Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3235302e302f32342d3234203d3e203237383935.roa
File:                     3138312e39342e3235302e302f32342d3234203d3e203237383935.roa (raw, json)
Hash identifier:          Tes0NJxjRU+5QKgLHg+voqR5PCgAmZY7kam0LlyQ+Ww=
Subject key identifier:   96:DD:A8:6C:51:CA:0C:DA:9A:A9:8B:B5:63:99:E1:61:17:FF:65:8A
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       490E698AC07DCAB0157C6CFE680EE095B06E9C7A
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3235302e302f32342d3234203d3e203237383935.roa
Signing time:             Tue 05 Mar 2024 18:12:24 +0000
ROA not before:           Tue 05 Mar 2024 18:07:24 +0000
ROA not after:            Tue 04 Mar 2025 18:12:24 +0000
asID:                     27895
IP address blocks:        181.94.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0e:69:8a:c0:7d:ca:b0:15:7c:6c:fe:68:0e:e0:95:b0:6e:9c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Mar  5 18:07:24 2024 GMT
            Not After : Mar  4 18:12:24 2025 GMT
        Subject: CN=96DDA86C51CA0CDA9AA98BB56399E16117FF658A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:92:d7:17:c3:9c:6e:ab:92:9c:a5:7a:4d:
                    b4:15:22:d4:55:5d:37:18:e2:f9:f4:3b:bd:d1:4e:
                    f6:72:f5:9a:43:6d:ec:98:00:98:78:19:83:3a:79:
                    cd:82:a7:b6:73:5b:23:42:59:6e:39:6e:96:a8:22:
                    cd:95:0d:30:c9:68:cd:fe:47:a3:60:32:a2:40:3c:
                    bc:06:51:b4:cf:70:d7:84:62:5f:ea:3b:ff:47:46:
                    9a:ec:b9:ad:48:96:d6:07:5c:19:76:f0:09:5c:01:
                    ac:08:9f:6f:20:2f:ce:84:36:cf:c0:76:b4:68:eb:
                    8c:79:bd:2c:f1:83:2c:85:95:54:0c:20:14:84:df:
                    5f:8c:fd:5f:97:20:cd:b6:83:f5:d5:b4:4d:2a:8a:
                    6e:6a:29:17:9f:fd:0b:97:0e:2a:28:d9:42:9f:f1:
                    96:37:56:81:68:03:be:b0:8e:fe:c5:4d:e6:75:6a:
                    ec:86:c1:a0:23:f6:c0:69:16:31:fb:33:4f:cc:39:
                    89:0f:82:0a:00:27:8c:57:0c:2c:c0:49:34:72:a4:
                    3b:5b:13:35:3e:4b:3b:bf:6d:25:87:6a:a3:c7:dc:
                    0c:0a:1b:33:8b:7d:56:13:29:8e:1a:a9:03:a1:d2:
                    ea:7e:bc:a4:f0:f0:3e:96:77:d1:0c:36:ce:db:55:
                    87:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DD:A8:6C:51:CA:0C:DA:9A:A9:8B:B5:63:99:E1:61:17:FF:65:8A
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3138312e39342e3235302e302f32342d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:08:b3:da:38:df:5c:cf:e4:01:31:c7:6b:64:7d:d3:c3:86:
         14:de:09:4c:ea:e6:cf:2a:64:64:e4:ca:7a:8f:bb:5a:49:08:
         5c:16:49:bd:d5:45:d9:84:82:1b:ab:4c:28:d5:01:1e:30:66:
         1a:7a:fe:53:43:32:5c:10:ad:ef:2a:4e:d6:ef:b6:8c:07:5b:
         4b:ee:dd:01:63:0d:8c:65:8f:8e:c8:bb:b7:66:9a:f4:25:fb:
         74:65:af:7b:24:f9:3a:a0:67:dc:2c:44:d0:8e:e2:95:65:a6:
         4c:86:ea:97:ea:f8:ff:03:72:20:49:db:60:e9:cc:6d:36:37:
         cc:f9:9c:9c:68:64:f8:88:fd:9d:8d:16:05:fd:22:dc:73:77:
         0a:10:5c:3d:c1:cf:20:9a:97:04:59:66:63:a7:b3:fd:29:30:
         14:cb:42:21:8d:28:31:7f:e4:0a:ff:31:6f:ab:24:39:2a:c6:
         e7:7b:fc:8c:78:41:c3:c9:22:50:03:92:aa:3b:64:5e:ea:18:
         a2:74:f1:be:c5:ae:66:d1:7f:b6:a3:1b:76:d3:d5:ee:ef:99:
         7f:92:3c:0a:0e:42:98:67:b9:9d:95:69:1f:70:4b:15:f2:00:
         f8:67:24:e3:b3:ad:91:de:40:a4:de:2c:be:05:bb:4f:1f:52:
         81:b4:f0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 18:19:40 2024 by rpki-client on console-ams.rpki-client.org