Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3233322e302f32322d3234203d3e203237383935.roa
File:                     3138312e39342e3233322e302f32322d3234203d3e203237383935.roa (raw, json)
Hash identifier:          b7tBZCXojb7lXQ1OE8bG3gT2BJTjzR/R4SEFvKpN6YA=
Subject key identifier:   BC:EB:BB:7C:A0:8F:DD:D8:E6:1A:5D:F7:E4:14:64:86:6F:4B:8A:41
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       34034C3B8AF22AD9CA61BC011FE91E62DE093E77
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3233322e302f32322d3234203d3e203237383935.roa
Signing time:             Tue 05 Mar 2024 18:12:28 +0000
ROA not before:           Tue 05 Mar 2024 18:07:28 +0000
ROA not after:            Tue 04 Mar 2025 18:12:28 +0000
asID:                     27895
IP address blocks:        181.94.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:03:4c:3b:8a:f2:2a:d9:ca:61:bc:01:1f:e9:1e:62:de:09:3e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Mar  5 18:07:28 2024 GMT
            Not After : Mar  4 18:12:28 2025 GMT
        Subject: CN=BCEBBB7CA08FDDD8E61A5DF7E41464866F4B8A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4e:30:f1:2d:0a:63:0f:78:4b:34:b0:dc:bb:
                    53:e5:ed:8b:f0:ea:50:51:fa:38:c3:08:96:e7:96:
                    b2:eb:7f:94:0f:97:4d:a2:40:00:f6:e3:8d:47:eb:
                    5b:83:fe:ad:ac:83:62:46:60:51:67:0f:f6:28:0a:
                    00:fb:f8:10:5a:32:a5:46:58:96:43:3d:e2:7d:51:
                    7f:cb:55:38:d5:4e:ba:5f:4a:f3:bc:7a:8e:93:02:
                    66:78:81:16:9a:eb:cb:11:d4:bf:2b:86:2a:84:a7:
                    73:fd:9c:ad:76:c4:b9:7d:14:24:67:ae:5c:0e:39:
                    4c:df:04:c8:7f:b7:06:9e:c8:da:37:f1:56:08:6a:
                    43:1d:64:7a:d6:38:cf:14:60:b7:4a:57:05:c8:6a:
                    1e:5f:c0:a0:1a:12:d6:d6:49:97:4a:46:d5:8a:56:
                    96:4d:4c:f0:f3:c4:6d:e7:63:ca:62:73:70:fe:0a:
                    68:31:dd:77:e4:6a:d1:80:5e:01:e7:bc:39:fa:6e:
                    79:a8:3b:32:59:fb:f0:98:2b:94:6e:fa:94:9c:54:
                    30:c1:4d:01:0c:55:3e:32:0e:49:0e:3b:0a:19:9e:
                    f6:5b:ee:4f:2c:1d:e1:97:f4:5c:ae:ac:59:6f:9e:
                    40:1b:ac:bd:fa:da:6d:2f:54:31:05:35:8b:05:5f:
                    a3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EB:BB:7C:A0:8F:DD:D8:E6:1A:5D:F7:E4:14:64:86:6F:4B:8A:41
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3233322e302f32322d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:b5:65:63:ba:f9:25:63:83:e4:84:ac:a3:17:c0:2b:94:59:
         f4:a0:9c:08:59:14:23:f3:ce:8a:52:d3:34:b3:48:c5:35:7d:
         3e:58:ac:f4:f7:65:0d:fa:ab:ed:3c:fb:64:da:d3:e4:86:9c:
         4c:09:f6:9c:22:8c:bf:50:fa:e4:5e:70:4a:d8:dc:a3:ca:b6:
         42:77:6a:d7:59:ab:f7:38:b5:f4:c9:4b:43:66:80:54:65:02:
         99:c2:7d:d6:20:f3:8e:b4:00:ce:69:f9:6a:60:d1:d3:f7:d3:
         4d:c0:e0:bf:a6:ec:59:66:c9:56:ed:8e:86:25:e1:25:1f:f9:
         14:31:f9:ee:d8:07:2b:47:54:f9:39:24:ba:a7:e1:8e:e0:15:
         af:25:24:27:bd:61:38:c4:a5:a8:97:ac:fa:ee:1e:90:fe:f3:
         26:c0:8e:1f:bd:91:cd:c4:f2:a0:5b:9e:0a:a8:0f:31:2c:08:
         70:99:b0:e9:e6:e3:c6:3b:5e:bd:34:f9:b1:25:5b:dc:5a:fa:
         a3:13:f1:5d:69:c9:15:5c:47:47:88:7b:cc:5b:96:96:d1:b1:
         d0:b7:d4:ac:77:ba:c0:fb:e2:7f:46:d0:6f:9c:6b:a9:21:d6:
         d2:a6:d5:3c:5e:45:52:f4:72:36:4e:cb:96:0a:38:e8:75:e0:
         f1:5b:4d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 04:01:18 2024 by rpki-client on console-ams.rpki-client.org