Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e3130332e302e302f32302d3234203d3e203237383935.roa
File:                     3138312e3130332e302e302f32302d3234203d3e203237383935.roa (raw, json)
Hash identifier:          86dIpHVZsb9h3LS2yq0Vey/3lzjsJYiEO8CXc0RazMo=
Subject key identifier:   70:CD:41:E9:C0:49:98:39:DF:1B:F4:B6:37:AE:DC:14:AA:29:03:08
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       156F1BB97C47ECC22F0EDCAFACB4245B171BCDB9
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e3130332e302e302f32302d3234203d3e203237383935.roa
Signing time:             Mon 07 Oct 2024 13:15:00 +0000
ROA not before:           Mon 07 Oct 2024 13:10:00 +0000
ROA not after:            Mon 06 Oct 2025 13:15:00 +0000
asID:                     27895
IP address blocks:        181.103.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6f:1b:b9:7c:47:ec:c2:2f:0e:dc:af:ac:b4:24:5b:17:1b:cd:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Oct  7 13:10:00 2024 GMT
            Not After : Oct  6 13:15:00 2025 GMT
        Subject: CN=70CD41E9C0499839DF1BF4B637AEDC14AA290308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:e4:e2:b1:e0:4f:bd:56:29:f4:aa:15:f5:
                    ea:e0:6c:f1:a7:e1:06:fb:2b:34:04:37:e6:13:6e:
                    c3:63:48:32:85:ad:0d:01:b0:ec:98:05:45:ee:9b:
                    49:20:2b:76:9c:b0:a8:55:fa:7d:5d:e0:bf:ac:9a:
                    7f:d5:4b:3d:4c:3f:f3:e7:37:31:75:77:46:6d:ab:
                    7a:fc:8c:85:51:bf:98:b5:c4:ed:62:84:49:8f:41:
                    50:8c:d4:f3:5b:8b:d7:d7:ca:f7:c8:6f:68:a3:12:
                    d3:a1:0d:e8:33:a8:09:79:13:b0:b5:88:a2:9b:f0:
                    c7:80:34:17:d1:a0:3c:83:57:bf:14:38:de:ce:39:
                    d7:a7:32:9c:44:0a:06:af:0b:e9:82:19:d7:9c:31:
                    55:7b:1d:27:73:db:16:65:8d:a7:a5:cb:6b:c3:de:
                    f7:6e:6c:c9:e0:b6:24:e5:19:fc:64:91:cf:05:e2:
                    4f:bc:9e:c2:a0:92:63:fd:ca:f1:2d:9e:e8:1d:84:
                    28:c3:a2:37:78:84:7e:8a:af:8e:9f:66:ff:11:41:
                    38:9e:2b:32:44:b5:2e:5e:c3:b8:8a:6b:cf:93:06:
                    9c:60:e4:dd:a9:c9:ad:1f:d5:c1:98:fd:f1:a0:c4:
                    d0:73:c5:1b:40:3e:2f:fa:42:0f:89:60:99:f4:c5:
                    70:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CD:41:E9:C0:49:98:39:DF:1B:F4:B6:37:AE:DC:14:AA:29:03:08
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e3130332e302e302f32302d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.103.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:0d:05:0a:dd:79:aa:38:cd:91:66:57:91:73:2f:4c:45:4b:
         56:10:9f:56:69:8c:37:0b:fb:af:c4:be:65:5f:4f:4f:f2:40:
         89:9b:5e:8d:77:57:1f:66:46:93:39:aa:d1:30:8a:f5:48:60:
         7f:ce:b1:5e:9d:f4:2e:0b:27:ae:8f:fe:22:cf:6e:06:ad:17:
         5b:79:bc:51:9b:3d:11:ef:04:db:fc:c7:24:08:72:0e:23:ea:
         44:b3:24:e0:dc:8a:c3:05:4a:c2:ea:78:66:21:c7:2a:8c:2b:
         f8:1d:e5:b2:80:e6:4c:af:9d:cf:f7:c9:3c:d0:5d:f5:8c:81:
         3e:eb:72:2e:63:0d:b2:de:39:62:b6:08:e3:67:82:07:5a:b7:
         86:00:9d:4d:72:1b:25:f9:d1:53:72:c3:9d:a5:be:64:e8:c2:
         3a:e9:0d:63:2e:75:54:6f:65:bd:b7:ca:d5:ba:c3:56:fe:9f:
         ee:e7:be:0a:96:90:36:67:56:ef:02:41:25:46:a0:01:5d:44:
         3c:3b:7c:30:26:bd:b9:ec:dd:4a:9c:41:a8:6d:ea:fc:a1:56:
         09:4b:2f:17:00:d3:1d:65:90:4d:99:1f:ea:5a:14:1a:ad:e3:
         7f:53:61:3c:72:0b:9e:33:98:04:8d:a8:14:4e:70:52:49:3d:
         5e:22:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 04:01:18 2024 by rpki-client on console-ams.rpki-client.org