Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/3138312e3232342e3230382e302f32312d3234203d3e203532343332.roa
File:                     3138312e3232342e3230382e302f32312d3234203d3e203532343332.roa (raw, json)
Hash identifier:          vvHzmUst3mZ44M0263tukHaWxiqQKflhJ+Ddh0PlGms=
Subject key identifier:   D6:F0:53:92:27:2A:48:1C:4C:15:B6:DD:77:06:14:B6:A7:A1:5A:00
Certificate issuer:       /CN=C403FA78404641A71D95DA750617F0EEF3DD464B
Certificate serial:       48D38921A71C01C4BED15604610B2F50B61C3A45
Authority key identifier: C4:03:FA:78:40:46:41:A7:1D:95:DA:75:06:17:F0:EE:F3:DD:46:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C403FA78404641A71D95DA750617F0EEF3DD464B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/3138312e3232342e3230382e302f32312d3234203d3e203532343332.roa
Signing time:             Tue 05 Mar 2024 18:21:03 +0000
ROA not before:           Tue 05 Mar 2024 18:16:03 +0000
ROA not after:            Tue 04 Mar 2025 18:21:03 +0000
asID:                     52432
IP address blocks:        181.224.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/C403FA78404641A71D95DA750617F0EEF3DD464B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/C403FA78404641A71D95DA750617F0EEF3DD464B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C403FA78404641A71D95DA750617F0EEF3DD464B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d3:89:21:a7:1c:01:c4:be:d1:56:04:61:0b:2f:50:b6:1c:3a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C403FA78404641A71D95DA750617F0EEF3DD464B
        Validity
            Not Before: Mar  5 18:16:03 2024 GMT
            Not After : Mar  4 18:21:03 2025 GMT
        Subject: CN=D6F05392272A481C4C15B6DD770614B6A7A15A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d3:e0:33:46:69:19:0b:b5:55:14:1f:ce:6a:
                    d4:7a:39:46:97:8a:d8:8e:35:4f:b5:c6:38:31:89:
                    cf:27:7f:c9:a7:70:9d:e0:8a:0a:8a:8e:11:be:b8:
                    4e:66:29:6a:2a:5c:07:81:80:11:68:10:f8:44:f1:
                    85:46:94:e4:7b:dd:c3:b2:67:ba:58:fb:53:4e:84:
                    6d:b1:f9:6d:70:4f:3f:6b:5a:a4:87:85:04:7f:c2:
                    43:f3:65:f3:d1:f6:36:72:71:60:ac:e9:8b:a4:d7:
                    cb:e9:51:83:21:62:da:b9:91:62:7f:01:d8:b5:90:
                    f3:65:17:24:28:ef:36:55:b1:90:ba:c9:4f:0f:5d:
                    83:ae:db:af:89:66:e0:fb:de:96:b8:4f:97:9f:03:
                    23:dd:e9:8e:18:91:84:f6:e5:96:19:eb:80:6c:92:
                    d7:8e:85:57:ae:70:e9:f6:97:44:52:72:1b:71:95:
                    61:e1:64:94:f0:d8:6b:6c:53:2e:21:85:3a:f8:bd:
                    07:e5:e6:04:cf:5e:8f:80:85:f9:98:75:d8:ad:9b:
                    bd:c1:a5:40:96:20:21:49:70:b6:95:eb:b6:e3:61:
                    3d:40:27:4a:56:43:99:de:89:b5:1f:d9:2b:d7:8d:
                    02:93:a1:47:73:88:1a:d2:8c:c9:97:3b:9b:cb:9a:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F0:53:92:27:2A:48:1C:4C:15:B6:DD:77:06:14:B6:A7:A1:5A:00
            X509v3 Authority Key Identifier:
                keyid:C4:03:FA:78:40:46:41:A7:1D:95:DA:75:06:17:F0:EE:F3:DD:46:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/C403FA78404641A71D95DA750617F0EEF3DD464B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C403FA78404641A71D95DA750617F0EEF3DD464B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/3138312e3232342e3230382e302f32312d3234203d3e203532343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:f8:20:f1:db:26:2d:fb:de:42:11:b6:d0:be:7f:cf:db:f7:
         0f:60:6b:c0:c7:4b:4a:33:3f:1d:4b:fd:36:54:c1:1c:50:1a:
         3f:53:16:ec:db:ee:ac:bf:fc:93:2e:49:5f:94:0c:d8:b2:a7:
         bb:17:98:db:b0:ad:b3:11:2a:48:1a:12:ff:d4:7e:74:4a:fd:
         b1:fd:dd:bf:84:74:d8:c2:0c:c3:a9:d1:cb:ed:d6:2b:c5:78:
         75:85:88:51:1c:7b:45:69:07:53:e3:35:e9:2a:9d:8a:2f:15:
         d9:82:2e:13:64:a1:3d:66:58:f8:21:99:88:c7:66:81:c5:85:
         e3:37:d4:85:dd:86:fe:aa:f6:24:c7:52:6c:1b:a2:c4:9a:0c:
         7c:b3:1d:2c:c5:a1:9d:5d:1d:70:b2:0d:80:0b:d3:e7:24:90:
         c6:60:c8:06:a0:02:ad:17:bb:c3:08:95:70:bf:fc:26:1d:3e:
         3b:2c:62:72:b9:37:ff:1d:ab:e5:43:7f:35:93:3c:0f:ac:82:
         77:ee:2a:c0:49:83:d9:bb:0c:91:28:3f:83:15:9b:85:e4:fa:
         b0:bc:17:8b:5f:f7:d8:68:f2:37:70:86:a1:24:c4:d1:2b:d7:
         21:23:46:19:58:76:1a:39:79:e1:22:a5:74:c9:d1:3b:db:99:
         b1:ee:ba:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:39:55 2024 by rpki-client on console-ams.rpki-client.org