Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/3138312e3137342e3137322e302f32322d3234203d3e203230323037.roa
File:                     3138312e3137342e3137322e302f32322d3234203d3e203230323037.roa (raw, json)
Hash identifier:          AoMGlj4twA8zKli8QQdzchvnluFmd6B2K/Ftd9LS7U0=
Subject key identifier:   3E:5B:CD:21:32:A3:D4:35:9E:42:20:B4:8B:15:2C:23:41:1E:5B:38
Certificate issuer:       /CN=845FC621EC41AE7512D63082015413006FEF3E35
Certificate serial:       19C22F31B5FD664A12694D1FEBFAB8E05FC5D0E2
Authority key identifier: 84:5F:C6:21:EC:41:AE:75:12:D6:30:82:01:54:13:00:6F:EF:3E:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845FC621EC41AE7512D63082015413006FEF3E35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/3138312e3137342e3137322e302f32322d3234203d3e203230323037.roa
Signing time:             Tue 05 Mar 2024 18:02:05 +0000
ROA not before:           Tue 05 Mar 2024 17:57:05 +0000
ROA not after:            Tue 04 Mar 2025 18:02:05 +0000
asID:                     20207
IP address blocks:        181.174.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/845FC621EC41AE7512D63082015413006FEF3E35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/845FC621EC41AE7512D63082015413006FEF3E35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845FC621EC41AE7512D63082015413006FEF3E35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c2:2f:31:b5:fd:66:4a:12:69:4d:1f:eb:fa:b8:e0:5f:c5:d0:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845FC621EC41AE7512D63082015413006FEF3E35
        Validity
            Not Before: Mar  5 17:57:05 2024 GMT
            Not After : Mar  4 18:02:05 2025 GMT
        Subject: CN=3E5BCD2132A3D4359E4220B48B152C23411E5B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2a:cc:de:2e:17:d5:89:c4:30:85:69:56:7f:
                    2f:af:4a:35:7b:24:f7:48:e9:80:21:ad:72:b6:de:
                    2a:0b:51:a7:8e:59:d9:e0:8e:7d:6a:9a:15:e8:0c:
                    9e:72:31:84:2c:9b:45:4b:3f:14:07:23:9e:a3:f5:
                    88:a6:78:6a:08:97:69:45:44:8b:48:03:2d:ef:1c:
                    45:ad:e1:af:26:97:b6:6c:e6:d7:57:1a:c6:66:67:
                    21:d9:f3:a1:ce:07:54:00:ff:57:90:a1:be:57:fd:
                    31:98:8e:41:3e:7d:c9:c7:fd:d3:f9:a0:56:12:43:
                    c0:a3:58:92:b2:8b:e7:18:d8:7f:c0:1e:e2:ff:74:
                    90:b6:bb:e4:cd:b4:49:40:dd:ea:47:39:86:b2:a4:
                    b5:2d:19:90:3f:12:b6:78:33:59:0c:8e:91:14:4e:
                    ad:00:18:1e:7f:26:15:31:4b:0a:e9:2d:7b:47:8e:
                    99:60:34:5b:b6:fa:f7:1f:d7:89:97:5d:9e:7e:90:
                    37:94:4b:90:52:4a:df:a3:ef:2b:6b:86:05:0d:cd:
                    31:48:62:e7:29:4e:c1:a0:fd:fc:dd:32:d5:d1:65:
                    f7:4b:e5:ec:6f:46:85:75:f4:ce:f2:9b:0d:0b:52:
                    fc:db:73:d1:a5:e4:23:3d:df:98:7b:aa:1a:14:9e:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5B:CD:21:32:A3:D4:35:9E:42:20:B4:8B:15:2C:23:41:1E:5B:38
            X509v3 Authority Key Identifier:
                keyid:84:5F:C6:21:EC:41:AE:75:12:D6:30:82:01:54:13:00:6F:EF:3E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/845FC621EC41AE7512D63082015413006FEF3E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845FC621EC41AE7512D63082015413006FEF3E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/3138312e3137342e3137322e302f32322d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:92:b5:3b:92:7d:12:10:f6:96:74:61:b8:2e:15:62:a0:53:
         7a:89:21:ab:8b:ed:43:cd:4f:7b:00:65:8a:9c:81:93:01:88:
         fc:04:6a:d7:f4:ee:f7:52:76:21:4b:11:3f:a0:10:31:7e:1d:
         aa:9d:69:b7:a5:b3:e3:a5:a7:fe:68:05:29:0a:10:63:ea:c6:
         76:31:ba:b7:f7:c5:0e:24:2e:30:29:a9:b6:2e:5c:23:db:e7:
         d3:4a:59:c4:b6:b1:a9:3c:dc:25:b2:a7:4d:c8:db:05:e5:84:
         a7:60:bc:0f:23:82:04:83:5f:1e:20:41:73:68:13:31:33:a0:
         18:19:4b:b5:39:4e:91:9e:92:ee:1d:36:60:d9:da:05:13:61:
         8d:44:a3:a7:0e:1e:45:5a:4e:1d:a8:f9:d4:e7:0f:6e:70:5a:
         7c:a4:87:f1:1f:94:bb:11:67:25:47:f9:3c:a3:85:a6:f1:20:
         c0:aa:10:11:0e:23:99:03:4e:d8:50:63:c7:2a:80:65:43:0f:
         d2:21:56:b5:63:00:91:61:91:af:18:da:9b:4a:8a:ee:6c:51:
         e9:22:72:ee:26:7d:7b:87:a9:c1:80:bc:97:f6:1f:33:eb:74:
         7d:11:b1:c7:e9:0a:a3:3f:7a:4d:83:6f:f1:75:d8:4d:3a:d1:
         94:1e:82:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 19:49:13 2024 by rpki-client on console-fra.rpki-client.org