Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79A27E1196FA95D4C3D8DD62DD291D52A5626166A63F08E1922E1B178D3D13C9/0/3138312e3232342e38382e302f32322d3234203d3e20323732303332.roa
File:                     3138312e3232342e38382e302f32322d3234203d3e20323732303332.roa (raw, json)
Hash identifier:          Iqvc8NvGNFufEyG7ijA3rM24vsNb/uFRSq2AoXBNkno=
Subject key identifier:   76:B4:DB:13:60:2A:1F:D1:3A:F4:98:8C:B1:11:2E:10:92:30:68:FD
Certificate issuer:       /CN=A206280FCDDB6713A419CE151BBCC866BF4C0AE0
Certificate serial:       750CD4A4B4450E326E6AFA68732FF3A9285CD4AF
Authority key identifier: A2:06:28:0F:CD:DB:67:13:A4:19:CE:15:1B:BC:C8:66:BF:4C:0A:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A206280FCDDB6713A419CE151BBCC866BF4C0AE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79A27E1196FA95D4C3D8DD62DD291D52A5626166A63F08E1922E1B178D3D13C9/0/3138312e3232342e38382e302f32322d3234203d3e20323732303332.roa
Signing time:             Tue 05 Mar 2024 17:55:57 +0000
ROA not before:           Tue 05 Mar 2024 17:50:57 +0000
ROA not after:            Tue 04 Mar 2025 17:55:57 +0000
asID:                     272032
IP address blocks:        181.224.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79A27E1196FA95D4C3D8DD62DD291D52A5626166A63F08E1922E1B178D3D13C9/0/A206280FCDDB6713A419CE151BBCC866BF4C0AE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79A27E1196FA95D4C3D8DD62DD291D52A5626166A63F08E1922E1B178D3D13C9/0/A206280FCDDB6713A419CE151BBCC866BF4C0AE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A206280FCDDB6713A419CE151BBCC866BF4C0AE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0c:d4:a4:b4:45:0e:32:6e:6a:fa:68:73:2f:f3:a9:28:5c:d4:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A206280FCDDB6713A419CE151BBCC866BF4C0AE0
        Validity
            Not Before: Mar  5 17:50:57 2024 GMT
            Not After : Mar  4 17:55:57 2025 GMT
        Subject: CN=76B4DB13602A1FD13AF4988CB1112E10923068FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b8:56:58:1c:ff:fa:76:a4:50:99:12:41:dc:
                    33:69:61:14:9a:30:40:0c:35:19:01:9c:e7:31:ba:
                    07:26:54:91:da:cc:c9:55:c6:1b:a0:8e:5e:6c:83:
                    2d:b2:02:35:8a:82:5d:8c:b9:d9:0e:be:43:df:0d:
                    b7:94:bf:75:22:a7:b1:28:07:d2:db:15:5a:eb:a7:
                    e4:5d:12:98:17:dc:a3:f0:de:f9:a6:49:53:93:14:
                    90:43:5b:bb:30:98:1f:c7:27:35:bd:60:ad:0e:6d:
                    9d:ab:17:7c:a5:dc:ea:f5:37:df:69:2a:d5:6d:46:
                    db:cf:9c:bb:02:54:ca:95:70:63:12:27:cd:48:92:
                    53:e0:c0:5e:ef:59:63:f5:98:b3:a7:84:99:14:bc:
                    0a:f0:63:3e:59:5a:ae:c6:e2:8b:86:cd:b7:39:94:
                    b9:8c:04:78:cf:28:3b:c0:5b:2d:65:b6:f1:29:f5:
                    a7:61:1f:47:7f:42:75:12:3b:8e:a8:91:a1:b2:e0:
                    e5:20:44:ac:1c:a4:4e:1d:fd:d1:57:f1:a4:e5:e1:
                    27:1d:d2:0b:e4:9f:0d:99:05:4e:fb:74:d7:07:13:
                    a8:5b:e8:26:2d:e9:41:81:56:d4:fd:dd:7f:d4:85:
                    6a:3f:52:69:01:42:a3:2b:45:0c:bd:2e:24:f2:a1:
                    32:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B4:DB:13:60:2A:1F:D1:3A:F4:98:8C:B1:11:2E:10:92:30:68:FD
            X509v3 Authority Key Identifier:
                keyid:A2:06:28:0F:CD:DB:67:13:A4:19:CE:15:1B:BC:C8:66:BF:4C:0A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79A27E1196FA95D4C3D8DD62DD291D52A5626166A63F08E1922E1B178D3D13C9/0/A206280FCDDB6713A419CE151BBCC866BF4C0AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A206280FCDDB6713A419CE151BBCC866BF4C0AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79A27E1196FA95D4C3D8DD62DD291D52A5626166A63F08E1922E1B178D3D13C9/0/3138312e3232342e38382e302f32322d3234203d3e20323732303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:b8:3e:ec:d3:1d:78:60:5a:ec:6f:f6:17:97:8e:c4:80:d8:
         73:bc:e5:e2:79:91:31:b8:99:b9:b8:d9:a2:87:42:17:cc:ba:
         f9:fe:e2:2c:9e:d2:f6:46:6d:45:ef:01:11:b3:b3:9d:ec:6e:
         55:aa:88:df:c0:64:77:11:92:db:ed:21:95:7d:ca:65:83:bf:
         0c:6c:53:d4:3b:f4:c9:81:3b:f5:ec:e0:ea:56:20:69:9f:82:
         04:d8:08:ea:c2:f6:19:0f:b2:20:67:ba:49:d1:45:2a:13:00:
         5a:44:1d:ba:ef:d1:56:3e:b7:d9:56:db:32:81:44:90:59:22:
         6c:94:0d:90:df:14:77:19:ff:17:2d:fa:04:83:f4:62:41:18:
         c4:20:04:4f:4e:b5:9f:be:93:04:0d:46:9b:90:54:8a:96:43:
         c7:7a:2a:de:79:d2:ac:33:ac:7c:6f:c4:7a:f5:ed:82:9a:28:
         70:aa:54:b7:f7:03:44:c4:0d:0d:2b:ab:87:db:ae:d1:16:2a:
         16:c9:e8:3b:4a:2b:a2:d8:58:3f:10:2e:67:1a:3e:4d:2b:df:
         cb:4b:09:0e:ac:1f:f1:64:ef:b3:8b:28:39:6c:52:8d:ae:48:
         0b:8b:cb:1d:f7:27:ad:a6:f7:ba:e5:9d:7d:bc:57:ae:af:7e:
         a4:82:fa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org