Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/3138312e3233322e3136302e302f32322d3234203d3e20323732303634.roa
File:                     3138312e3233322e3136302e302f32322d3234203d3e20323732303634.roa (raw, json)
Hash identifier:          alTlCNCcNBuFlR7QvV7bFKWBs5nIBKhBvgXZTTgDJbg=
Subject key identifier:   43:DD:05:D6:BD:BF:03:33:47:77:DF:2E:50:97:29:FB:27:10:B7:D3
Certificate issuer:       /CN=98375F77F0F93F2A707052E2273D5F5F579A325C
Certificate serial:       4F8CA5C157AFE75F86F0433C81DE0A4488F5D465
Authority key identifier: 98:37:5F:77:F0:F9:3F:2A:70:70:52:E2:27:3D:5F:5F:57:9A:32:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98375F77F0F93F2A707052E2273D5F5F579A325C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/3138312e3233322e3136302e302f32322d3234203d3e20323732303634.roa
Signing time:             Tue 05 Mar 2024 18:19:12 +0000
ROA not before:           Tue 05 Mar 2024 18:14:12 +0000
ROA not after:            Tue 04 Mar 2025 18:19:12 +0000
asID:                     272064
IP address blocks:        181.232.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/98375F77F0F93F2A707052E2273D5F5F579A325C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/98375F77F0F93F2A707052E2273D5F5F579A325C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98375F77F0F93F2A707052E2273D5F5F579A325C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8c:a5:c1:57:af:e7:5f:86:f0:43:3c:81:de:0a:44:88:f5:d4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98375F77F0F93F2A707052E2273D5F5F579A325C
        Validity
            Not Before: Mar  5 18:14:12 2024 GMT
            Not After : Mar  4 18:19:12 2025 GMT
        Subject: CN=43DD05D6BDBF03334777DF2E509729FB2710B7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:b0:ca:b5:a7:19:18:1c:88:a1:39:51:3e:
                    f6:73:4a:43:ba:8b:da:09:70:b4:32:79:8e:16:66:
                    68:12:07:9f:d2:fc:16:f8:24:23:00:f0:89:7d:aa:
                    69:54:19:af:14:ed:c9:ce:b0:a7:a4:63:73:4e:59:
                    71:63:ab:6e:ee:ee:db:62:ba:1b:39:39:c3:58:a3:
                    cc:88:00:07:5c:22:e1:eb:ff:97:66:70:43:1b:41:
                    bd:6d:c6:19:54:a9:b9:30:72:d8:83:64:dc:ca:06:
                    ef:89:a0:fd:0d:fc:4f:30:18:1c:99:b7:93:ef:39:
                    89:b8:9e:32:fd:48:9f:67:b5:ce:b6:ad:5f:b3:e8:
                    f1:31:43:8d:ba:aa:91:38:e2:66:8f:a3:cd:dd:4b:
                    df:85:5b:e6:39:02:ce:c5:87:88:80:7a:03:d3:1f:
                    16:c8:49:22:06:1c:e2:b2:17:28:68:a9:0a:26:a4:
                    97:22:1c:85:9b:b1:be:89:e1:d7:d0:30:7f:0e:33:
                    3d:51:fb:26:5b:03:97:5a:87:da:a1:52:c1:dd:26:
                    68:8a:42:aa:8b:52:02:ba:b2:92:ca:8e:d3:04:14:
                    eb:88:91:1f:dd:82:21:26:ab:f7:16:37:e4:0b:2f:
                    78:cb:ff:e9:99:69:2e:8d:ec:27:80:da:cd:8b:e6:
                    f1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DD:05:D6:BD:BF:03:33:47:77:DF:2E:50:97:29:FB:27:10:B7:D3
            X509v3 Authority Key Identifier:
                keyid:98:37:5F:77:F0:F9:3F:2A:70:70:52:E2:27:3D:5F:5F:57:9A:32:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/98375F77F0F93F2A707052E2273D5F5F579A325C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98375F77F0F93F2A707052E2273D5F5F579A325C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/3138312e3233322e3136302e302f32322d3234203d3e20323732303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:c6:6d:5f:8b:aa:fe:26:b3:48:64:c3:8c:18:bc:0b:5d:a4:
         34:b4:b3:b0:b8:59:5d:3a:66:c2:79:a3:89:ca:f3:5a:fc:d5:
         b1:01:74:4b:ad:34:42:22:5e:1c:10:26:4b:10:28:57:3d:fe:
         78:e8:79:09:2e:a3:8a:8c:8b:0d:7c:6b:fa:3f:98:0b:64:b2:
         5d:37:90:01:a1:8f:77:40:6e:47:66:2a:76:c0:22:ae:91:f6:
         95:7a:9a:67:5a:6d:8e:eb:82:dd:1c:53:e9:74:37:be:5f:1b:
         0e:da:e1:f1:65:97:14:e6:4b:13:0a:9e:f5:00:54:b3:04:7d:
         f5:9a:d6:70:8b:38:12:06:01:24:6c:64:6c:17:9b:8c:ec:7b:
         6f:63:c4:cc:c0:2b:b5:20:38:3f:00:e0:5d:9a:75:ed:5f:69:
         d8:b0:45:e3:71:d6:33:b9:fb:b1:ee:4a:e9:fb:09:94:f2:39:
         4b:12:d1:3f:ce:d0:b9:28:6f:c9:c1:45:94:a3:f8:0b:cd:9d:
         76:38:53:24:24:3b:4a:b5:21:d2:9b:1a:78:af:c1:6e:bd:99:
         26:ba:f0:4b:cd:f5:2a:9a:20:9a:9e:74:c2:e5:31:71:80:22:
         98:08:ec:d3:20:66:31:24:02:0e:29:7f:29:7e:bf:da:49:14:
         55:ee:9a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 17:55:34 2024 by rpki-client on console-fra.rpki-client.org