Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F7AC10DF03D4997A115601963AA2A8D838C64B914027DAECEF7156C562CFD60/0/3138312e3131342e3232342e302f32312d3234203d3e203532343331.roa
File:                     3138312e3131342e3232342e302f32312d3234203d3e203532343331.roa (raw, json)
Hash identifier:          80oHXzg4Pyj0O+p9hfHO3vYBnF1mqC7mbZLDV2/UIA8=
Subject key identifier:   5B:97:F7:19:8F:68:11:F2:D8:C1:2C:7B:DB:2D:F2:F5:EE:4B:4A:3B
Certificate issuer:       /CN=3637361DE43FA7164FAE0E4817E4450F8942C23D
Certificate serial:       458D1C01EFFCDE82C1580E547960A51F2F8CC13D
Authority key identifier: 36:37:36:1D:E4:3F:A7:16:4F:AE:0E:48:17:E4:45:0F:89:42:C2:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F7AC10DF03D4997A115601963AA2A8D838C64B914027DAECEF7156C562CFD60/0/3138312e3131342e3232342e302f32312d3234203d3e203532343331.roa
Signing time:             Tue 05 Mar 2024 18:16:37 +0000
ROA not before:           Tue 05 Mar 2024 18:11:37 +0000
ROA not after:            Tue 04 Mar 2025 18:16:37 +0000
asID:                     52431
IP address blocks:        181.114.224.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F7AC10DF03D4997A115601963AA2A8D838C64B914027DAECEF7156C562CFD60/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F7AC10DF03D4997A115601963AA2A8D838C64B914027DAECEF7156C562CFD60/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 14 May 2024 15:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8d:1c:01:ef:fc:de:82:c1:58:0e:54:79:60:a5:1f:2f:8c:c1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3637361DE43FA7164FAE0E4817E4450F8942C23D
        Validity
            Not Before: Mar  5 18:11:37 2024 GMT
            Not After : Mar  4 18:16:37 2025 GMT
        Subject: CN=5B97F7198F6811F2D8C12C7BDB2DF2F5EE4B4A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:1c:2c:b5:91:56:e4:70:da:91:66:d4:85:
                    6e:69:1f:8c:85:8d:7d:6d:6b:fe:28:a8:ce:00:59:
                    b6:51:dc:48:ba:7b:a4:e7:f2:c5:5e:30:13:c0:f5:
                    51:28:79:3a:6f:08:9b:bd:ca:29:00:6f:95:76:62:
                    03:d4:71:ba:03:ef:32:a4:fe:af:dd:1a:29:6a:d1:
                    33:d8:f0:13:c5:8a:94:1f:81:e3:00:ae:44:90:7d:
                    16:7b:c6:4c:2a:4e:c0:f7:d1:c9:6e:15:2e:43:1e:
                    df:5a:54:e0:07:d4:e6:90:e5:db:ad:ff:d3:8a:0f:
                    c9:cb:a5:08:e4:3e:0f:b2:98:ee:03:db:74:8d:40:
                    ea:7c:9d:6d:c8:1b:73:db:23:bf:e8:08:e2:2b:21:
                    37:71:ee:47:7a:83:f7:f5:58:9e:0a:ac:80:78:40:
                    d5:c6:32:79:94:a0:e6:4c:03:9b:a8:be:93:c9:ae:
                    3c:a0:64:b4:36:d8:05:9f:70:bd:c7:d7:aa:d2:e3:
                    c6:c1:8e:8a:40:30:b7:76:75:03:f2:24:a2:df:17:
                    67:f9:0a:46:e0:38:84:95:a6:dc:f6:ab:8f:be:e2:
                    1f:09:11:9b:d0:84:1b:70:8e:59:7e:be:25:96:56:
                    fd:15:0b:40:47:96:2e:35:46:32:86:2a:db:c7:76:
                    07:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:97:F7:19:8F:68:11:F2:D8:C1:2C:7B:DB:2D:F2:F5:EE:4B:4A:3B
            X509v3 Authority Key Identifier:
                keyid:36:37:36:1D:E4:3F:A7:16:4F:AE:0E:48:17:E4:45:0F:89:42:C2:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F7AC10DF03D4997A115601963AA2A8D838C64B914027DAECEF7156C562CFD60/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3637361DE43FA7164FAE0E4817E4450F8942C23D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F7AC10DF03D4997A115601963AA2A8D838C64B914027DAECEF7156C562CFD60/0/3138312e3131342e3232342e302f32312d3234203d3e203532343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:bc:c2:3d:f0:2a:52:6e:d4:ab:ce:9b:45:19:83:50:4f:11:
         8e:2c:2d:be:bb:a4:c9:3e:f1:f6:7f:2e:42:dc:aa:ae:78:89:
         66:87:4d:b2:0b:f2:4f:8b:e5:ad:be:c9:4d:b2:3d:de:16:f9:
         e2:fe:2b:d2:dc:18:7e:80:c0:62:64:bc:e3:69:db:98:4f:13:
         26:90:cb:39:6e:f5:9d:29:24:b6:da:b3:f6:a8:2a:48:a7:a0:
         64:b6:df:23:f5:9f:d8:2f:96:d2:1b:c0:23:6e:91:a8:21:47:
         1c:c4:1b:d5:06:d4:4e:76:d1:71:8c:6a:9c:e1:cb:2d:d7:ca:
         bf:61:7d:07:79:ca:2f:3a:93:ec:d9:10:db:c4:08:0a:c1:ee:
         92:b3:54:76:77:ff:0c:5b:b6:2d:11:88:9c:f0:24:db:de:1c:
         49:28:ba:11:92:ca:2c:7c:26:7d:40:8e:f3:5a:54:d8:06:3d:
         05:6d:6b:ed:bd:cb:cd:80:49:e7:b0:7e:eb:ff:e0:f3:58:61:
         f3:62:73:b9:6f:c2:c4:f2:da:e5:a1:c5:12:2b:30:e1:54:a2:
         10:ed:b2:49:f6:79:9f:05:21:a9:ee:af:de:82:a1:14:7f:3a:
         ba:e0:70:14:58:75:fe:35:51:a9:f6:cc:bf:d1:1d:f2:3a:91:
         93:55:17:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:07:36 2024 by rpki-client on console-fra.rpki-client.org