Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38342e302f32322d3234203d3e203233323433.roa
File:                     3138312e3137342e38342e302f32322d3234203d3e203233323433.roa (raw, json)
Hash identifier:          pG49FgPNbE5MHO246cRvfJS2rGC+9Yix7aLA6Ez2N/M=
Subject key identifier:   8E:9E:B8:E3:4A:92:9F:10:DF:6B:3C:EC:10:EA:C6:0A:BE:73:E3:0C
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       21CCAD92871D2D0DD42D867F2953FE684D4C7168
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38342e302f32322d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:03 +0000
ROA not before:           Tue 05 Mar 2024 17:51:03 +0000
ROA not after:            Tue 04 Mar 2025 17:56:03 +0000
asID:                     23243
IP address blocks:        181.174.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:cc:ad:92:87:1d:2d:0d:d4:2d:86:7f:29:53:fe:68:4d:4c:71:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:51:03 2024 GMT
            Not After : Mar  4 17:56:03 2025 GMT
        Subject: CN=8E9EB8E34A929F10DF6B3CEC10EAC60ABE73E30C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:e3:27:13:c2:3e:c9:e5:92:4c:61:eb:0f:
                    cb:20:87:eb:fe:ab:b2:f6:2c:de:64:e4:a3:5c:dd:
                    68:84:ed:6a:2b:e7:f1:91:ae:cd:dd:92:fe:e8:a4:
                    be:b7:73:b7:c9:54:ca:6d:45:9e:44:16:10:a1:ef:
                    1c:03:7a:3b:ff:30:6c:7c:cd:3f:3e:59:d7:af:0f:
                    24:3b:71:ee:2c:e9:74:17:a2:6c:8b:0f:b8:bc:a7:
                    19:34:67:f8:48:d7:54:97:7b:e0:dd:24:f3:50:0d:
                    f4:f1:db:b5:de:c6:a6:5d:49:5d:95:e1:71:02:f3:
                    80:85:ed:93:4c:7f:0e:f7:d6:2e:cb:ba:c5:60:10:
                    ee:33:85:5f:b8:f1:ca:a1:fa:a1:af:19:bf:9c:ae:
                    aa:a1:a4:47:ff:6a:74:76:86:bd:e7:b1:97:e9:76:
                    49:77:e2:4c:eb:5b:9c:b2:8a:00:b9:70:ac:88:59:
                    7c:42:de:71:9a:4a:99:ac:4d:27:6e:c1:68:2c:86:
                    0e:c8:01:58:5e:b6:da:7a:fd:f7:c5:56:d9:a0:a3:
                    b4:49:c1:c3:18:0e:76:70:9e:5f:15:a4:54:ea:31:
                    fe:25:39:9d:36:5e:dd:0e:7e:83:4e:f4:97:21:1b:
                    85:20:fa:8e:2d:a2:22:bc:fb:8e:dd:fc:dd:14:82:
                    98:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9E:B8:E3:4A:92:9F:10:DF:6B:3C:EC:10:EA:C6:0A:BE:73:E3:0C
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e38342e302f32322d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:3e:e7:f7:de:bf:d1:93:89:6e:85:61:03:68:9d:d8:88:6f:
         86:ee:fe:1b:61:9d:eb:bd:94:32:9a:5e:0d:e4:d0:b1:35:24:
         51:65:74:eb:77:db:2d:1f:8e:fa:48:5f:04:1c:f0:6b:f2:d1:
         e6:68:25:19:ec:bd:6d:08:62:bf:1e:ae:a0:13:ee:0e:2e:97:
         84:ef:ab:6c:d3:ff:8d:c0:31:22:a2:6a:c9:b8:76:bb:c8:df:
         8e:e8:33:2e:64:4d:c4:6a:5a:b4:74:13:ea:4f:43:36:a7:66:
         eb:fd:ce:c9:b7:51:aa:07:05:31:6e:cc:64:06:7d:29:04:f1:
         6f:5e:cc:da:42:e9:89:96:88:2b:07:d3:e6:23:b7:9c:b8:72:
         ac:4c:4c:84:1c:52:ec:14:fb:32:5a:76:79:ae:7b:ee:45:04:
         cb:51:e5:b7:e4:c9:79:1c:68:2e:e7:5e:42:c2:70:26:42:6e:
         3a:5c:92:15:6d:89:93:e6:a9:6e:7e:3e:a7:fc:6d:47:bf:f1:
         e3:92:8a:f2:12:cf:ca:90:29:7b:96:5f:81:e6:7d:f1:49:26:
         35:2f:08:82:20:93:23:66:e5:71:bd:de:6b:e6:76:93:23:fc:
         cd:df:22:03:d3:7a:75:e0:e9:86:b6:46:c1:ce:cf:c3:77:91:
         05:d8:bf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org