Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136392e302f32342d3234203d3e203532343638.roa
File:                     3138312e3233332e3136392e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          xu5AyUw9f0Uz0Hx9U6ffriib1lomLbYgE7vXK35FOkU=
Subject key identifier:   2F:C6:7D:06:BA:23:49:79:D3:AC:1A:95:4E:27:9E:E9:47:EE:95:D7
Certificate issuer:       /CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
Certificate serial:       6152497FA46A834CEC066EA4BB9698601BC51F1A
Authority key identifier: CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136392e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 13 Aug 2024 14:55:00 +0000
ROA not before:           Tue 13 Aug 2024 14:50:00 +0000
ROA not after:            Tue 12 Aug 2025 14:55:00 +0000
asID:                     52468
IP address blocks:        181.233.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:52:49:7f:a4:6a:83:4c:ec:06:6e:a4:bb:96:98:60:1b:c5:1f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
        Validity
            Not Before: Aug 13 14:50:00 2024 GMT
            Not After : Aug 12 14:55:00 2025 GMT
        Subject: CN=2FC67D06BA234979D3AC1A954E279EE947EE95D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f1:28:4b:8d:49:8e:c8:2d:1f:a4:38:50:a3:
                    96:99:fd:b1:fe:0f:93:e9:12:aa:3d:a6:88:ae:74:
                    9e:e0:ff:cd:c6:ca:6e:a2:e2:66:1c:0c:f9:bc:60:
                    c1:a3:1c:1d:60:46:bc:b4:33:7c:18:96:98:94:5d:
                    b2:a3:e6:73:dd:17:87:c1:1c:5e:94:a3:b2:3d:cc:
                    88:9c:63:fb:4e:c4:14:94:c5:c3:69:78:ec:40:fc:
                    b5:98:09:33:38:ab:8c:32:ea:62:9c:9d:98:cb:c0:
                    5e:a6:07:1f:74:06:da:60:5d:a5:44:6d:28:00:aa:
                    f1:cf:58:7d:68:95:d3:fd:72:2d:3e:ee:36:e1:08:
                    ce:da:53:17:c8:20:d5:fb:0d:63:ee:d7:0e:51:d0:
                    42:fd:02:d3:f2:58:58:a8:46:6c:7d:d7:52:da:ef:
                    32:e0:a5:2e:48:de:4d:71:fa:6b:4b:d2:0d:7f:5b:
                    cc:c5:fe:0b:bd:3f:ab:f3:7d:8a:3d:7b:83:7d:08:
                    bf:ee:61:2b:ba:ff:49:d6:8d:a5:a9:42:d8:00:d8:
                    d5:40:6c:5f:c3:9b:ec:ef:28:74:8f:4a:90:f9:52:
                    26:4c:74:b9:08:f3:09:0f:21:84:ba:ca:53:e9:0c:
                    b3:33:b0:c8:e7:79:a9:7f:bc:27:0d:6e:cb:05:de:
                    aa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C6:7D:06:BA:23:49:79:D3:AC:1A:95:4E:27:9E:E9:47:EE:95:D7
            X509v3 Authority Key Identifier:
                keyid:CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136392e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:a3:35:96:96:a8:dc:16:aa:40:93:d9:be:b1:58:68:e2:f3:
         08:b6:9e:18:66:a3:c6:86:4f:1c:41:4a:bd:00:6a:87:67:11:
         4b:d5:53:e8:1b:af:27:37:62:5c:d5:2e:97:a4:97:de:ad:1e:
         0b:aa:ec:0f:1a:ad:15:1d:44:d0:18:29:ac:5d:80:2c:32:47:
         0e:e7:f9:87:ff:10:1c:dd:68:88:72:4d:47:fb:23:d1:88:d7:
         ae:d2:e4:01:a8:a0:5b:fe:82:4f:5e:88:a1:1f:cd:af:c5:f7:
         4d:44:99:1a:98:6c:a6:6d:b0:10:6c:d9:02:d6:4f:26:dc:56:
         fb:a5:98:bd:aa:da:ec:d3:72:b8:77:dd:99:de:97:da:2b:36:
         03:54:b3:74:10:59:f7:25:03:4e:7b:4d:48:8a:3b:c0:45:11:
         b5:d6:8a:99:ed:a7:3b:5b:45:31:a1:66:8c:24:1d:15:58:59:
         8c:ff:cb:62:86:59:4d:22:34:fc:9a:b2:4a:1d:86:a5:6e:95:
         f0:c8:cc:bb:09:b2:ba:29:aa:a9:fa:ab:28:0c:0f:14:73:0e:
         bf:83:0e:5d:57:b3:a0:ff:bd:8b:d7:10:84:81:7e:cf:ca:95:
         a1:d1:ef:a2:14:a8:26:05:6f:52:af:36:4c:d9:aa:77:75:f6:
         34:a8:83:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org