Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/3138312e3232352e3134342e302f32312d3234203d3e20323632323133.roa
File:                     3138312e3232352e3134342e302f32312d3234203d3e20323632323133.roa (raw, json)
Hash identifier:          ssvVLVkD09ByLM+zLVLIcNwZIyB0l6gC8nRAPRiyqE0=
Subject key identifier:   B0:2F:E7:7A:C6:B2:0C:EA:5F:CB:BF:73:12:E7:93:ED:D0:A3:C7:AF
Certificate issuer:       /CN=D7EDF5B751B151464FD315A68BF0C47236A0E241
Certificate serial:       28534F60F732A4048FAC1B9D049C233BBE511626
Authority key identifier: D7:ED:F5:B7:51:B1:51:46:4F:D3:15:A6:8B:F0:C4:72:36:A0:E2:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/3138312e3232352e3134342e302f32312d3234203d3e20323632323133.roa
Signing time:             Tue 05 Mar 2024 17:44:52 +0000
ROA not before:           Tue 05 Mar 2024 17:39:52 +0000
ROA not after:            Tue 04 Mar 2025 17:44:52 +0000
asID:                     262213
IP address blocks:        181.225.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:53:4f:60:f7:32:a4:04:8f:ac:1b:9d:04:9c:23:3b:be:51:16:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EDF5B751B151464FD315A68BF0C47236A0E241
        Validity
            Not Before: Mar  5 17:39:52 2024 GMT
            Not After : Mar  4 17:44:52 2025 GMT
        Subject: CN=B02FE77AC6B20CEA5FCBBF7312E793EDD0A3C7AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:62:c6:40:96:64:14:1d:5f:8f:62:2e:76:a5:
                    cd:10:62:64:e0:b4:2d:8d:c5:7e:a8:c8:09:72:d1:
                    2c:15:a3:cb:4b:34:61:bb:98:67:26:45:89:69:d4:
                    b8:64:e7:7b:e5:89:41:9c:4b:00:1e:20:cd:1f:63:
                    21:86:b0:1e:6b:b5:6c:93:7c:41:a0:da:64:93:3e:
                    99:86:5e:e3:7c:ba:48:6c:3c:bc:6d:d1:9e:87:c1:
                    ac:fc:4b:95:81:e8:75:02:90:9a:da:82:ee:9f:43:
                    4b:98:a6:de:4b:a0:4f:dc:6a:35:e8:32:e7:11:ba:
                    6c:3d:e7:ef:2b:a6:4e:dd:ce:bf:6c:e2:f1:25:08:
                    70:43:6f:24:2a:da:26:fa:5e:ac:9d:87:c9:04:b9:
                    4d:36:ed:62:21:23:6e:18:5a:84:3d:bd:37:1f:86:
                    35:8c:f0:e8:34:15:db:35:e3:40:ca:3b:5b:28:4a:
                    13:b9:31:3d:ce:aa:b1:12:f6:54:ca:2d:83:86:e7:
                    0e:ba:11:9c:dd:e9:9a:e8:81:0e:cd:f5:3a:11:40:
                    da:22:e0:4c:2c:f4:1c:c7:1c:c5:5d:61:e3:c3:59:
                    6a:a7:1e:f8:21:8e:65:d5:56:8f:ab:37:cc:b0:f4:
                    b6:24:a6:46:25:f2:b5:da:a0:4c:20:67:2e:7e:1d:
                    9e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2F:E7:7A:C6:B2:0C:EA:5F:CB:BF:73:12:E7:93:ED:D0:A3:C7:AF
            X509v3 Authority Key Identifier:
                keyid:D7:ED:F5:B7:51:B1:51:46:4F:D3:15:A6:8B:F0:C4:72:36:A0:E2:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EDF5B751B151464FD315A68BF0C47236A0E241.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90A53B1AF1413E9BD5F2D66EB7AC234920B3819193F27ECDE3666B5862A284EE/0/3138312e3232352e3134342e302f32312d3234203d3e20323632323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:d8:25:6e:c2:b4:2d:45:57:eb:67:eb:ff:69:7d:17:cf:62:
         8b:10:4e:97:5b:fa:5c:0e:0e:f8:7a:a4:cb:fb:0a:b9:94:2b:
         3a:ee:1c:b5:b6:7e:1d:53:62:da:96:31:39:0f:0b:75:16:02:
         98:d8:9e:8d:b3:1a:56:ab:88:47:ce:dd:ba:63:08:b2:13:97:
         5a:29:35:f9:43:bd:47:d9:f1:57:d5:3d:57:ad:5a:54:6d:11:
         09:60:e0:df:cd:f5:58:2c:e1:37:cf:f7:18:7c:78:fd:06:a4:
         b2:83:2b:f1:d4:cb:3c:bb:63:d1:ff:bc:68:1e:3f:59:94:a4:
         68:12:db:60:97:47:3a:f8:00:69:5f:03:06:cd:1c:ad:be:1d:
         c3:69:1e:10:d2:09:ae:8e:b4:a6:0a:18:bd:4a:50:15:3c:82:
         2e:29:c0:cc:e2:3c:75:29:a1:9b:09:83:d5:92:49:5e:f5:0f:
         95:a7:dd:fd:6d:30:12:58:e4:53:63:76:ee:d9:24:71:ff:dd:
         00:f9:29:90:3c:54:84:79:19:df:d2:60:7f:24:41:7a:fc:8d:
         d7:c8:e1:b8:90:10:2d:58:b0:07:41:17:53:a6:a3:4f:55:4c:
         03:43:26:1a:26:01:c7:74:8b:3f:cf:75:4f:b2:a9:bf:b8:2c:
         41:49:db:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org