Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3138392e3133342e302f32332d3234203d3e203233323433.roa
File:                     3138312e3138392e3133342e302f32332d3234203d3e203233323433.roa (raw, json)
Hash identifier:          RjFv3vK79IOW8gvQLd5p7rmgv+sAZgeEPuJFgwE3FiA=
Subject key identifier:   95:99:F6:53:9D:7E:CE:C0:56:B6:73:C7:7A:CE:EE:70:28:EA:ED:1F
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       0969699199C2429B1478C3F84D6790A8D203B75F
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3138392e3133342e302f32332d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:55:59 +0000
ROA not before:           Tue 05 Mar 2024 17:50:59 +0000
ROA not after:            Tue 04 Mar 2025 17:55:59 +0000
asID:                     23243
IP address blocks:        181.189.134.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:69:69:91:99:c2:42:9b:14:78:c3:f8:4d:67:90:a8:d2:03:b7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:50:59 2024 GMT
            Not After : Mar  4 17:55:59 2025 GMT
        Subject: CN=9599F6539D7ECEC056B673C77ACEEE7028EAED1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:3c:32:ce:45:6f:ba:dd:44:31:ab:0b:0d:
                    e5:5b:3f:b2:0f:78:96:7c:1f:96:57:62:d3:1b:f4:
                    22:0d:6c:db:7b:d9:02:62:7e:df:1f:a7:72:be:7f:
                    1e:24:77:3b:79:0f:35:e4:d6:ef:ee:cb:12:5f:6e:
                    4f:84:fb:42:0c:da:d1:09:ca:ed:a8:52:86:60:cd:
                    6c:85:ea:6e:ff:d3:2d:62:58:f4:28:e1:5a:96:64:
                    e6:e7:8c:e6:8a:44:a8:89:7d:3a:c1:3c:50:3a:e0:
                    2b:2f:8e:9d:11:84:73:10:12:15:12:86:4a:40:69:
                    5e:27:25:1b:3a:d4:9a:aa:cd:44:a1:75:2a:8d:8b:
                    ab:0f:82:c8:f8:ad:18:e0:bd:92:c7:b8:f1:5c:04:
                    2c:49:e7:13:26:5d:92:b8:e4:55:b7:95:0a:f1:20:
                    fa:41:6a:f3:93:c1:a1:ee:98:da:93:63:a1:18:e9:
                    19:a2:36:4a:22:e8:02:5d:c6:e9:9d:42:60:01:5b:
                    a2:10:3b:2c:67:0c:a0:2f:0a:9f:02:d4:52:f7:ba:
                    24:51:63:ee:8e:a7:0d:71:d6:0a:1f:7d:45:2f:29:
                    3e:94:63:28:bf:c4:29:33:67:4c:ed:1e:85:b3:48:
                    b0:60:c8:85:88:9a:7e:d4:c3:98:1b:a4:a6:a7:df:
                    9a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:99:F6:53:9D:7E:CE:C0:56:B6:73:C7:7A:CE:EE:70:28:EA:ED:1F
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3138392e3133342e302f32332d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:34:96:42:31:39:33:f5:43:ce:45:02:dc:b5:f8:bf:d4:ec:
         8a:a5:b9:7e:e0:0f:56:5a:5a:67:6e:4e:59:de:7e:1c:52:ab:
         9c:9b:d9:75:58:94:82:fb:58:ed:cd:e6:33:2e:54:57:66:6c:
         79:ec:ff:ee:c3:60:48:ed:df:d5:cf:b5:a9:a4:ed:d8:c4:23:
         55:1e:d8:f5:f6:e3:0b:bb:17:1e:75:8a:8a:20:81:e2:81:41:
         c8:86:06:4b:63:d3:43:a1:b5:80:67:b7:0a:68:7d:2c:2d:7b:
         90:e5:bc:33:77:93:ae:48:6d:08:ac:b4:34:ff:ff:ea:6a:31:
         9f:d3:4e:41:23:18:08:83:3b:6e:b5:64:7f:00:96:e9:83:0c:
         2a:89:9c:74:13:42:60:37:4c:b9:2d:73:df:4a:90:a9:2e:d3:
         b7:3a:6c:7c:93:6a:37:2c:8f:66:34:ac:d2:c3:7f:94:c7:2b:
         af:69:8a:6f:99:78:83:f2:30:2e:b9:99:d7:ab:82:60:c3:75:
         70:3f:4b:0c:bd:b7:fa:c9:57:26:2f:ab:d0:31:b6:11:64:89:
         65:3b:12:09:f8:b3:f3:ce:85:25:41:38:59:cd:2e:cc:62:2f:
         4e:4b:92:ff:84:1a:2f:85:3a:cf:6f:8d:2f:84:f0:3e:32:d8:
         15:15:e5:86
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCWlpkZnCQpsUeMP4TWeQqNIDt18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxNDk5RDEyMDY3RjJCRUExMjg3QjYzNDI1RUEzQjcw
RkNBRkZDMTAeFw0yNDAzMDUxNzUwNTlaFw0yNTAzMDQxNzU1NTlaMDMxMTAvBgNV
BAMTKDk1OTlGNjUzOUQ3RUNFQzA1NkI2NzNDNzdBQ0VFRTcwMjhFQUVEMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9czwyzkVvut1EMasLDeVbP7IP
eJZ8H5ZXYtMb9CINbNt72QJift8fp3K+fx4kdzt5DzXk1u/uyxJfbk+E+0IM2tEJ
yu2oUoZgzWyF6m7/0y1iWPQo4VqWZObnjOaKRKiJfTrBPFA64Csvjp0RhHMQEhUS
hkpAaV4nJRs61JqqzUShdSqNi6sPgsj4rRjgvZLHuPFcBCxJ5xMmXZK45FW3lQrx
IPpBavOTwaHumNqTY6EY6RmiNkoi6AJdxumdQmABW6IQOyxnDKAvCp8C1FL3uiRR
Y+6Opw1x1goffUUvKT6UYyi/xCkzZ0ztHoWzSLBgyIWImn7Uw5gbpKan35rxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlZn2U51+zsBWtnPHes7ucCjq7R8wHwYDVR0j
BBgwFoAUjhSZ0SBn8r6hKHtjQl6jtw/K/8EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NTdENjU5ODQ4M0IwRDFFNTJFMjJERkU2N0IzN0YwM0VB
RTE4QTMzQUVDQzZFQzFCQzM2NDg2MUIxQjIxNENCLzAvOEUxNDk5RDEyMDY3RjJC
RUExMjg3QjYzNDI1RUEzQjcwRkNBRkZDMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTE0OTlEMTIwNjdGMkJFQTEy
ODdCNjM0MjVFQTNCNzBGQ0FGRkMxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzU3RDY1OTg0ODNCMEQxRTUyRTIyREZFNjdCMzdGMDNFQUUxOEEzM0FF
Q0M2RUMxQkMzNjQ4NjFCMUIyMTRDQi8wLzMxMzgzMTJlMzEzODM5MmUzMTMzMzQy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMzMzIzNDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBtb2G
MA0GCSqGSIb3DQEBCwUAA4IBAQCWNJZCMTkz9UPORQLctfi/1OyKpbl+4A9WWlpn
bk5Z3n4cUqucm9l1WJSC+1jtzeYzLlRXZmx57P/uw2BI7d/Vz7WppO3YxCNVHtj1
9uMLuxcedYqKIIHigUHIhgZLY9NDobWAZ7cKaH0sLXuQ5bwzd5OuSG0IrLQ0///q
ajGf005BIxgIgztutWR/AJbpgwwqiZx0E0JgN0y5LXPfSpCpLtO3Omx8k2o3LI9m
NKzSw3+UxyuvaYpvmXiD8jAuuZnXq4Jgw3VwP0sMvbf6yVcmL6vQMbYRZIllOxIJ
+LPzzoUlQThZzS7MYi9OS5L/hBovhTrPb40vhPA+MtgVFeWG
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org