Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3138312e3137372e3132382e302f31382d3234203d3e203237383339.roa
File:                     3138312e3137372e3132382e302f31382d3234203d3e203237383339.roa (raw, json)
Hash identifier:          VMluHU8oznkmTlvdMDeY8XivQ+SG3+faM3D0AIDU3Dk=
Subject key identifier:   27:CF:73:60:72:D2:20:72:C5:35:D6:7E:46:B3:24:AA:C5:FA:65:A6
Certificate issuer:       /CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Certificate serial:       124B0BA0DD595722B27F1E6C3F8495EE74126AF3
Authority key identifier: 21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3138312e3137372e3132382e302f31382d3234203d3e203237383339.roa
Signing time:             Tue 05 Mar 2024 17:43:54 +0000
ROA not before:           Tue 05 Mar 2024 17:38:54 +0000
ROA not after:            Tue 04 Mar 2025 17:43:54 +0000
asID:                     27839
IP address blocks:        181.177.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4b:0b:a0:dd:59:57:22:b2:7f:1e:6c:3f:84:95:ee:74:12:6a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B4A6594D293307A54FC67EA972CF9E807930DF
        Validity
            Not Before: Mar  5 17:38:54 2024 GMT
            Not After : Mar  4 17:43:54 2025 GMT
        Subject: CN=27CF736072D22072C535D67E46B324AAC5FA65A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:81:50:03:c9:cb:da:3b:6d:75:4f:2d:60:ef:
                    56:d2:f6:9e:74:96:58:0b:8d:c6:be:1c:42:94:9a:
                    9d:03:08:c4:ba:5f:82:cb:25:23:9b:9e:1d:54:9f:
                    f6:1a:3c:07:a7:69:d4:03:84:44:97:17:86:9c:ea:
                    d1:35:cb:38:82:3b:ec:97:82:2f:08:e7:7d:ac:fb:
                    ea:10:f1:c5:86:de:08:02:59:e1:71:e0:fd:b6:1f:
                    1e:c1:04:52:7e:44:7a:b4:73:f5:8f:0c:53:49:e1:
                    f9:ec:ac:e5:07:8a:a9:95:9f:ff:d6:b8:b0:0d:0c:
                    81:e9:0c:e3:80:80:02:76:d6:83:98:b6:77:ce:80:
                    bf:a7:a1:86:e5:6d:0d:21:a0:e1:27:84:17:5c:17:
                    53:f2:16:66:d8:62:76:7d:0a:fc:42:4a:91:3c:3f:
                    ab:67:5a:24:2d:c9:ac:45:8c:86:0b:34:6a:41:5b:
                    65:b1:59:9a:36:d9:72:a9:eb:7c:63:6d:13:19:4a:
                    48:c0:da:fd:a4:ee:66:fa:bc:ff:e8:ee:49:6c:5e:
                    ba:e6:f3:1c:27:20:b8:16:2c:1e:d3:05:79:66:42:
                    84:9a:d5:f3:b9:87:e3:da:59:07:de:05:79:67:9a:
                    0f:20:ad:0f:12:ba:a2:98:fc:ab:ae:2a:09:49:93:
                    05:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CF:73:60:72:D2:20:72:C5:35:D6:7E:46:B3:24:AA:C5:FA:65:A6
            X509v3 Authority Key Identifier:
                keyid:21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3138312e3137372e3132382e302f31382d3234203d3e203237383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b0:81:21:c6:19:24:18:50:1d:4d:57:3e:10:39:71:7f:0f:ae:
         5f:27:d1:e2:c7:5a:2a:4c:10:c3:a0:7c:3e:91:bf:3e:ed:5a:
         fd:5a:54:75:00:04:7b:24:31:7d:7e:34:22:31:3b:51:3f:ad:
         14:ca:34:b2:ff:5d:0a:e5:c6:d5:12:8f:d0:1a:e2:ef:5a:f6:
         1a:bd:51:bb:e1:d3:b8:72:74:7f:9b:0d:51:13:a0:60:ba:98:
         14:46:eb:5e:74:44:7d:f5:ae:ec:35:18:b0:c8:83:90:2b:93:
         ff:a5:d3:52:2f:06:85:c3:bf:a6:16:35:64:3c:65:24:95:e1:
         17:e3:f5:95:6b:0b:6d:7a:7d:c4:d1:ef:09:da:76:87:c7:c5:
         d3:1d:8d:17:dc:33:a2:c5:a1:0e:39:01:99:3d:36:1e:2f:b6:
         13:32:da:e3:d7:6a:f1:cd:8c:e8:68:52:d1:75:79:41:85:83:
         67:5e:f7:fa:c2:15:8b:13:72:f5:a0:84:d7:b9:3e:7b:8c:f6:
         3f:f0:e0:28:f1:7a:cb:2b:df:01:c7:50:e0:50:00:c6:ca:34:
         a4:e4:e2:65:70:04:45:e8:61:78:67:4f:02:0b:da:0a:03:a7:
         81:3a:a9:43:7e:1d:8d:de:93:47:91:09:e0:be:c4:76:33:0a:
         a8:bf:96:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org