Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3138392e3133332e302f32342d3234203d3e203233323433.roa
File:                     3138312e3138392e3133332e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          L2Ot6mWqMVe/3kOiChS/vpPu6/3iYq9CUFBxM9mqEw4=
Subject key identifier:   7D:25:C1:34:AC:CB:FA:66:35:BA:9E:01:DB:4A:81:6B:0D:62:56:B7
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       242544DCA64246D58E9700F4078EB4D9CDD65B89
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3138392e3133332e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:05 +0000
ROA not before:           Tue 05 Mar 2024 17:51:05 +0000
ROA not after:            Tue 04 Mar 2025 17:56:05 +0000
asID:                     23243
IP address blocks:        181.189.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Sep 2024 07:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:25:44:dc:a6:42:46:d5:8e:97:00:f4:07:8e:b4:d9:cd:d6:5b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:51:05 2024 GMT
            Not After : Mar  4 17:56:05 2025 GMT
        Subject: CN=7D25C134ACCBFA6635BA9E01DB4A816B0D6256B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:56:c4:9c:a0:0c:9a:40:3a:a7:60:19:0e:b3:
                    79:34:9e:63:36:75:ef:8b:83:4e:13:d0:49:1b:49:
                    da:c2:5c:f5:36:21:03:e0:3f:b2:c9:5e:db:ae:b7:
                    d8:0e:ab:47:ca:54:7f:54:ee:ed:0c:85:19:9d:40:
                    03:ff:73:cb:12:53:27:44:56:f6:70:d7:9f:03:55:
                    0e:d7:86:ca:d3:57:82:21:00:57:8b:10:12:9c:da:
                    73:37:85:f6:0f:cd:8d:69:05:cb:30:47:2b:2d:d4:
                    72:a4:b5:6c:ac:aa:96:88:f8:c5:53:64:53:4c:eb:
                    a8:b5:cd:d1:99:25:75:16:2f:16:4f:64:ea:e7:39:
                    62:bf:2e:63:95:29:bc:c5:60:03:cf:9d:d0:af:d2:
                    62:51:e1:2c:e3:7b:36:68:8a:cc:1c:63:20:41:b2:
                    37:3f:1f:87:2d:77:75:5a:06:cb:70:76:ce:fd:ae:
                    46:64:28:20:40:ec:15:2f:74:98:c3:99:b1:6f:d3:
                    1e:a4:35:84:b1:a2:fa:9d:36:6a:1a:93:66:19:f5:
                    64:2f:5d:b0:b1:f1:bb:2b:f0:ca:2a:88:74:49:f1:
                    fe:86:60:e9:28:92:77:ec:1a:c0:f4:c3:3b:ad:3f:
                    50:1c:8d:3d:4b:ad:ca:1c:87:68:59:9f:42:6a:ce:
                    d2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:25:C1:34:AC:CB:FA:66:35:BA:9E:01:DB:4A:81:6B:0D:62:56:B7
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3138392e3133332e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:87:f7:6e:e5:1b:04:2b:ec:7b:29:da:34:84:3e:f8:22:40:
         87:2b:0a:7e:0c:79:3f:72:ed:c6:bf:1b:f0:9b:a0:56:03:9c:
         9f:55:75:fd:44:18:e0:b9:76:ce:9f:ef:d0:8d:af:e5:17:c8:
         84:7a:6a:01:14:25:d1:de:14:e6:51:8a:ae:b2:76:82:60:e8:
         5d:41:77:a6:ef:2e:0a:5a:11:cf:e4:a2:c8:6e:87:d1:f3:57:
         bf:d7:01:c9:ca:3e:26:e6:95:49:bd:97:da:95:85:f0:e5:17:
         49:dc:c3:12:e0:dc:d7:78:5f:af:35:a4:05:3e:25:4c:b4:e0:
         9d:86:e2:76:c2:71:d3:a2:f3:e3:c6:70:68:bc:8f:b8:97:eb:
         03:76:b7:34:6d:dd:20:52:ec:48:85:a7:cd:af:02:c8:16:07:
         37:8a:0f:37:3f:2a:6f:69:89:0f:c1:70:57:2f:28:c5:77:aa:
         8c:f0:8e:9a:7f:74:55:5e:a4:f4:fc:92:ca:fc:31:b1:59:90:
         cd:8b:4d:63:c2:2a:7c:ea:db:45:65:94:9a:73:ac:e1:2b:e9:
         a9:dc:1e:c3:5a:4c:f8:c6:e5:79:0e:51:2c:5e:0c:68:61:46:
         fa:a3:02:66:9d:45:05:ad:10:4d:0b:d7:7b:10:bb:76:e0:88:
         3b:0c:18:85
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJCVE3KZCRtWOlwD0B4602c3WW4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxNDk5RDEyMDY3RjJCRUExMjg3QjYzNDI1RUEzQjcw
RkNBRkZDMTAeFw0yNDAzMDUxNzUxMDVaFw0yNTAzMDQxNzU2MDVaMDMxMTAvBgNV
BAMTKDdEMjVDMTM0QUNDQkZBNjYzNUJBOUUwMURCNEE4MTZCMEQ2MjU2QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVsScoAyaQDqnYBkOs3k0nmM2
de+Lg04T0EkbSdrCXPU2IQPgP7LJXtuut9gOq0fKVH9U7u0MhRmdQAP/c8sSUydE
VvZw158DVQ7XhsrTV4IhAFeLEBKc2nM3hfYPzY1pBcswRyst1HKktWysqpaI+MVT
ZFNM66i1zdGZJXUWLxZPZOrnOWK/LmOVKbzFYAPPndCv0mJR4SzjezZoiswcYyBB
sjc/H4ctd3VaBstwds79rkZkKCBA7BUvdJjDmbFv0x6kNYSxovqdNmoak2YZ9WQv
XbCx8bsr8MoqiHRJ8f6GYOkoknfsGsD0wzutP1AcjT1Lrcoch2hZn0JqztKTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfSXBNKzL+mY1up4B20qBaw1iVrcwHwYDVR0j
BBgwFoAUjhSZ0SBn8r6hKHtjQl6jtw/K/8EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NTdENjU5ODQ4M0IwRDFFNTJFMjJERkU2N0IzN0YwM0VB
RTE4QTMzQUVDQzZFQzFCQzM2NDg2MUIxQjIxNENCLzAvOEUxNDk5RDEyMDY3RjJC
RUExMjg3QjYzNDI1RUEzQjcwRkNBRkZDMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTE0OTlEMTIwNjdGMkJFQTEy
ODdCNjM0MjVFQTNCNzBGQ0FGRkMxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzU3RDY1OTg0ODNCMEQxRTUyRTIyREZFNjdCMzdGMDNFQUUxOEEzM0FF
Q0M2RUMxQkMzNjQ4NjFCMUIyMTRDQi8wLzMxMzgzMTJlMzEzODM5MmUzMTMzMzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMzMzIzNDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtb2F
MA0GCSqGSIb3DQEBCwUAA4IBAQCTh/du5RsEK+x7Kdo0hD74IkCHKwp+DHk/cu3G
vxvwm6BWA5yfVXX9RBjguXbOn+/Qja/lF8iEemoBFCXR3hTmUYqusnaCYOhdQXem
7y4KWhHP5KLIbofR81e/1wHJyj4m5pVJvZfalYXw5RdJ3MMS4NzXeF+vNaQFPiVM
tOCdhuJ2wnHTovPjxnBovI+4l+sDdrc0bd0gUuxIhafNrwLIFgc3ig83PypvaYkP
wXBXLyjFd6qM8I6af3RVXqT0/JLK/DGxWZDNi01jwip86ttFZZSac6zhK+mp3B7D
Wkz4xuV5DlEsXgxoYUb6owJmnUUFrRBNC9d7ELt24Ig7DBiF
-----END CERTIFICATE-----
Generated at Thu Sep 5 18:04:43 2024 by rpki-client on console-ams.rpki-client.org