Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3231362e302f32312d3234203d3e203237383935.roa
File:                     3138312e39342e3231362e302f32312d3234203d3e203237383935.roa (raw, json)
Hash identifier:          EHUojaQHog/1eS4p0lyFx+Bbz/Qwza+vhhjeIMGefbE=
Subject key identifier:   ED:77:54:F3:39:44:8E:EA:0F:7D:E6:C3:42:3A:5A:39:2D:D4:EE:39
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       3A2508D66DCEC4319E87080B9719399EB55F765F
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3231362e302f32312d3234203d3e203237383935.roa
Signing time:             Tue 05 Mar 2024 18:12:24 +0000
ROA not before:           Tue 05 Mar 2024 18:07:24 +0000
ROA not after:            Tue 04 Mar 2025 18:12:24 +0000
asID:                     27895
IP address blocks:        181.94.216.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:25:08:d6:6d:ce:c4:31:9e:87:08:0b:97:19:39:9e:b5:5f:76:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Mar  5 18:07:24 2024 GMT
            Not After : Mar  4 18:12:24 2025 GMT
        Subject: CN=ED7754F339448EEA0F7DE6C3423A5A392DD4EE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d3:13:a3:02:00:dd:be:71:76:b3:0b:f6:5a:
                    2f:28:34:9b:f4:b9:a4:e3:f4:03:79:77:f0:01:fc:
                    2f:2b:fa:c3:ab:b9:27:e4:5e:5c:c9:ea:55:d1:62:
                    88:ae:df:e7:ce:d6:a9:e6:a7:f2:03:50:9d:2b:38:
                    c0:3f:1e:bd:a2:b4:41:ac:c9:cf:55:87:ff:4a:7c:
                    b7:df:f7:24:74:74:20:58:6b:b4:fb:0a:63:9b:44:
                    64:82:db:42:96:18:39:a2:1f:76:f8:64:1b:dc:8e:
                    9e:49:ee:de:72:fb:bd:8a:de:8e:f2:e2:e7:2a:98:
                    b0:5b:41:eb:bb:6d:92:52:a4:12:5a:c2:c6:9b:2f:
                    20:b5:fa:c0:85:91:1b:eb:6c:f3:b9:ab:9f:ef:4b:
                    c4:9b:af:18:d8:0d:63:0d:4d:80:fb:47:f7:a1:63:
                    06:80:8a:41:c4:1b:92:98:15:39:d2:43:68:38:bb:
                    c9:77:26:43:f9:30:e8:bf:a1:60:d8:54:5c:d6:95:
                    dd:c0:84:e6:1d:e8:83:5e:cf:c9:c1:f7:76:8c:d1:
                    bf:91:d3:8e:ae:be:38:71:0e:6f:c0:e0:e0:39:fc:
                    67:2b:eb:05:f9:88:d4:79:ee:d0:1e:bb:0d:cd:4c:
                    f7:22:d0:7a:f7:d0:0c:0c:1b:d4:6f:57:95:cc:7a:
                    d2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:77:54:F3:39:44:8E:EA:0F:7D:E6:C3:42:3A:5A:39:2D:D4:EE:39
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3231362e302f32312d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:d8:df:21:bd:8d:79:9e:11:b9:cb:cb:fb:21:f7:d4:3e:ec:
         ff:6a:3c:d8:f9:ab:28:d5:48:e0:7c:aa:76:f2:e3:11:94:37:
         b3:57:78:ec:eb:c6:fa:ed:04:7f:3d:dd:f7:d8:c7:c9:6d:e8:
         8b:6a:fc:ea:94:bd:97:65:ea:7e:56:f3:02:b6:aa:ac:08:7a:
         79:89:31:8b:24:4a:fc:4b:e4:05:1e:c7:5f:05:d8:bf:8d:0a:
         34:47:33:3f:4d:12:2c:be:49:60:30:bc:75:aa:d6:e7:55:c8:
         fa:fd:87:40:f7:20:ef:94:cc:77:75:90:0c:46:94:e8:57:3e:
         35:97:62:4e:ab:b5:99:d9:d3:de:5b:6c:6e:00:71:13:e8:b7:
         8c:e4:64:04:75:59:89:85:4d:5f:33:ef:3a:34:02:95:19:bf:
         37:7b:75:f0:7a:53:d0:ed:31:55:f8:68:f5:ae:72:1f:93:9e:
         23:a8:2a:65:a8:bd:fb:2d:d5:d9:fc:fc:80:07:58:79:09:b0:
         c5:2a:15:23:0f:c8:24:c8:13:13:40:77:fa:61:60:05:ab:ea:
         a5:da:46:69:64:8a:e7:04:35:b5:c4:ec:21:6e:ce:2f:e4:5c:
         4f:7d:96:07:8f:e2:c5:9d:8b:85:cc:fc:23:5d:48:dc:e1:30:
         64:3c:e2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 04:01:18 2024 by rpki-client on console-ams.rpki-client.org