Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39312e38342e302f32322d3234203d3e203237383935.roa
File:                     3138312e39312e38342e302f32322d3234203d3e203237383935.roa (raw, json)
Hash identifier:          OLktBSWwJf7VBSCsyzFiy1oOUctTUjM9Iua31uy3JIY=
Subject key identifier:   7A:DF:35:58:48:78:46:62:23:D8:4E:99:9D:BF:DA:63:50:8C:04:70
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       58898DA7C8E4F16EDEC10ACC38682132D20B5BD4
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39312e38342e302f32322d3234203d3e203237383935.roa
Signing time:             Tue 05 Mar 2024 18:12:29 +0000
ROA not before:           Tue 05 Mar 2024 18:07:29 +0000
ROA not after:            Tue 04 Mar 2025 18:12:29 +0000
asID:                     27895
IP address blocks:        181.91.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:89:8d:a7:c8:e4:f1:6e:de:c1:0a:cc:38:68:21:32:d2:0b:5b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Mar  5 18:07:29 2024 GMT
            Not After : Mar  4 18:12:29 2025 GMT
        Subject: CN=7ADF35584878466223D84E999DBFDA63508C0470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:a5:84:01:1e:28:16:41:63:45:f8:5e:c9:
                    79:57:46:2a:b2:ca:c4:33:1a:b5:13:78:a9:c0:81:
                    8a:34:f7:2a:7c:84:85:76:59:e9:fe:26:f3:4b:b1:
                    e9:df:ac:34:05:32:48:9f:68:9c:e9:5d:36:46:3c:
                    05:f2:6f:71:7d:85:7c:ed:38:e8:d6:f2:d7:17:1f:
                    94:d8:50:f4:a8:a4:bf:e0:ca:aa:ed:c4:47:0b:be:
                    40:1c:c7:36:48:7e:b0:9f:8c:3a:42:86:9c:47:0d:
                    91:60:ef:37:78:ac:24:5e:8c:08:c2:a9:9c:3d:8a:
                    d7:61:9b:de:3f:2c:f7:5d:71:ed:12:7f:3a:74:f5:
                    6e:d2:cb:3d:39:d7:df:f2:86:ac:4b:6b:f8:91:0f:
                    17:32:7b:06:2f:5d:b8:63:7e:52:e8:fa:37:48:76:
                    cc:e0:1d:3d:a5:da:94:f9:d8:50:93:43:f7:ab:18:
                    f5:5c:b8:59:9a:a6:c8:b8:a5:6e:2c:b9:8f:7a:ca:
                    8a:61:f8:78:f1:f3:4e:62:1e:1b:50:79:c4:15:61:
                    0b:13:a4:73:da:e6:33:5b:15:aa:c2:02:1b:b6:fc:
                    56:19:5c:f8:c6:bd:a0:8b:4b:cd:48:68:ec:da:80:
                    3c:1a:af:4a:7e:e8:74:4a:be:44:14:06:fc:1a:56:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DF:35:58:48:78:46:62:23:D8:4E:99:9D:BF:DA:63:50:8C:04:70
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39312e38342e302f32322d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.91.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:a7:8a:f9:d4:a1:df:e3:39:8b:99:19:93:08:a4:05:66:35:
         b7:bb:73:c2:4c:e7:fa:b5:ca:e8:4a:62:e9:04:c5:b7:76:e0:
         12:e4:bb:1b:54:a1:8f:b6:b3:a4:5f:af:b2:2a:1c:0f:59:70:
         05:22:a0:82:c3:52:22:ed:7a:c3:2c:16:f3:48:ca:e2:a1:10:
         31:ae:74:26:40:f7:d8:bd:2b:14:ba:de:93:cd:d1:81:a8:3f:
         53:30:22:08:6a:fd:93:66:62:74:b4:1f:24:65:99:14:bf:8d:
         06:cf:58:92:d6:95:a1:de:49:34:1a:bd:1a:d1:7b:35:d5:51:
         d2:67:76:29:fd:e7:68:ae:99:dc:43:82:cc:51:eb:b8:f3:5c:
         91:63:41:59:6f:25:f8:fd:02:21:d9:c4:85:d3:28:a2:f6:61:
         60:9b:01:47:09:f1:42:80:3c:6a:47:ac:13:6a:6f:9f:99:21:
         78:04:10:48:77:7a:8a:d1:ec:61:bb:09:9e:3e:28:6f:59:36:
         ea:7f:9d:18:03:4a:f9:c5:e0:e3:d0:07:b6:18:6a:c5:97:5b:
         d8:89:22:60:48:35:52:0c:4f:60:ac:8f:e4:ba:65:85:f2:34:
         91:fb:d6:30:4b:23:a6:18:a9:af:4e:9b:29:1c:0b:c4:86:a8:
         f1:38:d1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 04:01:18 2024 by rpki-client on console-ams.rpki-client.org