Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/3138312e3137342e3137362e302f32312d3234203d3e203230323037.roa
File:                     3138312e3137342e3137362e302f32312d3234203d3e203230323037.roa (raw, json)
Hash identifier:          plOInh6bNEofH6PWOqCa/fFnMFzHHvmVLTKiQJtpqII=
Subject key identifier:   51:4E:58:1C:C3:6F:63:73:42:4F:3F:79:BC:8D:6E:23:65:33:EE:F8
Certificate issuer:       /CN=845FC621EC41AE7512D63082015413006FEF3E35
Certificate serial:       17BFEE1D95C444B1BE11824E6A923EC27C8E3046
Authority key identifier: 84:5F:C6:21:EC:41:AE:75:12:D6:30:82:01:54:13:00:6F:EF:3E:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845FC621EC41AE7512D63082015413006FEF3E35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/3138312e3137342e3137362e302f32312d3234203d3e203230323037.roa
Signing time:             Tue 05 Mar 2024 18:02:04 +0000
ROA not before:           Tue 05 Mar 2024 17:57:04 +0000
ROA not after:            Tue 04 Mar 2025 18:02:04 +0000
asID:                     20207
IP address blocks:        181.174.176.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/845FC621EC41AE7512D63082015413006FEF3E35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/845FC621EC41AE7512D63082015413006FEF3E35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845FC621EC41AE7512D63082015413006FEF3E35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bf:ee:1d:95:c4:44:b1:be:11:82:4e:6a:92:3e:c2:7c:8e:30:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845FC621EC41AE7512D63082015413006FEF3E35
        Validity
            Not Before: Mar  5 17:57:04 2024 GMT
            Not After : Mar  4 18:02:04 2025 GMT
        Subject: CN=514E581CC36F6373424F3F79BC8D6E236533EEF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:62:42:79:c0:9c:43:2f:5f:dc:56:be:c3:23:
                    dc:b3:a1:83:83:d7:89:86:e0:96:d4:0d:87:57:07:
                    03:15:e3:81:a6:d7:7a:16:89:c5:bf:c8:7d:34:d2:
                    14:29:d1:48:8a:99:3b:cc:f0:b6:9e:14:8e:36:8a:
                    4c:6e:8d:ca:3a:d5:78:73:5c:36:85:61:e9:05:d1:
                    77:bc:99:99:8c:0d:8f:cf:ef:ad:dc:38:4a:e9:39:
                    80:08:24:ab:51:d9:70:65:3d:4e:ea:3c:44:e9:dc:
                    df:22:ee:5f:01:f6:bf:2d:df:c3:9c:f0:18:0b:5a:
                    6b:06:7e:ab:b5:4c:98:fa:da:ac:0c:0a:ef:2e:dc:
                    9a:b6:76:2b:62:68:e8:71:ec:8b:36:0b:08:dc:25:
                    63:5b:77:23:41:c5:66:e7:5f:54:c8:97:da:a7:e7:
                    9b:8c:0a:b5:b7:f5:8a:ee:a3:c9:34:e2:52:8c:e4:
                    7c:5d:81:ae:5e:d4:38:15:ee:08:6c:a2:47:51:88:
                    3b:fe:aa:96:30:4e:82:46:6e:a9:5b:a7:cd:76:e1:
                    64:ac:e9:3b:ad:4c:25:eb:d8:37:3e:61:3b:b0:dd:
                    19:5b:69:4f:0c:50:52:ea:19:3d:06:48:03:b5:f7:
                    88:24:f3:f2:06:83:11:14:73:54:8d:1c:e7:09:aa:
                    9d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4E:58:1C:C3:6F:63:73:42:4F:3F:79:BC:8D:6E:23:65:33:EE:F8
            X509v3 Authority Key Identifier:
                keyid:84:5F:C6:21:EC:41:AE:75:12:D6:30:82:01:54:13:00:6F:EF:3E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/845FC621EC41AE7512D63082015413006FEF3E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845FC621EC41AE7512D63082015413006FEF3E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/3138312e3137342e3137362e302f32312d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:76:3e:86:53:a8:72:8e:f6:65:08:e9:c9:1b:21:19:ec:c9:
         2e:3e:bb:9f:b3:a3:90:75:50:23:1e:e0:fe:dd:9c:59:2d:53:
         1d:4c:6f:f6:c3:b9:dd:2b:45:02:f7:69:80:40:b0:02:1b:2c:
         2b:df:15:92:cd:21:31:41:11:26:9c:dc:b3:80:c5:cc:31:1c:
         36:09:44:19:37:44:a5:33:ff:12:02:93:fb:30:49:6d:d3:0d:
         a4:6b:e5:39:28:e7:b9:de:6f:12:c9:79:86:cc:a9:36:92:3e:
         1d:fb:e4:d5:0c:10:de:bb:18:a8:18:33:7a:e0:03:60:12:14:
         03:7c:ad:db:cc:ad:b0:ef:ad:2f:e0:25:5e:b7:b9:1f:5b:2f:
         ba:b1:6f:cf:59:0e:72:a9:59:a7:5c:bd:d0:2e:b9:fc:9b:fb:
         c5:3a:8d:21:fc:68:41:b0:b2:15:26:5f:d4:f7:48:ef:76:31:
         f5:85:2f:52:a0:fa:0d:c0:82:66:39:ad:cb:6e:e9:d0:c4:75:
         7f:69:f1:26:c5:4c:af:52:2d:e0:45:b1:4d:27:bd:9b:34:ae:
         dc:d4:bc:15:cc:e6:e4:23:aa:62:a6:89:f4:16:03:95:b5:3c:
         c9:9f:db:34:84:c9:1c:1f:45:92:1d:dd:6d:6b:69:92:d2:eb:
         bf:d4:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org