Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS10481.roa
File:                     AS10481.roa (raw, json)
Hash identifier:          /7zpCgrhZIBq4ctZu3jZFzkDILai3ed2g0wlgJc4p4k=
Subject key identifier:   CA:12:45:8E:8B:24:DC:0D:6F:65:41:EB:B0:C7:F6:A4:9E:E7:A8:3B
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       16977CF5859554E396A950D1C1F44B8EDB2D5F7E
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS10481.roa
Signing time:             Tue 05 Mar 2024 18:12:24 +0000
ROA not before:           Tue 05 Mar 2024 18:07:24 +0000
ROA not after:            Tue 04 Mar 2025 18:12:24 +0000
asID:                     10481
IP address blocks:        181.167.167.0/24 maxlen: 24
                          190.194.205.0/24 maxlen: 24
                          201.212.182.0/24 maxlen: 24
                          201.212.205.0/24 maxlen: 24
                          201.212.206.0/23 maxlen: 24
                          201.213.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:97:7c:f5:85:95:54:e3:96:a9:50:d1:c1:f4:4b:8e:db:2d:5f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Mar  5 18:07:24 2024 GMT
            Not After : Mar  4 18:12:24 2025 GMT
        Subject: CN=CA12458E8B24DC0D6F6541EBB0C7F6A49EE7A83B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:23:56:79:aa:32:82:4d:47:e3:9e:38:8f:a5:
                    2a:8e:d8:13:2a:b4:e9:b2:93:d2:6f:52:40:5a:90:
                    19:40:68:71:d4:a2:56:6c:61:a7:59:13:81:19:aa:
                    01:87:78:82:79:53:90:71:88:aa:51:39:8d:31:74:
                    37:bb:72:5b:2a:6b:01:ae:9e:76:40:43:f0:2c:ad:
                    a4:6e:a2:81:98:cc:66:3c:3a:c9:ec:fb:ec:36:48:
                    33:08:48:ec:ea:2e:c2:bc:90:2c:b5:98:bf:2c:2f:
                    fb:c3:eb:82:ed:fa:d9:f8:bb:1f:20:92:32:a6:93:
                    b4:a1:cc:4e:da:89:e7:9e:13:4e:88:17:5a:6e:00:
                    17:db:99:4c:29:2d:74:56:ad:27:67:e8:5a:f7:51:
                    a5:58:af:ad:f1:39:9d:d8:49:d1:11:b9:3e:bc:20:
                    5b:cb:77:cc:08:4a:9c:49:88:8d:58:59:9e:8c:7e:
                    ba:46:2f:cd:d1:c4:cc:b6:ee:2f:92:07:ec:b8:b6:
                    2d:6b:96:62:fa:5f:fd:1d:9d:81:d1:f7:b1:08:6d:
                    17:fa:b4:78:e4:5c:90:eb:15:ef:45:b8:1e:e6:22:
                    f3:f5:72:19:eb:9a:f8:cd:f5:69:78:f7:a6:50:fe:
                    e3:bb:13:4a:28:44:f2:b9:70:26:74:4d:55:c4:d4:
                    c6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:12:45:8E:8B:24:DC:0D:6F:65:41:EB:B0:C7:F6:A4:9E:E7:A8:3B
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS10481.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.167.167.0/24
                  190.194.205.0/24
                  201.212.182.0/24
                  201.212.205.0-201.212.207.255
                  201.213.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:26:60:f9:5c:e3:e0:d4:ef:00:36:43:49:7d:f9:a0:0e:6a:
         f0:7b:29:d7:1d:03:7b:1e:10:35:ce:01:59:55:e5:80:8c:02:
         4f:3f:07:77:43:7e:2d:17:e9:95:f5:b1:fa:1d:03:30:53:2c:
         02:d8:55:86:8d:d8:9d:d8:86:77:a1:5a:23:a9:42:a3:7f:c6:
         6a:da:0d:43:5c:f4:52:af:cd:4b:ba:dc:f3:43:34:70:e3:1c:
         bb:68:b3:68:18:a1:25:21:8e:93:b2:bb:76:8d:49:37:d9:0d:
         ac:63:72:65:4b:9a:64:27:96:5e:bb:0e:c7:54:4c:6c:5e:33:
         26:aa:4a:f6:91:99:d6:51:ae:96:49:2e:b0:c7:eb:0f:81:e2:
         9e:d0:51:00:bf:12:f5:f2:82:8e:95:5a:9b:77:af:8c:31:6a:
         5c:23:20:e6:a9:dc:16:0e:53:b0:46:55:4d:b3:cb:e8:58:f4:
         3f:d1:f8:a4:06:f4:fe:12:1d:3d:ba:be:c9:fb:52:f5:6f:95:
         78:44:62:6b:2b:ae:90:b6:11:17:ee:9b:50:94:eb:95:3c:66:
         aa:4d:1b:6c:b9:f6:49:88:c6:75:ce:21:53:63:2c:a6:94:7c:
         4d:a6:92:8b:c8:43:2f:5c:f5:04:8c:b5:b6:92:8a:bb:93:68:
         a8:7e:ea:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:47 2024 by rpki-client on console-fra.rpki-client.org