:fc:
         f6:88:96:ab:df:b7:b0:ba:cf:a6:e4:cc:2e:12:54:b6:69:e4:
         c7:a3:9d:42:14:8d:bb:5c:8e:6c:39:8d:ac:82:b4:9a:96:16:
         1b:5d:c1:d2:6f:a4:c8:64:de:bc:5d:78:dd:57:8b:e1:f5:6e:
         69:3c:d2:1e:9b:83:2e:a0:f2:f8:0a:b6:3c:cc:7e:16:31:24:
         81:c6:2d:c7:44:63:66:53:d8:8c:45:a3:bf:1f:1b:56:b8:b3:
         8a:59:03:ed:4c:4c:62:a0:1f:6c:a3:45:d5:de:4c:b0:d5:fe:
         d3:d9:76:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:12 2024 by rpki-client on console-ams.rpki-client.org