Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3231302e302f32342d3234203d3e203237383935.roa
File:                     3138312e39342e3231302e302f32342d3234203d3e203237383935.roa (raw, json)
Hash identifier:          F/zfMzeZjapcJJ3rWmuqMd+QxBzu1IY0XvNbrPgUADg=
Subject key identifier:   04:69:BC:3D:91:43:8C:78:2F:5F:92:C2:FD:ED:86:34:53:D8:F1:A4
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       6953E13719F49CDB4BC48868672A1F7EC4BBCC16
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3231302e302f32342d3234203d3e203237383935.roa
Signing time:             Tue 05 Mar 2024 18:12:28 +0000
ROA not before:           Tue 05 Mar 2024 18:07:28 +0000
ROA not after:            Tue 04 Mar 2025 18:12:28 +0000
asID:                     27895
IP address blocks:        181.94.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:53:e1:37:19:f4:9c:db:4b:c4:88:68:67:2a:1f:7e:c4:bb:cc:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Mar  5 18:07:28 2024 GMT
            Not After : Mar  4 18:12:28 2025 GMT
        Subject: CN=0469BC3D91438C782F5F92C2FDED863453D8F1A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:44:a4:d3:46:0e:8c:e0:c9:2f:7f:43:58:2e:
                    c0:04:36:b2:d0:90:01:dc:04:da:98:bf:63:2c:26:
                    67:2f:ab:a9:ce:64:03:e8:91:9a:cb:45:87:e0:7e:
                    ac:6e:48:cf:16:57:23:75:80:98:1c:4e:3f:ec:9d:
                    4b:ce:53:8b:bb:b4:47:9f:16:ae:a8:eb:77:a2:cd:
                    2f:04:e0:05:06:2a:2e:fa:22:d5:f0:1b:89:b8:2a:
                    81:9f:9f:12:30:d6:96:44:12:6b:a5:c5:91:6c:ae:
                    66:69:8f:7e:0f:cb:0b:94:c5:6d:54:70:88:ef:3e:
                    6e:9c:0f:0e:c3:8a:96:c0:e4:55:e3:62:f7:5c:64:
                    68:52:83:99:3a:fd:79:0d:c3:06:79:00:be:c7:3b:
                    61:9e:76:ce:9e:b1:7c:7c:54:62:40:52:f8:4c:cb:
                    64:f9:44:84:cb:79:17:ca:b2:8d:04:24:61:9b:c3:
                    9b:96:34:02:b1:98:98:50:0d:62:d9:6e:b9:96:53:
                    76:e2:09:2c:9e:da:b7:fb:b5:a7:dd:ce:8c:6f:9a:
                    99:00:92:e4:3e:ed:13:5b:1b:37:aa:98:a3:e0:fb:
                    b0:5c:d8:f3:30:82:af:38:31:88:3a:9b:b4:2c:3b:
                    44:23:a5:d4:26:84:7c:66:46:f7:4b:5f:85:a0:93:
                    d6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:69:BC:3D:91:43:8C:78:2F:5F:92:C2:FD:ED:86:34:53:D8:F1:A4
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3231302e302f32342d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:84:89:4b:9e:65:1c:ac:ed:c3:2f:df:af:e3:c6:61:00:8c:
         f1:ed:80:53:ed:29:b3:ea:01:90:50:70:69:47:4b:ec:29:09:
         6a:0e:e4:7a:17:33:2c:bf:6d:01:94:48:af:c5:ca:e2:52:de:
         fb:b8:0c:a0:77:fa:bb:85:22:af:0f:97:3e:9c:f2:5c:73:4d:
         38:13:61:9b:63:42:c8:b5:b0:bb:db:5a:e9:97:e2:bd:25:f7:
         c1:2c:80:91:bf:2c:a3:63:6b:6e:27:b9:93:cc:c5:aa:4c:d3:
         4c:1f:f6:f9:89:1d:68:5d:d4:e4:e7:15:1f:ab:e8:eb:d3:8c:
         b3:a6:f3:04:bb:82:39:be:0a:bc:f6:ef:2e:6f:3c:91:cb:25:
         d5:4a:c0:2e:38:3d:31:2b:bc:b0:35:40:ce:e3:53:b2:ee:7d:
         26:cd:97:2b:7d:74:e6:15:b2:26:1f:84:d2:9c:ab:e8:f1:61:
         f1:02:b4:8a:fc:75:c5:d8:40:11:c0:d4:3f:a9:a4:4f:53:20:
         1d:b3:b2:55:29:d1:8d:5b:d9:5a:31:f5:66:d2:9f:6b:fe:17:
         80:9b:55:2d:e3:e8:b1:a2:30:15:ed:42:ea:43:6e:06:9a:3e:
         df:79:c8:22:8e:3d:83:0b:95:00:ea:90:0c:b9:e4:5f:54:05:
         88:d4:81:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 10:18:23 2024 by rpki-client on console-fra.rpki-client.org