Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/3138312e3233322e3135382e302f32332d3233203d3e20323732303632.roa
File:                     3138312e3233322e3135382e302f32332d3233203d3e20323732303632.roa (raw, json)
Hash identifier:          ySRwQkaTQXi4vlGHsNW1BVeQYeZv8s/XKrJ/kcuCYWI=
Subject key identifier:   34:C7:9B:7B:A4:20:D8:66:85:B2:AC:C3:F6:60:B4:FA:14:E2:3A:36
Certificate issuer:       /CN=E9A5288FFD963231D7A31DF358516C1DE9044850
Certificate serial:       76F99ECFC70E8DBD3A3405732FA7175241687F8D
Authority key identifier: E9:A5:28:8F:FD:96:32:31:D7:A3:1D:F3:58:51:6C:1D:E9:04:48:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9A5288FFD963231D7A31DF358516C1DE9044850.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/3138312e3233322e3135382e302f32332d3233203d3e20323732303632.roa
Signing time:             Tue 05 Mar 2024 18:12:56 +0000
ROA not before:           Tue 05 Mar 2024 18:07:56 +0000
ROA not after:            Tue 04 Mar 2025 18:12:56 +0000
asID:                     272062
IP address blocks:        181.232.158.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/E9A5288FFD963231D7A31DF358516C1DE9044850.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/E9A5288FFD963231D7A31DF358516C1DE9044850.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9A5288FFD963231D7A31DF358516C1DE9044850.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f9:9e:cf:c7:0e:8d:bd:3a:34:05:73:2f:a7:17:52:41:68:7f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9A5288FFD963231D7A31DF358516C1DE9044850
        Validity
            Not Before: Mar  5 18:07:56 2024 GMT
            Not After : Mar  4 18:12:56 2025 GMT
        Subject: CN=34C79B7BA420D86685B2ACC3F660B4FA14E23A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cd:a5:67:2f:98:77:cb:df:02:f5:28:de:83:
                    78:96:bf:e6:f4:2e:d0:21:c2:5e:fd:7c:9d:d4:65:
                    52:8d:3c:7a:7b:42:a4:aa:6c:63:1c:f4:29:d2:b1:
                    a1:fe:8b:9d:03:c0:f9:0e:ec:67:6a:5d:25:ec:ab:
                    13:2e:e8:95:69:cf:79:33:03:7b:2c:bc:5a:ef:66:
                    49:e9:e6:92:5d:40:4f:06:2c:2d:05:61:39:c6:74:
                    f5:cd:68:6d:f8:2e:d7:ec:16:ef:36:39:1a:07:82:
                    0a:dc:f1:f2:47:90:db:dd:8e:db:07:57:21:05:39:
                    eb:3f:f0:26:32:7a:0a:db:8f:af:2d:f8:3d:cc:3f:
                    60:35:e2:2c:e7:47:20:f2:06:68:11:fc:31:07:78:
                    06:18:f1:72:0b:88:cc:22:29:b2:6a:61:87:88:8d:
                    37:d1:6b:58:9f:3e:53:60:6c:3a:0a:17:c9:dd:bc:
                    0c:49:7b:6e:a6:6d:6a:b1:80:d6:5c:6b:54:41:0d:
                    5f:b6:11:b3:2e:7d:14:90:45:51:e7:7c:15:2f:2e:
                    a1:79:36:05:08:84:5a:01:b9:12:01:c1:fe:48:ce:
                    aa:19:5d:33:3c:7d:5d:66:e6:e9:a8:04:df:e7:ae:
                    b4:72:79:6d:4a:bb:72:17:d9:97:39:b4:62:ea:09:
                    ec:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C7:9B:7B:A4:20:D8:66:85:B2:AC:C3:F6:60:B4:FA:14:E2:3A:36
            X509v3 Authority Key Identifier:
                keyid:E9:A5:28:8F:FD:96:32:31:D7:A3:1D:F3:58:51:6C:1D:E9:04:48:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/E9A5288FFD963231D7A31DF358516C1DE9044850.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9A5288FFD963231D7A31DF358516C1DE9044850.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9411291F93B87F981ABBDA5AAE5703988FD63C53C0D85DF413F28F442DB0292/0/3138312e3233322e3135382e302f32332d3233203d3e20323732303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:94:38:4d:6b:9e:39:53:7d:a5:2e:57:ba:f8:31:3c:be:89:
         b3:6c:40:37:51:5c:20:68:2b:59:f0:b9:15:c1:1e:89:aa:8b:
         19:49:34:8e:21:89:eb:af:e0:10:05:ea:36:a8:6a:89:51:61:
         e1:d7:a5:38:bd:14:bc:6b:b2:83:fb:6e:4a:f3:6c:35:03:98:
         a9:3a:cd:f9:6e:b8:3d:e7:04:f3:e5:a6:fd:0c:6e:2e:c8:33:
         55:32:d4:26:f9:a9:ee:02:83:2d:7c:ae:48:6b:15:75:ee:bc:
         ab:e0:c9:17:23:32:a0:7a:c9:4b:a2:e6:36:ac:08:77:b7:8c:
         72:47:33:be:18:4d:74:7c:fa:d2:94:d9:de:66:72:90:62:7a:
         ab:d1:21:18:05:72:60:8f:bc:b7:38:08:b2:d5:30:f5:91:04:
         07:1a:e9:cf:c1:2d:3b:73:fb:b1:ce:f8:49:1c:62:e5:83:cb:
         71:44:3d:fe:92:69:a5:32:f4:3f:83:92:33:ef:7e:36:bd:f5:
         15:69:01:1d:56:e3:98:60:ee:9a:7b:d6:61:f8:ef:f4:fe:da:
         73:70:e1:ce:3d:b6:4d:28:8e:c2:6d:e2:c5:16:2e:66:46:60:
         22:62:d2:22:0c:a8:6f:68:d5:97:da:ad:7d:68:66:1b:1f:1e:
         d2:bf:0b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org