Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3230382e302f32332d3234203d3e203237383935.roa
File:                     3138312e39342e3230382e302f32332d3234203d3e203237383935.roa (raw, json)
Hash identifier:          3DNLDkD1wtvqFkhcUlbbpvdaZPNuTWNFbDdYcnzR8rc=
Subject key identifier:   EF:84:FB:03:26:56:82:1B:6F:6B:C9:04:C2:C6:94:56:FE:86:46:70
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       18BFB24DFBC32F9AC5FBD103E25F2833BCB47C2A
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3230382e302f32332d3234203d3e203237383935.roa
Signing time:             Tue 05 Mar 2024 18:12:27 +0000
ROA not before:           Tue 05 Mar 2024 18:07:27 +0000
ROA not after:            Tue 04 Mar 2025 18:12:27 +0000
asID:                     27895
IP address blocks:        181.94.208.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bf:b2:4d:fb:c3:2f:9a:c5:fb:d1:03:e2:5f:28:33:bc:b4:7c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Mar  5 18:07:27 2024 GMT
            Not After : Mar  4 18:12:27 2025 GMT
        Subject: CN=EF84FB032656821B6F6BC904C2C69456FE864670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:d5:84:d5:f0:bf:a7:84:ea:65:0e:ff:6b:
                    b4:6b:1b:04:fe:57:6b:0c:73:2d:52:9c:d6:d2:58:
                    07:e5:1f:18:08:00:c5:89:52:a4:9e:c9:07:8e:ac:
                    48:6e:b7:a9:fb:42:2f:50:b4:68:41:6b:e7:7b:ab:
                    55:3a:d6:e5:14:1c:87:b4:96:e1:3b:17:8d:b3:8b:
                    91:91:35:59:bc:e6:db:da:83:95:3a:5f:9f:07:35:
                    50:8d:1e:f4:b3:e0:da:96:03:09:d6:d7:aa:d1:79:
                    36:d3:8b:63:78:b1:b9:53:1d:50:02:c1:ed:ad:ec:
                    8e:ea:3f:1d:21:e5:af:48:6b:7b:65:98:88:5c:3b:
                    fd:2f:20:8f:66:8c:8c:54:bb:8e:28:8f:de:e0:30:
                    fa:0c:1e:57:7a:bf:36:5b:26:9f:81:0e:12:51:fa:
                    97:8a:e8:84:ae:97:5e:e9:ec:a2:e7:bd:f6:af:9e:
                    1e:a9:00:c6:de:02:58:a2:26:a2:a0:6a:d6:fd:c8:
                    b9:44:d0:71:0e:b5:41:6c:88:50:9b:24:0f:48:93:
                    e8:0b:21:bf:b9:00:ea:bb:e4:f8:9d:7a:84:c0:df:
                    38:50:a1:68:0c:fd:74:83:45:a6:79:1a:7f:c0:8d:
                    22:49:54:44:ba:b0:bc:73:b9:92:4c:40:41:4e:ef:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:84:FB:03:26:56:82:1B:6F:6B:C9:04:C2:C6:94:56:FE:86:46:70
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3230382e302f32332d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:d5:83:1d:b1:00:c5:01:04:88:ea:83:2b:93:d1:99:9a:56:
         49:76:2a:82:fc:4f:52:42:9e:66:57:09:64:03:eb:45:fa:8f:
         75:60:6b:aa:03:fe:f9:0e:7e:e9:fd:f2:6d:fe:8a:5c:36:39:
         53:5c:46:ec:1f:12:b6:da:8b:d1:9f:a0:bd:8f:48:8c:76:d7:
         8c:51:20:cb:9f:dc:c7:1b:c0:15:b4:56:40:5b:de:03:27:49:
         f8:78:6d:c7:6e:3f:47:88:88:60:8e:94:a3:c0:e8:4b:da:0d:
         36:bf:d5:36:2a:3b:8d:c3:d1:af:7c:df:6c:8c:1b:d3:02:86:
         c0:cb:e2:d9:f0:ba:75:d2:39:b3:c9:54:1a:79:e8:67:c9:81:
         f5:76:58:ae:b5:4f:4c:67:34:45:c3:22:05:a5:15:b1:ba:d6:
         90:79:3a:ba:4a:b1:5a:8e:c7:74:08:37:70:70:d5:f4:5a:11:
         7a:18:bc:52:91:c4:13:d8:07:bd:20:33:16:25:76:a4:df:36:
         b4:d3:b3:8b:20:0f:be:c5:a5:b8:72:3b:38:ec:33:4c:d6:0f:
         af:f8:0e:1e:62:81:30:14:06:3e:b7:9c:c4:b2:b4:1b:9e:7f:
         2c:f7:29:50:25:e5:39:5a:b9:2a:b5:d9:d4:49:ea:c7:63:fd:
         28:5c:9a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 04:11:18 2024 by rpki-client on console-fra.rpki-client.org