Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138312e3232372e36342e302f31382d3138203d3e203238303234.roa
File:                     3138312e3232372e36342e302f31382d3138203d3e203238303234.roa (raw, json)
Hash identifier:          Bjpm6G2JHkzhClXZiBEJ4se6UhR0pVjcS8MyaDG/Bfs=
Subject key identifier:   F5:AD:F2:66:0D:97:90:50:41:E2:99:57:67:32:6D:30:EE:D4:C7:DA
Certificate issuer:       /CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
Certificate serial:       553AFE6D093A2A79F0304E05C8EFDE9D21B3C416
Authority key identifier: EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138312e3232372e36342e302f31382d3138203d3e203238303234.roa
Signing time:             Tue 05 Mar 2024 17:56:10 +0000
ROA not before:           Tue 05 Mar 2024 17:51:10 +0000
ROA not after:            Tue 04 Mar 2025 17:56:10 +0000
asID:                     28024
IP address blocks:        181.227.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:3a:fe:6d:09:3a:2a:79:f0:30:4e:05:c8:ef:de:9d:21:b3:c4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECBB9B9323E69E6EB7A62860914A6B29EFF11423
        Validity
            Not Before: Mar  5 17:51:10 2024 GMT
            Not After : Mar  4 17:56:10 2025 GMT
        Subject: CN=F5ADF2660D97905041E2995767326D30EED4C7DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0a:b0:d7:ad:32:26:6f:7f:80:5c:45:f9:87:
                    db:06:4e:0e:f3:fb:ad:e0:ee:ec:ba:1d:59:42:4c:
                    ec:e9:91:18:c5:06:75:91:3d:d1:62:b3:c3:4e:5f:
                    f2:0a:5b:30:8d:a7:ff:30:7d:a1:67:38:8b:01:06:
                    63:e9:ef:b8:ec:06:f3:93:d9:ab:24:e1:67:a0:c1:
                    68:49:48:f0:86:af:ac:45:49:40:9d:34:5b:28:25:
                    5f:35:f2:63:e3:2b:e2:b6:49:dc:af:bf:93:8c:6b:
                    80:22:3a:a5:1c:ae:25:30:50:42:29:7f:db:29:80:
                    00:9c:36:fa:27:45:07:27:43:0f:92:75:79:8c:24:
                    c0:9a:c1:88:ce:02:da:0a:50:82:c5:1e:82:ec:70:
                    8e:b7:34:cc:db:eb:2d:b0:b4:eb:92:f1:aa:82:9a:
                    d7:c6:31:9b:66:f4:d7:21:63:52:37:d7:fd:08:0b:
                    94:fd:e8:9e:8b:7f:af:40:30:92:14:cc:6d:70:d1:
                    97:3f:c9:30:b5:cd:4c:c5:44:51:88:e5:74:32:fe:
                    84:af:42:ec:12:84:8c:01:68:92:84:74:74:72:b5:
                    da:12:08:58:8d:8d:da:81:5c:45:c8:67:72:6e:62:
                    10:7a:2b:a0:05:e7:9c:86:9e:08:c5:52:09:93:fd:
                    12:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AD:F2:66:0D:97:90:50:41:E2:99:57:67:32:6D:30:EE:D4:C7:DA
            X509v3 Authority Key Identifier:
                keyid:EC:BB:9B:93:23:E6:9E:6E:B7:A6:28:60:91:4A:6B:29:EF:F1:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECBB9B9323E69E6EB7A62860914A6B29EFF11423.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A7B7A923AE8A4F658B52BDB9AEB6B188EC993C2A2D884DC3FB554B37F6C5B21/0/3138312e3232372e36342e302f31382d3138203d3e203238303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.227.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1d:0c:e6:5d:e0:33:7d:f5:68:b2:fe:bf:8c:05:a6:7c:9e:1a:
         9f:fc:24:c4:0e:22:e8:97:29:18:11:6e:80:52:02:4d:15:31:
         b8:2c:4a:40:2c:9c:e6:e8:78:59:e8:d3:d3:15:9a:b5:21:3c:
         f7:0c:a5:25:45:26:7c:7a:50:52:88:23:76:7e:40:b6:8c:f8:
         3f:a9:78:8c:d8:91:c7:62:f7:85:85:70:42:7b:99:39:60:ea:
         15:f4:83:3b:bf:21:77:63:ef:24:ab:b4:e8:a2:9c:58:fb:50:
         bd:cd:18:d9:2c:4e:ad:db:1e:6a:c4:b8:97:86:2e:57:14:61:
         7e:21:91:0f:48:a5:c7:aa:a2:3e:13:e3:df:69:7b:8a:c8:77:
         0d:93:c7:9b:48:11:8d:7f:13:d0:7b:ff:a9:06:24:a6:63:74:
         fd:a0:c0:1b:e5:3d:97:c7:50:71:ac:cb:19:b9:42:53:f3:78:
         12:48:23:31:f0:a4:a5:e2:cc:e7:b5:48:69:4f:fd:20:d4:ac:
         f9:fb:4f:42:88:e3:f6:6c:db:eb:df:93:5d:aa:74:25:08:8e:
         7d:70:b2:c0:ba:55:0f:7d:a7:b5:da:bf:88:e6:2a:ab:95:9e:
         9b:c0:37:b8:f4:f4:0f:3e:18:66:eb:1e:79:0f:e4:f1:c9:dd:
         80:c0:1d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 22:00:33 2024 by rpki-client on console-fra.rpki-client.org