Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e38382e302f32392d3239203d3e20323635383139.roa
File:                     3138312e3230392e38382e302f32392d3239203d3e20323635383139.roa (raw, json)
Hash identifier:          kG3OP6UN9a4QkWyn/8jqCBaMcquuBHJTfMHkKu07q7M=
Subject key identifier:   26:BB:7B:26:23:84:56:8E:30:FD:E5:6C:30:FE:E1:04:B6:75:92:04
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       0CEA285CC02B33FECB4EB00BEDBC8810D0B00458
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e38382e302f32392d3239203d3e20323635383139.roa
Signing time:             Tue 05 Mar 2024 18:04:35 +0000
ROA not before:           Tue 05 Mar 2024 17:59:35 +0000
ROA not after:            Tue 04 Mar 2025 18:04:35 +0000
asID:                     265819
IP address blocks:        181.209.88.0/29 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ea:28:5c:c0:2b:33:fe:cb:4e:b0:0b:ed:bc:88:10:d0:b0:04:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Mar  5 17:59:35 2024 GMT
            Not After : Mar  4 18:04:35 2025 GMT
        Subject: CN=26BB7B262384568E30FDE56C30FEE104B6759204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b0:03:ec:c1:75:05:19:0d:a1:a1:85:92:bd:
                    b2:24:f4:be:9c:ef:d4:aa:4a:bf:7a:db:03:b6:c3:
                    f3:3b:10:6d:be:12:22:64:69:57:83:74:17:45:70:
                    50:70:d6:bf:a7:75:14:36:35:d9:da:85:aa:e0:00:
                    24:bb:38:a3:47:9e:2a:0b:e8:8c:c8:87:b8:51:b4:
                    e3:97:6a:ba:40:33:90:80:3f:0b:4f:00:fd:10:99:
                    69:10:68:6e:55:a5:ce:8f:93:62:85:70:5c:62:fc:
                    a9:8f:c7:c5:d3:e7:e8:d6:cb:41:dd:c1:7e:97:7a:
                    d4:40:41:3d:71:c1:3a:8f:27:d3:88:ae:1d:17:25:
                    a6:64:f3:21:c7:ea:79:48:4d:e2:4a:ba:60:2e:94:
                    a2:a1:07:6d:83:44:b8:ea:b3:77:e3:a7:19:c9:36:
                    16:69:50:8f:ed:6e:a0:1b:d5:64:8d:bf:3d:ad:04:
                    5f:43:42:70:4f:45:f7:4e:69:6a:c8:ca:98:7b:3e:
                    7e:5b:92:e2:f8:07:ae:a6:7b:4c:c5:9e:48:4e:2f:
                    fd:d0:2e:a2:c0:79:88:64:6f:1d:bf:ea:9b:a7:8a:
                    c5:52:82:e9:ac:d8:7c:72:57:61:a6:2a:2a:ae:5f:
                    9c:45:ac:00:5e:e0:00:36:ef:fa:e3:07:bd:b2:b4:
                    cd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BB:7B:26:23:84:56:8E:30:FD:E5:6C:30:FE:E1:04:B6:75:92:04
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e38382e302f32392d3239203d3e20323635383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.88.0/29

    Signature Algorithm: sha256WithRSAEncryption
         30:f8:c1:f8:2e:f3:de:82:3a:ec:df:99:a8:fa:c2:0d:23:5c:
         f4:c1:c0:4e:7f:5c:e6:1b:6b:c8:7d:b5:b7:69:22:70:2f:c1:
         a1:d1:bd:4c:38:19:69:c1:b7:6d:80:91:c8:87:08:81:2f:63:
         a1:ba:2b:05:fd:2b:4b:19:91:44:03:c2:00:44:12:ab:1d:c0:
         48:9c:8b:7a:bc:ac:84:72:f7:55:eb:d4:b5:d5:7c:37:b4:e6:
         fd:60:3e:81:b1:39:46:97:f7:86:fd:fd:75:88:54:82:21:09:
         4f:e6:65:bf:dd:c2:48:2b:1b:6d:08:e0:4e:a4:45:96:3e:52:
         37:8f:9d:5d:65:42:f6:bf:71:38:aa:a8:02:e7:9c:2b:73:53:
         83:47:3f:36:77:32:a4:9f:eb:6a:af:00:7d:29:f7:d0:39:ec:
         39:7e:6d:4e:89:5e:08:3b:e2:67:5c:9f:41:3d:a2:5b:a9:0c:
         62:e2:af:01:26:95:81:45:10:ad:d5:60:40:1b:d1:5b:fe:32:
         91:fc:20:f8:b6:77:64:e7:c7:f5:2a:03:17:56:5f:ff:e0:46:
         24:8d:2f:77:5d:1e:e1:4e:4d:e9:64:db:6e:4a:bc:31:86:09:
         99:6b:f2:55:23:16:75:01:24:a1:80:1c:1c:00:f6:87:7f:5f:
         12:44:58:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org