Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3138312e3137372e3232342e302f31392d3234203d3e203237383433.roa
File:                     3138312e3137372e3232342e302f31392d3234203d3e203237383433.roa (raw, json)
Hash identifier:          IpxiZMmwoWFPbH42B1mS7miQdCvnI96nYdOlz6FK66Y=
Subject key identifier:   38:2E:A9:15:AB:81:F1:65:3B:37:48:74:71:98:5D:AC:3A:C7:1A:2F
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       72ABCDE11927EB29C89BA7CB2BBC79A8CEABEAD1
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3138312e3137372e3232342e302f31392d3234203d3e203237383433.roa
Signing time:             Tue 05 Mar 2024 17:44:42 +0000
ROA not before:           Tue 05 Mar 2024 17:39:42 +0000
ROA not after:            Tue 04 Mar 2025 17:44:42 +0000
asID:                     27843
IP address blocks:        181.177.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ab:cd:e1:19:27:eb:29:c8:9b:a7:cb:2b:bc:79:a8:ce:ab:ea:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Mar  5 17:39:42 2024 GMT
            Not After : Mar  4 17:44:42 2025 GMT
        Subject: CN=382EA915AB81F1653B37487471985DAC3AC71A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:e3:15:ac:b4:10:48:11:31:e2:fa:6a:a0:
                    c7:09:67:66:08:62:48:47:be:ce:38:15:45:61:70:
                    25:a2:89:ac:60:92:bc:ef:00:d5:6b:ff:cd:7a:88:
                    ec:9c:6b:46:4e:8a:66:7b:bc:c6:96:b5:7c:c6:0a:
                    42:f4:ed:f0:a9:be:b1:67:86:1c:37:32:ab:4c:81:
                    1b:79:d4:1a:2c:d0:18:91:2d:5d:78:d8:89:bd:d8:
                    1e:1d:1d:1e:c5:ee:1b:eb:d1:8b:2b:8c:eb:e0:93:
                    63:76:40:b5:c0:df:9e:81:0b:4a:39:9e:11:1d:85:
                    d9:23:35:70:a0:ef:c8:55:82:bf:85:2a:31:1d:0e:
                    5c:33:43:d4:62:1b:55:73:7f:ab:8d:29:d4:6f:f8:
                    00:70:ff:99:0a:eb:27:59:8c:2c:c7:79:73:4f:3e:
                    29:02:68:e1:55:fb:dd:21:52:12:62:ed:db:dc:78:
                    2c:0c:a1:87:63:14:c9:43:a4:33:98:94:60:52:3a:
                    d1:35:e2:fc:34:9f:c7:de:ae:f6:0e:78:8b:98:bd:
                    70:70:88:d3:ec:a8:72:11:37:8a:ed:64:70:f9:07:
                    35:66:9d:d3:a0:07:72:ef:f3:73:ea:98:e3:f2:3f:
                    eb:8f:b4:da:ad:76:f1:8a:f2:b1:df:69:1f:cd:48:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2E:A9:15:AB:81:F1:65:3B:37:48:74:71:98:5D:AC:3A:C7:1A:2F
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3138312e3137372e3232342e302f31392d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         70:fe:eb:f8:56:d5:82:cb:51:1a:2f:6e:75:16:dc:6d:eb:ec:
         63:59:99:9c:f3:1a:8b:d8:48:aa:70:eb:1e:e3:26:c6:8f:4a:
         6e:b4:84:67:bd:c9:31:70:2a:99:b3:a8:c9:d1:a8:57:fe:87:
         58:36:2f:e6:ff:88:de:b3:6f:29:d7:74:35:5e:8e:4e:bd:06:
         ce:ac:de:49:29:71:6f:4a:43:96:5f:19:ca:dc:5f:8f:e7:1a:
         6f:2f:6c:a6:93:40:c4:62:fe:c6:c0:76:d5:6c:59:ce:8d:f6:
         96:8c:bf:92:9e:97:2a:a1:b3:e9:f5:6a:b9:d7:ee:05:e2:9e:
         e7:24:1b:24:ca:94:38:b1:30:16:97:9f:f3:8b:75:f7:b2:bb:
         9b:29:ab:c0:47:5b:14:96:e7:6a:08:b2:50:ed:64:27:62:69:
         55:a8:7e:35:a9:23:d5:53:52:55:30:a7:95:d0:84:87:76:fb:
         4d:ed:3c:bf:05:ff:d7:b0:f8:11:5f:92:54:9c:fe:01:1e:04:
         81:f2:e9:22:69:33:f6:a5:52:f8:af:a0:9a:ac:d8:72:5b:91:
         bf:44:c2:80:32:6f:ef:60:7f:e4:da:bb:63:70:8f:3f:b6:11:
         fe:48:15:20:15:95:54:a5:e2:8e:3d:a8:6e:0e:06:e0:60:d8:
         66:5f:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org