Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234312e302f32342d3234203d3e203237383935.roa
File:                     3138312e39342e3234312e302f32342d3234203d3e203237383935.roa (raw, json)
Hash identifier:          QBlHgSNG1Iifs8hahe2znLJob85BOHtTbubO5PdO6Zk=
Subject key identifier:   3D:94:64:78:73:FE:3D:88:1F:0E:33:CE:4F:86:B4:D5:BC:BA:6E:F7
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       389FF889097E3CF611072A32B4A3BB1FD4F0217A
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234312e302f32342d3234203d3e203237383935.roa
Signing time:             Tue 05 Mar 2024 18:12:29 +0000
ROA not before:           Tue 05 Mar 2024 18:07:29 +0000
ROA not after:            Tue 04 Mar 2025 18:12:29 +0000
asID:                     27895
IP address blocks:        181.94.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9f:f8:89:09:7e:3c:f6:11:07:2a:32:b4:a3:bb:1f:d4:f0:21:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Mar  5 18:07:29 2024 GMT
            Not After : Mar  4 18:12:29 2025 GMT
        Subject: CN=3D94647873FE3D881F0E33CE4F86B4D5BCBA6EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:05:64:22:50:66:df:99:49:84:44:6c:85:
                    02:2d:d6:09:f5:d3:6e:fb:ce:64:44:57:99:49:c6:
                    c7:c5:6f:99:ec:e6:98:5b:57:7a:bb:7a:2d:72:64:
                    04:f1:46:9f:d5:5a:9a:45:5a:33:c0:92:12:d0:54:
                    ab:bd:28:a2:30:5c:02:23:05:98:fc:a0:9b:10:7c:
                    98:ae:b5:74:b7:fc:b4:c4:9f:0e:3d:f4:5d:71:6c:
                    86:2d:09:1a:59:1b:61:9b:78:60:17:11:f7:61:54:
                    55:23:68:d2:6b:c5:8d:70:78:7a:17:4b:74:87:13:
                    d3:37:04:49:f4:9e:79:ea:a2:2f:ba:36:de:6f:64:
                    26:5d:12:e5:3a:bb:a2:8a:53:ae:f5:71:d2:b1:0b:
                    5a:58:cf:df:e1:c0:3d:89:c9:d1:97:dc:6b:f2:41:
                    f9:60:09:7f:ee:71:33:7b:a6:83:b5:a3:1b:0f:19:
                    50:f1:84:97:16:f4:53:89:66:12:01:7f:5a:93:16:
                    a0:ee:b8:62:e1:17:1d:a6:3c:03:e3:59:b2:78:f9:
                    73:48:8c:15:72:90:61:e8:3a:2e:1a:41:d0:d6:36:
                    75:a5:ec:18:0b:2b:5a:b7:d0:85:f9:1b:93:02:24:
                    72:c9:21:ff:b5:0e:8a:f8:8c:fd:6b:67:35:44:8f:
                    5c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:94:64:78:73:FE:3D:88:1F:0E:33:CE:4F:86:B4:D5:BC:BA:6E:F7
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3234312e302f32342d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:da:9e:81:b2:e2:c9:9c:1c:6b:3b:ab:60:e0:ab:83:0d:30:
         d1:a3:39:db:e0:c0:60:53:35:7c:6a:74:40:c4:df:75:e8:e4:
         38:ba:6a:45:9a:6e:9e:c7:ab:9a:24:fe:00:62:53:60:98:d0:
         e8:b7:bd:7a:1f:c2:33:38:b5:e0:5c:35:29:88:17:91:7c:36:
         9d:96:33:5d:45:b7:60:44:ae:e7:9f:68:da:23:6c:63:53:32:
         35:d9:9d:6e:17:e7:a3:2a:ac:1a:5c:57:2e:bb:19:61:83:ff:
         ef:1f:00:06:0e:3a:74:3f:83:ff:24:17:d1:ed:4f:fa:d0:e0:
         08:51:9f:ef:78:33:69:23:7d:34:f8:03:30:25:7a:d6:c1:98:
         9e:88:f3:d1:b6:d8:32:a2:28:23:b6:76:0c:44:0f:f8:6c:af:
         9f:6a:48:12:67:a7:cb:c6:92:e7:cb:0d:e3:c9:df:b4:49:d9:
         40:88:6f:7d:c5:7f:b9:33:91:88:62:5b:c6:0f:1c:80:22:08:
         fe:50:42:e1:a8:4e:69:32:f6:1a:f5:49:8e:40:64:03:80:09:
         c0:58:c6:52:2f:82:c1:a9:88:e4:4c:4b:6e:df:21:d7:0c:bd:
         42:01:07:c1:b1:87:71:ad:8c:a3:47:1d:64:40:71:c5:9e:db:
         16:0f:38:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 04:01:18 2024 by rpki-client on console-ams.rpki-client.org