Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3233362e302f32332d3234203d3e203237383935.roa
File:                     3138312e39342e3233362e302f32332d3234203d3e203237383935.roa (raw, json)
Hash identifier:          78pkiuEZO2FOedGg5MoS06/SPuS0fhcmbyvC9Lwl8UU=
Subject key identifier:   D6:4D:5C:36:56:F2:49:29:04:8B:04:1D:48:06:6D:80:44:50:B9:EF
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       1A164E01A5DAB59AB9CCB29D0BC4E8DB92ED6B2E
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3233362e302f32332d3234203d3e203237383935.roa
Signing time:             Tue 05 Mar 2024 18:12:25 +0000
ROA not before:           Tue 05 Mar 2024 18:07:25 +0000
ROA not after:            Tue 04 Mar 2025 18:12:25 +0000
asID:                     27895
IP address blocks:        181.94.236.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:16:4e:01:a5:da:b5:9a:b9:cc:b2:9d:0b:c4:e8:db:92:ed:6b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Mar  5 18:07:25 2024 GMT
            Not After : Mar  4 18:12:25 2025 GMT
        Subject: CN=D64D5C3656F24929048B041D48066D804450B9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:d2:f9:7b:84:a6:02:b7:3c:75:63:c9:e6:
                    db:fe:9a:00:40:11:68:9a:8d:7d:5d:33:ab:b2:98:
                    ca:98:46:5f:a1:fe:78:49:22:18:86:c6:ca:79:2a:
                    b2:88:e7:c4:46:51:9a:d4:8f:07:96:49:cf:3f:bd:
                    4c:cc:a9:85:16:bc:83:b2:ab:9f:03:23:e4:f5:19:
                    02:a6:40:81:f6:15:df:03:de:1d:94:fa:9f:be:6f:
                    e4:97:f9:0e:4a:fd:21:05:4d:70:68:02:20:45:36:
                    3a:1a:cc:23:38:72:2b:0f:14:99:0f:f7:8d:36:1b:
                    61:f9:0f:c8:51:9e:33:28:fd:8e:2f:1d:38:9f:1c:
                    3c:0a:ae:7b:c1:76:8e:0c:0a:95:78:2a:e3:87:df:
                    d6:c2:35:78:60:29:af:dc:11:01:ba:31:33:2b:51:
                    b1:41:dc:29:cb:9e:cb:36:1c:f3:90:bd:08:d3:84:
                    32:f9:4e:82:f3:63:a4:a4:34:94:1a:23:2c:82:fa:
                    53:fc:85:0c:8e:39:42:96:83:b6:03:f3:d7:25:e1:
                    41:23:91:8f:fc:52:8c:e1:58:a6:34:23:b7:82:7d:
                    b1:af:94:0c:88:25:0d:d4:78:a4:17:4a:20:f5:5d:
                    0e:76:ef:21:39:52:ce:53:da:f2:47:c0:60:7e:1b:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4D:5C:36:56:F2:49:29:04:8B:04:1D:48:06:6D:80:44:50:B9:EF
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3233362e302f32332d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:9d:35:7d:eb:0d:16:83:f5:8e:93:76:c8:0c:e2:d8:b0:f4:
         ca:1b:26:93:68:8e:a9:c9:50:60:fc:c8:76:17:24:04:1a:cf:
         73:a3:bd:d4:4d:88:b8:53:0f:98:7e:fc:a0:fe:64:a1:60:aa:
         d1:5e:ec:ca:10:58:ab:dd:26:e6:d4:64:21:b7:bd:6f:6c:af:
         cd:3f:21:d2:24:40:5d:50:4d:f8:6a:8b:9c:9f:9a:0d:cd:a7:
         64:9e:e2:91:b1:be:13:02:e0:83:54:f8:e0:65:63:01:b4:58:
         6a:c1:89:a5:2d:44:a2:49:ce:7e:6f:5c:94:43:ef:8c:24:ba:
         96:d0:97:9a:6b:1a:58:ab:db:04:8d:de:fd:53:21:3e:b2:2d:
         8a:fa:13:fe:ed:2d:3f:bb:7d:8d:4b:e5:ec:a9:fc:33:6c:a3:
         97:87:23:10:e2:79:9c:52:b3:4e:11:af:e3:7e:db:f8:cd:41:
         10:f3:8d:09:5c:ac:58:d2:87:53:3f:f7:31:91:dd:d3:ac:37:
         f5:13:09:23:c5:ad:44:87:17:4d:fa:3e:db:5b:8a:95:ef:cd:
         a4:c5:f2:38:35:74:44:5b:c8:10:48:c7:b2:58:54:4a:6a:71:
         18:f3:0e:5b:c7:bb:52:43:1e:cc:d3:25:09:ed:30:0e:1e:11:
         5d:e3:9e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 04:11:18 2024 by rpki-client on console-fra.rpki-client.org