Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138312e3232372e302e302f31382d3138203d3e203238303234.roa
File:                     3138312e3232372e302e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          18GmMbhR2ejAKarnrw3wlgm3fKeevMkcqvc0yqo69GQ=
Subject key identifier:   48:5C:E9:53:65:F9:C6:84:96:C9:AC:00:AC:AF:35:03:DF:31:AC:E2
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       552BDDEAEBCE2E3F2544AA38754A4B265C602A33
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138312e3232372e302e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:08 +0000
ROA not before:           Tue 05 Mar 2024 17:51:08 +0000
ROA not after:            Tue 04 Mar 2025 17:56:08 +0000
asID:                     28024
IP address blocks:        181.227.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2b:dd:ea:eb:ce:2e:3f:25:44:aa:38:75:4a:4b:26:5c:60:2a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:08 2024 GMT
            Not After : Mar  4 17:56:08 2025 GMT
        Subject: CN=485CE95365F9C68496C9AC00ACAF3503DF31ACE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:18:09:fc:c3:47:d2:56:19:f2:43:b3:5b:01:
                    53:7f:f4:3c:0f:d0:f1:c5:b5:4e:81:d2:70:6a:f8:
                    09:80:a0:23:da:61:c9:9c:44:72:6b:5f:db:ff:4b:
                    87:df:b4:2e:f3:bb:3f:e3:30:b1:3b:25:e0:a6:c3:
                    80:1d:ac:e8:fb:68:8e:69:d6:d9:81:36:37:1f:9b:
                    58:85:4e:91:fa:b3:81:5e:98:3d:bb:2d:6a:6e:24:
                    26:57:79:31:14:99:e6:f5:ee:86:6f:a2:46:de:83:
                    a9:c4:88:3c:39:5d:bd:d7:93:4c:a3:f9:9d:64:21:
                    f8:23:55:d9:68:2f:69:4a:2e:37:26:25:34:6f:76:
                    06:bc:a3:48:cd:9e:d1:cf:0d:59:55:96:2c:db:38:
                    af:53:7d:e7:c3:9d:0d:89:56:76:b7:51:69:6f:15:
                    60:c7:52:34:0d:8f:05:39:4f:8f:2c:e0:9e:47:5e:
                    06:eb:3c:e6:36:48:4e:81:b0:83:0d:e3:34:e5:e1:
                    fb:28:82:74:94:37:b7:a5:dd:92:0e:4e:f7:5d:4b:
                    7c:a6:4a:54:2d:1a:e6:d5:e9:30:e4:4a:34:79:3f:
                    88:ba:e0:f9:06:bc:84:4c:73:d0:94:e5:2a:75:a1:
                    70:98:75:c0:b1:33:13:81:8b:cf:f0:22:f9:38:66:
                    02:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5C:E9:53:65:F9:C6:84:96:C9:AC:00:AC:AF:35:03:DF:31:AC:E2
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138312e3232372e302e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.227.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5c:15:11:de:da:16:26:6d:b0:60:8e:63:62:05:ed:9a:67:57:
         4a:ee:81:f7:6e:5b:b7:9b:27:5d:fc:81:32:8b:d9:cd:72:8e:
         24:1c:ea:70:9a:91:4b:b8:ba:03:af:c4:ba:79:2a:b3:18:44:
         95:1b:2e:e4:aa:ba:fa:c6:93:39:da:a2:f2:bf:9c:6d:11:1c:
         7d:21:d2:7e:10:64:ef:d4:a6:34:9b:4d:08:a5:17:63:7c:c1:
         68:9b:9c:cc:14:8f:af:5e:0b:1e:7f:54:d8:37:8c:53:e4:a3:
         81:5d:4b:9d:17:39:34:bf:e7:7b:dc:63:ee:f7:70:d8:f8:88:
         c2:16:e8:f7:05:7a:77:97:a1:fb:48:59:26:d8:d4:b4:d0:39:
         9c:3d:f0:4e:51:bb:72:54:1c:91:b6:1a:95:ed:ee:04:9a:d9:
         a1:16:ff:73:f4:8c:a0:59:2d:da:4d:e4:c9:6b:c6:43:7b:88:
         30:a3:f5:e8:7e:a7:2d:d0:f0:08:a6:cb:8b:7c:03:32:09:3b:
         de:7b:15:44:20:b1:ea:70:96:ff:d4:b4:88:c2:20:48:e1:ae:
         1d:3f:4e:a8:f4:3d:e6:a2:95:e3:7c:10:2a:24:e4:33:ec:b4:
         34:a4:d8:c7:2c:18:80:14:d9:6a:a5:ac:df:dc:7e:5d:4d:53:
         3c:74:75:3e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUVSvd6uvOLj8lRKo4dUpLJlxgKjMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNCQjlCOTMyM0U2OUU2RUI3QTYyODYwOTE0QTZCMjlF
RkYxMTQyMzAeFw0yNDAzMDUxNzUxMDhaFw0yNTAzMDQxNzU2MDhaMDMxMTAvBgNV
BAMTKDQ4NUNFOTUzNjVGOUM2ODQ5NkM5QUMwMEFDQUYzNTAzREYzMUFDRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNGAn8w0fSVhnyQ7NbAVN/9DwP
0PHFtU6B0nBq+AmAoCPaYcmcRHJrX9v/S4fftC7zuz/jMLE7JeCmw4AdrOj7aI5p
1tmBNjcfm1iFTpH6s4FemD27LWpuJCZXeTEUmeb17oZvokbeg6nEiDw5Xb3Xk0yj
+Z1kIfgjVdloL2lKLjcmJTRvdga8o0jNntHPDVlVlizbOK9TfefDnQ2JVna3UWlv
FWDHUjQNjwU5T48s4J5HXgbrPOY2SE6BsIMN4zTl4fsognSUN7el3ZIOTvddS3ym
SlQtGubV6TDkSjR5P4i64PkGvIRMc9CU5Sp1oXCYdcCxMxOBi8/wIvk4ZgK1AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUSFzpU2X5xoSWyawArK81A98xrOIwHwYDVR0j
BBgwFoAU7LubkyPmnm63pihgkUprKe/xFCMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QTdCN0E5MjNBRThBNEY2NThCNTJCREI5QUVCNkIxODhF
Qzk5M0MyQTJEODg0REMzRkI1NTRCMzdGNkM1QjIxLzAvRUNCQjlCOTMyM0U2OUU2
RUI3QTYyODYwOTE0QTZCMjlFRkYxMTQyMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQ0JCOUI5MzIzRTY5RTZFQjdB
NjI4NjA5MTRBNkIyOUVGRjExNDIzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0E3QjdBOTIzQUU4QTRGNjU4QjUyQkRCOUFFQjZCMTg4RUM5OTNDMkEy
RDg4NERDM0ZCNTU0QjM3RjZDNUIyMS8wLzMxMzgzMTJlMzIzMjM3MmUzMDJlMzAy
ZjMxMzgyZDMxMzgyMDNkM2UyMDMyMzgzMDMyMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa14wAwDQYJ
KoZIhvcNAQELBQADggEBAFwVEd7aFiZtsGCOY2IF7ZpnV0rugfduW7ebJ138gTKL
2c1yjiQc6nCakUu4ugOvxLp5KrMYRJUbLuSquvrGkznaovK/nG0RHH0h0n4QZO/U
pjSbTQilF2N8wWibnMwUj69eCx5/VNg3jFPko4FdS50XOTS/53vcY+73cNj4iMIW
6PcFeneXoftIWSbY1LTQOZw98E5Ru3JUHJG2GpXt7gSa2aEW/3P0jKBZLdpN5Mlr
xkN7iDCj9eh+py3Q8Aimy4t8AzIJO957FUQgsepwlv/UtIjCIEjhrh0/Tqj0Peai
leN8ECok5DPstDSk2McsGIAU2WqlrN/cfl1NUzx0dT4=
-----END CERTIFICATE-----
Generated at Mon May 20 22:10:28 2024 by rpki-client on console-ams.rpki-client.org