Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/3138312e3233322e3135362e302f32322d3232203d3e20323732303632.roa
File:                     3138312e3233322e3135362e302f32322d3232203d3e20323732303632.roa (raw, json)
Hash identifier:          DToNMuM0IjIW/Uq6dEQ57ZnnCL6v9dvM0pA2jSeHoVI=
Subject key identifier:   A7:62:F3:A3:1F:AE:3E:A6:94:5F:59:60:49:EA:41:1F:A6:A1:F4:FC
Certificate issuer:       /CN=E9A5288FFD963231D7A31DF358516C1DE9044850
Certificate serial:       53339D1AB9D568812705D1DA99780366F7CBD4A9
Authority key identifier: E9:A5:28:8F:FD:96:32:31:D7:A3:1D:F3:58:51:6C:1D:E9:04:48:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9A5288FFD963231D7A31DF358516C1DE9044850.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/3138312e3233322e3135362e302f32322d3232203d3e20323732303632.roa
Signing time:             Tue 05 Mar 2024 18:12:57 +0000
ROA not before:           Tue 05 Mar 2024 18:07:57 +0000
ROA not after:            Tue 04 Mar 2025 18:12:57 +0000
asID:                     272062
IP address blocks:        181.232.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/E9A5288FFD963231D7A31DF358516C1DE9044850.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/E9A5288FFD963231D7A31DF358516C1DE9044850.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9A5288FFD963231D7A31DF358516C1DE9044850.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:33:9d:1a:b9:d5:68:81:27:05:d1:da:99:78:03:66:f7:cb:d4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9A5288FFD963231D7A31DF358516C1DE9044850
        Validity
            Not Before: Mar  5 18:07:57 2024 GMT
            Not After : Mar  4 18:12:57 2025 GMT
        Subject: CN=A762F3A31FAE3EA6945F596049EA411FA6A1F4FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:74:c1:54:ef:96:f9:b3:76:65:8d:10:49:17:
                    18:95:fe:c3:41:51:e1:63:0e:78:4d:c0:f6:21:00:
                    ea:92:5f:b3:3e:d5:5f:2a:b7:cf:f1:05:ec:09:c5:
                    b2:08:d1:91:80:14:dd:6a:9e:40:54:f0:ee:4f:b4:
                    2b:3e:74:7f:50:22:fc:9b:45:13:fa:77:dc:15:86:
                    b6:bd:59:16:a5:13:4f:8d:22:a1:34:ce:16:af:0d:
                    21:76:db:d9:82:bc:bf:6c:91:b5:e1:13:56:81:5f:
                    7f:d8:7f:8d:fe:5c:a0:8d:d8:7c:31:2c:91:f0:9f:
                    cc:b4:eb:92:6d:b4:87:9a:5c:e4:e8:b4:b4:f3:ba:
                    79:b5:aa:c3:79:4a:57:e0:d7:fa:67:68:08:f6:e1:
                    53:ab:b0:d3:44:5c:62:f0:b0:23:f9:90:5c:96:a7:
                    d1:f8:96:2a:d4:6c:c8:f7:a9:10:00:ba:03:d2:88:
                    00:85:c3:64:e0:77:f4:e8:c7:af:b1:9d:cc:2e:d3:
                    f6:f5:f1:01:6a:5f:89:40:3d:bb:ca:f8:4d:2a:06:
                    24:83:d2:70:3a:d0:71:10:36:3d:7f:d1:4e:39:47:
                    df:ba:eb:4e:f5:90:1c:9d:d8:bf:43:e8:38:59:4c:
                    74:ac:8e:df:37:2b:c7:88:07:36:34:28:f6:81:22:
                    9d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:62:F3:A3:1F:AE:3E:A6:94:5F:59:60:49:EA:41:1F:A6:A1:F4:FC
            X509v3 Authority Key Identifier:
                keyid:E9:A5:28:8F:FD:96:32:31:D7:A3:1D:F3:58:51:6C:1D:E9:04:48:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/E9A5288FFD963231D7A31DF358516C1DE9044850.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9A5288FFD963231D7A31DF358516C1DE9044850.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/3138312e3233322e3135362e302f32322d3232203d3e20323732303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:65:c0:70:05:16:fe:c1:71:f7:fc:33:7d:f2:e5:d5:c6:1b:
         5a:a0:7e:f0:5c:83:a4:f6:26:10:57:ba:20:30:9d:b4:bd:6a:
         64:fe:be:3c:a2:47:7f:12:87:2c:17:27:7a:d4:31:bc:6c:af:
         49:07:00:68:00:f1:55:db:47:4a:bd:4a:7f:53:c6:c2:d4:93:
         ea:18:4e:9f:d0:e3:00:62:7f:46:09:0d:54:4d:34:79:fe:24:
         07:71:32:7c:de:53:6e:d4:94:54:92:bd:48:49:e8:ca:b2:12:
         78:55:9c:1c:3b:19:f0:56:cd:06:2d:00:7f:2e:a0:72:71:31:
         4b:d7:b0:01:67:53:2d:87:80:ae:b1:d8:1e:bb:83:79:cd:7a:
         33:f1:c2:16:45:f1:37:c3:e4:89:56:f1:06:5f:e6:54:94:2f:
         ec:18:92:42:41:94:6a:83:8c:c6:54:b0:c2:32:e9:53:fe:ed:
         cc:c9:cc:c9:1d:ff:e5:33:d7:68:f4:c1:fa:46:be:c7:b6:83:
         1b:5c:24:0b:c3:99:77:c7:b3:ed:91:0d:fe:61:70:4f:99:d2:
         64:c7:24:5c:62:8c:bc:fd:75:a3:4d:41:17:5b:3f:23:ef:db:
         b3:6f:10:30:cd:5a:94:95:43:21:af:61:63:b9:a7:19:2a:e2:
         11:28:36:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:44 2024 by rpki-client on console-fra.rpki-client.org