Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/3138312e3232342e3139372e302f32342d3234203d3e203631343638.roa
File:                     3138312e3232342e3139372e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          vN9vH6yWE1ydMvhm6ImtrnCBcAmzQpy7A8B231fs9R8=
Subject key identifier:   CF:12:B4:FD:3C:D6:03:62:3C:90:F7:39:6B:B1:C8:3C:2A:77:4F:13
Certificate issuer:       /CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
Certificate serial:       61350D612898F0DDD29CE15EF871C2E50F0E4281
Authority key identifier: FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/3138312e3232342e3139372e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 05 Mar 2024 18:23:19 +0000
ROA not before:           Tue 05 Mar 2024 18:18:19 +0000
ROA not after:            Tue 04 Mar 2025 18:23:19 +0000
asID:                     61468
IP address blocks:        181.224.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:35:0d:61:28:98:f0:dd:d2:9c:e1:5e:f8:71:c2:e5:0f:0e:42:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
        Validity
            Not Before: Mar  5 18:18:19 2024 GMT
            Not After : Mar  4 18:23:19 2025 GMT
        Subject: CN=CF12B4FD3CD603623C90F7396BB1C83C2A774F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:c0:0e:6d:19:e6:34:4d:db:b4:87:54:23:
                    e5:24:ca:01:f1:27:3f:cd:8e:c7:34:85:10:23:46:
                    06:dc:7c:e4:41:75:82:ab:68:5c:6a:99:cb:d0:2c:
                    74:00:18:1d:e8:fc:e0:f9:c7:e6:ad:26:46:39:d9:
                    8b:a3:da:04:97:1e:e7:b3:95:b8:08:9c:a8:03:ab:
                    cc:6a:cc:54:8f:b5:31:32:ca:e0:2a:1c:45:a7:5a:
                    5a:01:3a:c4:f7:42:62:0b:10:28:a4:b1:15:bb:8a:
                    92:11:84:3e:53:d8:de:31:87:80:a2:22:ce:d2:0e:
                    ec:9f:7d:68:63:12:95:72:54:91:7a:10:ab:ca:05:
                    2a:59:69:f6:4a:20:45:4a:da:cf:c1:42:6e:89:92:
                    1e:8a:8a:15:62:ea:c7:87:b5:6f:9b:82:40:9f:a7:
                    45:f9:01:fb:d5:1e:49:ae:c9:2a:97:04:e2:41:70:
                    e8:37:82:7b:f9:c8:8d:35:11:f8:28:9b:91:3d:22:
                    1e:a0:bd:c7:cc:0c:79:28:17:7e:06:54:11:ec:63:
                    cd:a2:fc:0d:3d:c1:2f:19:f5:59:58:b1:2c:71:4d:
                    7a:c4:bf:44:73:3d:64:48:fd:7a:ed:72:6d:97:84:
                    9e:63:50:43:86:ee:39:de:48:a9:9a:d4:85:6c:08:
                    3d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:12:B4:FD:3C:D6:03:62:3C:90:F7:39:6B:B1:C8:3C:2A:77:4F:13
            X509v3 Authority Key Identifier:
                keyid:FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/3138312e3232342e3139372e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:d9:be:e4:07:59:4f:f3:de:91:a7:b7:e4:f1:e2:0b:34:8c:
         3f:d4:da:d7:35:41:53:e1:b8:c9:78:52:66:a9:14:98:88:6e:
         86:7a:19:22:6b:df:7e:b6:00:c9:61:2b:23:fc:c9:39:6d:06:
         f7:d2:ea:21:da:7f:c8:50:c7:66:86:5c:09:ef:8d:0a:67:23:
         bb:8b:e1:c7:e1:dd:f8:49:35:9a:f5:c8:f2:bc:b7:f5:99:1c:
         79:8e:9f:2d:bb:73:91:b5:29:2e:d3:d4:24:cc:fa:d0:69:17:
         cc:6e:b7:24:ef:3e:7e:d6:04:07:05:3b:60:58:e8:a9:7b:b9:
         c5:81:c3:e4:08:32:7c:75:86:eb:13:e3:28:54:0c:96:63:04:
         86:27:9f:11:61:1f:23:3b:00:86:93:71:7a:b4:37:a1:e1:b2:
         f7:aa:ee:01:65:d3:bf:6d:a0:0f:e4:14:ef:6b:24:5b:97:96:
         bf:1e:f4:08:83:fc:6c:08:33:9a:4d:7f:e2:5c:0e:0b:43:e2:
         38:14:4d:35:f9:09:56:51:d9:67:c1:3d:95:25:74:e7:f4:3a:
         6a:37:6a:eb:de:26:39:6a:73:86:88:65:0b:37:db:7c:e0:35:
         fb:cd:5b:9b:43:4f:d9:b7:0b:1d:72:58:a9:2a:a4:80:e5:ef:
         db:95:e2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org