Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e39322e302f32342d3234203d3e203233323433.roa
File:                     3138312e3137342e39322e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          mf7elT5OMbNA+r1tuK6+cP0n616TOBCKQ1Zr6qbS1Gw=
Subject key identifier:   F6:02:28:C3:B3:52:7E:82:45:13:C6:96:70:B9:DA:DB:25:29:28:8B
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       3E70F424C2A2AC091D0820CD1EDA346AB5129E63
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e39322e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:07 +0000
ROA not before:           Tue 05 Mar 2024 17:51:07 +0000
ROA not after:            Tue 04 Mar 2025 17:56:07 +0000
asID:                     23243
IP address blocks:        181.174.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Sep 2024 07:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:70:f4:24:c2:a2:ac:09:1d:08:20:cd:1e:da:34:6a:b5:12:9e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:51:07 2024 GMT
            Not After : Mar  4 17:56:07 2025 GMT
        Subject: CN=F60228C3B3527E824513C69670B9DADB2529288B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f8:f6:5f:1a:88:a6:cb:1a:c3:ef:0c:e0:1c:
                    9d:60:1c:f8:e1:6b:c5:3f:a7:eb:4b:b8:c4:a9:09:
                    b6:44:97:ab:2d:78:f9:9e:c0:2e:d0:11:a0:12:f8:
                    e3:aa:03:ba:de:10:31:3b:4b:5c:90:fc:ba:ac:ee:
                    af:ac:8f:38:87:44:85:da:9f:0e:b7:9c:7e:78:aa:
                    e2:b0:0a:42:d5:d7:5f:41:1d:6b:d8:a4:83:68:07:
                    31:30:f4:11:e1:28:c0:0a:82:eb:5f:08:3c:f2:35:
                    03:bf:df:d1:22:a8:ba:a2:d3:82:e0:dd:92:69:44:
                    75:c6:b4:9f:84:9c:4f:75:e4:a6:eb:1e:2a:55:59:
                    fc:97:e8:b7:f5:97:cc:71:b7:80:74:0d:a9:10:ba:
                    3e:64:a9:c1:c9:f3:76:bb:ec:93:15:2a:ae:bf:78:
                    98:a4:1f:63:b6:3f:69:53:77:0a:2c:f7:fd:47:89:
                    05:87:c2:7a:0d:45:54:af:94:3c:3b:16:11:52:da:
                    07:a9:81:6f:eb:69:20:26:55:e4:92:cc:56:a7:e8:
                    a5:51:b0:17:be:b9:63:d0:29:ac:55:55:dd:9a:b4:
                    b6:86:32:8b:52:2f:86:d4:0d:f4:1d:7b:86:0a:bc:
                    0e:a2:a1:f0:b0:5d:b3:41:ad:c8:eb:7b:ac:81:a9:
                    03:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:02:28:C3:B3:52:7E:82:45:13:C6:96:70:B9:DA:DB:25:29:28:8B
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e39322e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:b4:23:3e:a0:48:32:1f:24:1c:2a:eb:eb:fe:95:81:3e:33:
         40:97:87:3d:25:8b:52:4d:b2:e4:ef:8b:c2:2e:c1:d9:85:62:
         f3:50:92:80:cf:ff:6b:a8:12:f4:a7:ec:b9:b1:33:3a:c3:e5:
         ca:7f:9f:e6:a5:bc:e4:44:30:47:7d:47:52:43:e4:f2:06:3c:
         fd:82:1a:af:20:cb:5f:af:65:29:80:1e:ef:4b:14:78:25:3c:
         85:dc:0d:d7:21:ea:45:d1:bb:6d:9f:53:64:2b:7e:f3:af:d0:
         02:69:85:5d:e9:c7:f9:1f:a1:dd:95:bc:d7:48:c9:50:34:ab:
         3c:f3:0c:1f:b7:36:0c:38:b2:35:52:51:45:50:76:37:e2:44:
         08:57:a9:92:db:eb:71:3a:b0:cc:d4:9d:49:d6:57:b3:f0:af:
         87:5e:2b:c4:5f:c5:76:fe:a6:b1:e5:6e:bc:a0:4d:21:ca:4e:
         1d:d2:34:c6:f7:11:bf:74:56:d0:4b:50:94:72:31:40:8d:c8:
         e1:e3:09:8c:3b:e5:8e:26:4f:34:5e:f8:c7:94:20:c1:be:f0:
         e7:b5:6b:84:3b:12:f5:ac:83:d2:a7:b0:ae:d7:30:6a:9a:92:
         71:90:f2:86:da:61:b3:34:13:cf:86:c1:bd:50:55:df:89:e4:
         1b:03:ec:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 17:46:17 2024 by rpki-client on console-fra.rpki-client.org