Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3138312e3131352e302e302f31372d3234203d3e203134373534.roa
File:                     3138312e3131352e302e302f31372d3234203d3e203134373534.roa (raw, json)
Hash identifier:          u4Pnob2Ut7CQCLrQvTEsul2UAPDT2h5ne0b0vva5VnI=
Subject key identifier:   8D:05:0D:FC:0A:2F:2D:F1:45:67:A5:D1:FB:74:76:70:99:EA:60:A7
Certificate issuer:       /CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
Certificate serial:       5FAF90DEB2162C85087F9482AC492C4F0E7E2FC9
Authority key identifier: 78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3138312e3131352e302e302f31372d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 18:05:57 +0000
ROA not before:           Tue 05 Mar 2024 18:00:57 +0000
ROA not after:            Tue 04 Mar 2025 18:05:57 +0000
asID:                     14754
IP address blocks:        181.115.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:af:90:de:b2:16:2c:85:08:7f:94:82:ac:49:2c:4f:0e:7e:2f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
        Validity
            Not Before: Mar  5 18:00:57 2024 GMT
            Not After : Mar  4 18:05:57 2025 GMT
        Subject: CN=8D050DFC0A2F2DF14567A5D1FB74767099EA60A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:09:2e:db:90:44:7a:29:a1:50:e8:d9:d8:ed:
                    51:e4:6b:28:c8:43:07:f3:f5:68:42:9f:e2:cc:ce:
                    9a:10:92:b2:f3:c2:5c:c1:5f:e9:57:5b:20:d1:a4:
                    68:e7:a5:09:5c:ba:86:ed:ae:ae:e2:a1:9f:3b:8e:
                    fb:22:93:0e:48:bd:11:75:8a:c3:76:6c:86:9c:05:
                    df:4f:f4:66:59:f1:a6:e9:ad:c3:42:fa:f6:4b:42:
                    a5:e4:cd:8f:2b:85:27:92:53:bb:5c:5d:85:e6:1b:
                    05:5d:50:35:ba:b4:7a:22:21:da:7f:2d:34:86:68:
                    96:97:b7:b2:47:74:a6:82:10:28:49:3f:4e:62:27:
                    87:1b:63:bf:83:13:87:01:99:7c:a8:14:5f:4b:8a:
                    72:91:be:1a:69:4a:bb:16:87:55:6c:37:13:c6:15:
                    a5:8b:2c:48:c0:0f:4c:87:ab:1c:61:09:7d:ff:44:
                    3f:2d:58:0b:0e:3a:dc:d9:5c:41:db:2d:86:bd:87:
                    88:d3:24:74:3c:4f:d9:d3:e2:03:88:93:51:16:49:
                    35:98:7a:f7:73:f4:33:ae:5c:e9:a3:c4:e1:18:46:
                    ef:9b:01:50:15:92:20:bb:2f:f5:5d:a5:8d:17:3a:
                    1d:f0:6d:6a:e3:cc:f5:b7:e3:09:04:a2:af:38:9a:
                    f7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:05:0D:FC:0A:2F:2D:F1:45:67:A5:D1:FB:74:76:70:99:EA:60:A7
            X509v3 Authority Key Identifier:
                keyid:78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3138312e3131352e302e302f31372d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.115.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         68:93:d0:de:36:a0:1b:e5:de:d4:2c:5c:80:de:e3:6e:b4:25:
         61:3b:9d:ce:36:1f:f7:40:f9:d7:6a:21:92:19:a2:0e:8c:86:
         2d:0c:c9:97:2d:3c:f0:4c:1e:5e:39:af:45:1b:75:bf:9d:da:
         3b:1c:00:02:2a:55:6b:98:22:d3:1c:83:a6:86:20:f8:db:78:
         bd:b1:ef:75:52:26:5e:80:eb:e8:bc:ae:b5:15:aa:95:a4:b8:
         c1:73:e2:ef:21:ca:97:72:86:77:23:39:71:c7:c7:10:52:b9:
         b1:d2:d6:2e:30:44:f9:53:53:06:6c:b6:9b:69:2a:28:18:01:
         01:bc:15:c4:c7:ad:24:10:65:62:fe:f5:41:02:59:69:02:31:
         2e:d8:f6:13:c2:fe:fd:bd:da:25:90:3b:43:3f:a4:84:42:e0:
         11:bb:a6:94:50:f5:f3:17:f2:f7:90:48:1c:ec:3f:dd:23:1a:
         e5:32:db:bf:7d:af:83:a5:59:c6:95:a3:87:bd:af:f8:b3:f0:
         08:2c:0e:38:b7:75:7f:f3:84:e3:47:5a:c3:b1:f2:4d:cf:f1:
         36:c8:cb:54:2d:5a:3a:3f:a3:9b:9e:dc:b2:dd:57:a5:48:1e:
         2d:fe:53:09:ed:28:22:54:ac:53:09:ac:6c:1e:f5:f4:82:ea:
         9d:ec:a1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org