Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3234382e302f32322d3234203d3e20323635353234.roa
File:                     3138312e3139312e3234382e302f32322d3234203d3e20323635353234.roa (raw, json)
Hash identifier:          oEv6YI6daWptM8RpMNIW3YTkaC4tJ4UTK8WBgo2mLUw=
Subject key identifier:   B8:DE:CF:38:65:11:BB:2E:31:A2:CC:6A:12:A4:BC:B2:A6:16:7C:92
Certificate issuer:       /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial:       12A12F81A82B986536CF5157FC8D27C976EE9A70
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3234382e302f32322d3234203d3e20323635353234.roa
Signing time:             Mon 11 Mar 2024 18:55:01 +0000
ROA not before:           Mon 11 Mar 2024 18:50:01 +0000
ROA not after:            Mon 10 Mar 2025 18:55:01 +0000
asID:                     265524
IP address blocks:        181.191.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a1:2f:81:a8:2b:98:65:36:cf:51:57:fc:8d:27:c9:76:ee:9a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
        Validity
            Not Before: Mar 11 18:50:01 2024 GMT
            Not After : Mar 10 18:55:01 2025 GMT
        Subject: CN=B8DECF386511BB2E31A2CC6A12A4BCB2A6167C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:2e:71:25:09:8f:d9:9c:79:a0:de:9e:d4:
                    35:d5:0b:5f:92:22:3a:2f:1b:27:00:66:21:17:2e:
                    5e:69:e0:6c:fe:04:c9:43:48:0f:ed:6a:3b:f7:2e:
                    6c:b3:68:e2:77:13:6c:06:32:b1:25:34:58:6d:a8:
                    1b:c7:50:7e:8b:e4:5b:49:06:68:a5:5e:57:81:48:
                    90:c1:0b:e1:37:c3:cb:52:ce:49:22:c3:96:20:8a:
                    4e:d6:a3:c0:4d:9f:e4:87:fd:bc:b8:9b:43:25:02:
                    b4:ce:c4:31:17:36:4e:67:3f:5e:ee:09:54:45:54:
                    7b:0b:1a:dd:6b:2c:e6:d9:26:1b:aa:60:a0:53:fa:
                    b5:e1:c0:85:78:98:fe:7e:b3:8e:7a:ad:dd:65:9d:
                    fe:e5:c6:93:92:95:c5:2d:63:67:51:23:25:c7:82:
                    fe:c5:88:cd:76:62:c9:7c:fc:55:cd:de:29:6d:8a:
                    2c:ab:1d:9c:ce:1c:34:b5:95:8c:b2:fe:01:1b:a9:
                    4f:0b:7a:5b:9a:68:60:ff:42:28:71:91:02:11:b8:
                    fb:61:16:04:94:38:12:81:5f:ff:e8:dc:c9:e7:85:
                    70:53:fe:2b:06:21:46:d5:a4:8f:7b:ea:53:b4:a0:
                    f5:41:88:cb:95:13:20:ac:f1:c1:21:86:34:e7:21:
                    7f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DE:CF:38:65:11:BB:2E:31:A2:CC:6A:12:A4:BC:B2:A6:16:7C:92
            X509v3 Authority Key Identifier:
                keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3234382e302f32322d3234203d3e20323635353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:a7:5b:d5:a2:5b:9b:30:c2:d3:5c:e4:71:32:cc:e0:7d:ff:
         58:a2:32:fa:f3:84:45:14:43:1f:c7:c3:bb:6c:2f:17:38:eb:
         d6:6d:e8:c0:32:db:ad:2e:09:2a:c8:1d:72:96:c2:dd:a1:c0:
         16:92:6d:8d:94:39:73:a5:9f:2b:1b:2e:91:a9:fd:8e:de:7d:
         b4:4e:ea:fb:6d:9d:6d:ea:55:13:e5:77:04:66:0c:13:44:2d:
         8b:d6:db:5a:ff:d5:ea:28:3e:f6:61:b8:d3:a5:83:7a:b5:37:
         b2:80:dd:45:b5:b3:9a:c4:be:2a:e3:ea:9e:9a:96:8c:62:78:
         fe:f8:dd:eb:36:de:36:07:db:ba:70:bc:e1:63:0b:b5:62:0b:
         0c:b9:5f:0c:27:75:7d:5c:18:8f:2d:fb:25:89:f4:33:57:28:
         6c:f1:50:5c:1b:04:fc:eb:0e:21:58:26:2f:da:12:ae:fd:0d:
         ca:d6:eb:92:2f:43:09:3a:23:fb:1f:ef:20:c9:b0:c6:1d:76:
         0b:46:8d:b6:ab:f3:fe:33:c0:d4:4a:20:e4:77:1a:ed:7c:00:
         98:7d:73:a4:2d:9e:8b:fe:60:a7:d6:1b:95:58:0b:dd:c1:64:
         8e:a1:4c:2a:50:ec:ef:22:e3:f9:61:26:f8:cf:ee:46:aa:fa:
         75:04:d2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org