Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/3138312e3138392e32372e302f32342d3234203d3e20323732303631.roa
File:                     3138312e3138392e32372e302f32342d3234203d3e20323732303631.roa (raw, json)
Hash identifier:          hJhpshtCvnaX2VZTtl4CpW8RxNhAmcZPzBY2vTZO8ac=
Subject key identifier:   AE:33:BC:FD:57:20:A4:EC:5E:96:1A:E4:36:34:78:A3:C3:20:28:1D
Certificate issuer:       /CN=ED84261D115D794840163DB5C548D17B25BA2A9E
Certificate serial:       1E2B947249BA1C0019CF4FAAE9E8BC8D0974CA9E
Authority key identifier: ED:84:26:1D:11:5D:79:48:40:16:3D:B5:C5:48:D1:7B:25:BA:2A:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED84261D115D794840163DB5C548D17B25BA2A9E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/3138312e3138392e32372e302f32342d3234203d3e20323732303631.roa
Signing time:             Tue 05 Mar 2024 18:16:06 +0000
ROA not before:           Tue 05 Mar 2024 18:11:06 +0000
ROA not after:            Tue 04 Mar 2025 18:16:06 +0000
asID:                     272061
IP address blocks:        181.189.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/ED84261D115D794840163DB5C548D17B25BA2A9E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/ED84261D115D794840163DB5C548D17B25BA2A9E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED84261D115D794840163DB5C548D17B25BA2A9E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2b:94:72:49:ba:1c:00:19:cf:4f:aa:e9:e8:bc:8d:09:74:ca:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED84261D115D794840163DB5C548D17B25BA2A9E
        Validity
            Not Before: Mar  5 18:11:06 2024 GMT
            Not After : Mar  4 18:16:06 2025 GMT
        Subject: CN=AE33BCFD5720A4EC5E961AE4363478A3C320281D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cb:c8:97:e3:0b:e1:84:b2:e0:30:95:19:22:
                    18:b3:c1:81:e8:83:91:4a:54:85:08:22:96:bf:d6:
                    00:ce:4d:d6:62:46:96:44:00:7f:3b:7d:16:a2:19:
                    e8:8f:cd:9c:25:eb:4f:08:24:71:de:a9:1e:f4:be:
                    7c:b2:7b:b3:0e:39:1e:4e:2e:42:81:af:94:cd:98:
                    f9:df:3c:94:2c:7b:07:42:51:5b:86:dd:fc:23:92:
                    ae:e5:ab:a0:50:c9:ca:2e:67:4a:7e:d2:09:83:4a:
                    f4:87:f3:50:e9:ad:91:01:5c:3e:6b:b3:05:d5:14:
                    21:84:27:10:5e:2f:08:8f:d7:64:e4:f4:f1:e0:f6:
                    5e:27:5a:ae:30:0e:3e:e6:ca:47:a5:47:c8:e0:bd:
                    d2:87:4f:b8:0e:53:5a:17:3e:45:20:c6:15:db:5c:
                    01:43:e0:ac:35:26:3b:13:83:5c:f0:97:48:ea:ec:
                    77:67:c7:53:0c:50:c1:c3:06:ac:eb:7b:d1:60:42:
                    5e:c8:32:9c:09:ff:a0:6c:d1:1e:0e:d8:87:9a:d3:
                    e6:cc:cb:83:a8:54:e5:e5:2d:14:44:97:5f:c2:aa:
                    c8:45:4a:8b:53:da:00:f5:7d:85:bf:c2:e8:77:2b:
                    e8:37:d2:b5:9e:2c:6d:25:53:7e:10:cb:d3:0b:25:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:33:BC:FD:57:20:A4:EC:5E:96:1A:E4:36:34:78:A3:C3:20:28:1D
            X509v3 Authority Key Identifier:
                keyid:ED:84:26:1D:11:5D:79:48:40:16:3D:B5:C5:48:D1:7B:25:BA:2A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/ED84261D115D794840163DB5C548D17B25BA2A9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED84261D115D794840163DB5C548D17B25BA2A9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF0A4F620D224C38859357384007DECBBDBE5CA6B1FFD28472D04B77E3F596B1/0/3138312e3138392e32372e302f32342d3234203d3e20323732303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:20:ce:f9:fb:ac:a7:49:02:79:35:4a:ce:11:9b:35:b2:3e:
         28:6e:00:ab:0e:52:67:0e:59:c9:f5:6f:8f:91:69:d9:0c:81:
         b8:80:ad:8c:39:cc:4b:07:fe:11:09:df:03:86:07:98:64:88:
         54:08:67:e3:f6:e3:4a:68:34:96:3a:6a:09:ea:50:2e:75:20:
         d7:6a:7d:71:17:28:2f:60:51:37:c5:f8:6b:2b:f4:34:82:a7:
         49:38:4a:76:76:2e:17:a2:df:9b:28:40:6d:e9:8a:9d:a8:bb:
         c2:1f:ae:a7:a5:aa:63:8e:07:d7:42:4f:1e:8c:35:fb:ef:3d:
         36:08:29:f2:a7:fa:ff:ed:27:46:1f:5e:32:d9:e8:d7:6b:5a:
         0f:7a:05:d9:b3:4d:04:39:aa:30:49:a9:c0:80:38:c1:e8:45:
         f8:77:fc:03:09:07:46:d4:fd:1f:41:ae:62:2b:16:48:2e:60:
         ba:a9:84:c3:ea:19:50:a9:f6:69:d8:5c:dd:bc:94:87:ce:12:
         8f:2e:af:f7:04:19:87:81:ab:1b:9a:41:17:5c:b1:72:8a:82:
         f0:d8:ce:2c:65:a9:9e:93:c0:77:cb:0e:eb:80:a2:ea:71:d1:
         a3:e7:86:ea:26:10:c2:24:77:37:1a:e8:53:30:0e:fa:94:f2:
         79:17:13:f2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHiuUckm6HAAZz0+q6ei8jQl0yp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ4NDI2MUQxMTVENzk0ODQwMTYzREI1QzU0OEQxN0Iy
NUJBMkE5RTAeFw0yNDAzMDUxODExMDZaFw0yNTAzMDQxODE2MDZaMDMxMTAvBgNV
BAMTKEFFMzNCQ0ZENTcyMEE0RUM1RTk2MUFFNDM2MzQ3OEEzQzMyMDI4MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiy8iX4wvhhLLgMJUZIhizwYHo
g5FKVIUIIpa/1gDOTdZiRpZEAH87fRaiGeiPzZwl608IJHHeqR70vnyye7MOOR5O
LkKBr5TNmPnfPJQsewdCUVuG3fwjkq7lq6BQycouZ0p+0gmDSvSH81DprZEBXD5r
swXVFCGEJxBeLwiP12Tk9PHg9l4nWq4wDj7mykelR8jgvdKHT7gOU1oXPkUgxhXb
XAFD4Kw1JjsTg1zwl0jq7Hdnx1MMUMHDBqzre9FgQl7IMpwJ/6Bs0R4O2Iea0+bM
y4OoVOXlLRREl1/CqshFSotT2gD1fYW/wuh3K+g30rWeLG0lU34Qy9MLJSwnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUrjO8/VcgpOxelhrkNjR4o8MgKB0wHwYDVR0j
BBgwFoAU7YQmHRFdeUhAFj21xUjReyW6Kp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRjBBNEY2MjBEMjI0QzM4ODU5MzU3Mzg0MDA3REVDQkJE
QkU1Q0E2QjFGRkQyODQ3MkQwNEI3N0UzRjU5NkIxLzAvRUQ4NDI2MUQxMTVENzk0
ODQwMTYzREI1QzU0OEQxN0IyNUJBMkE5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDg0MjYxRDExNUQ3OTQ4NDAx
NjNEQjVDNTQ4RDE3QjI1QkEyQTlFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUYwQTRGNjIwRDIyNEMzODg1OTM1NzM4NDAwN0RFQ0JCREJFNUNBNkIx
RkZEMjg0NzJEMDRCNzdFM0Y1OTZCMS8wLzMxMzgzMTJlMzEzODM5MmUzMjM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzAzNjMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtb0b
MA0GCSqGSIb3DQEBCwUAA4IBAQAQIM75+6ynSQJ5NUrOEZs1sj4obgCrDlJnDlnJ
9W+PkWnZDIG4gK2MOcxLB/4RCd8DhgeYZIhUCGfj9uNKaDSWOmoJ6lAudSDXan1x
FygvYFE3xfhrK/Q0gqdJOEp2di4Xot+bKEBt6YqdqLvCH66npapjjgfXQk8ejDX7
7z02CCnyp/r/7SdGH14y2ejXa1oPegXZs00EOaowSanAgDjB6EX4d/wDCQdG1P0f
Qa5iKxZILmC6qYTD6hlQqfZp2FzdvJSHzhKPLq/3BBmHgasbmkEXXLFyioLw2M4s
Zamek8B3yw7rgKLqcdGj54bqJhDCJHc3GuhTMA76lPJ5FxPy
-----END CERTIFICATE-----
Generated at Tue Jun 25 04:09:50 2024 by rpki-client on console-ams.rpki-client.org