Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3235322e302f32322d3234203d3e20323635353234.roa
File:                     3138312e3139312e3235322e302f32322d3234203d3e20323635353234.roa (raw, json)
Hash identifier:          XwHTw6N7RboRLYu5Azqma/J+VbLudMMW/ZXV9Z77i9s=
Subject key identifier:   67:78:F3:1B:3E:A7:80:26:E4:5E:04:03:6B:58:F5:47:AB:21:C1:D9
Certificate issuer:       /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial:       29B4FF17FBCBA510B726070B0B5369734885CD98
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3235322e302f32322d3234203d3e20323635353234.roa
Signing time:             Mon 11 Mar 2024 18:55:01 +0000
ROA not before:           Mon 11 Mar 2024 18:50:01 +0000
ROA not after:            Mon 10 Mar 2025 18:55:01 +0000
asID:                     265524
IP address blocks:        181.191.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b4:ff:17:fb:cb:a5:10:b7:26:07:0b:0b:53:69:73:48:85:cd:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
        Validity
            Not Before: Mar 11 18:50:01 2024 GMT
            Not After : Mar 10 18:55:01 2025 GMT
        Subject: CN=6778F31B3EA78026E45E04036B58F547AB21C1D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6a:67:78:1b:02:f3:f1:65:96:94:61:c4:0c:
                    05:b7:5e:65:dc:72:d8:e2:fd:1d:92:79:9b:22:a8:
                    81:a3:a5:81:b1:df:a4:f0:5d:a8:bc:5e:2c:44:87:
                    25:4b:cb:17:02:35:1a:7b:a0:d4:ac:31:4f:5f:39:
                    ec:e8:86:2f:b2:31:c6:6e:cc:ee:09:01:0f:55:d1:
                    13:5e:dd:ac:2c:1d:dd:f5:cb:ce:81:4d:84:38:f8:
                    ab:88:52:51:e6:ae:6d:de:11:20:f9:c8:f0:b6:76:
                    2c:37:7e:4a:c6:0d:06:41:33:80:e0:1d:a5:ae:31:
                    15:94:1f:44:f2:8b:54:8c:a2:63:4f:8c:db:2f:c7:
                    dc:14:ab:af:b0:c2:72:ed:f7:87:68:f0:62:9a:6b:
                    d3:50:19:ea:96:f4:a0:d0:85:1a:28:d5:3b:46:16:
                    38:56:87:9b:55:34:b9:17:42:fa:a7:de:dc:77:5c:
                    bf:59:55:7b:72:0d:59:bc:dd:19:94:61:a7:42:22:
                    d1:2d:b1:1b:e2:a7:1b:88:0d:e0:64:ad:cf:5d:f1:
                    32:02:f7:12:9b:b2:35:9d:90:33:e4:c5:8a:ae:a5:
                    d1:87:12:eb:f2:7d:1e:0e:86:4e:c1:bc:f5:f8:b5:
                    3d:2b:0a:67:7d:23:8c:1c:ad:3c:74:5b:a8:4e:d3:
                    a5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:78:F3:1B:3E:A7:80:26:E4:5E:04:03:6B:58:F5:47:AB:21:C1:D9
            X509v3 Authority Key Identifier:
                keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3235322e302f32322d3234203d3e20323635353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:a6:e1:20:b1:46:5d:54:96:ae:d1:18:df:64:da:db:98:75:
         fb:31:f4:3e:92:61:9a:d7:fc:f7:df:c2:13:a0:1b:06:24:0f:
         34:63:89:d3:8e:d7:4f:6c:b6:20:94:5d:53:09:79:a3:f0:19:
         f8:c4:85:53:4e:b4:d8:db:3f:bc:14:b5:88:83:c3:0c:a1:aa:
         7d:7b:31:48:86:10:25:ff:bc:64:2f:04:b0:17:77:1f:f1:02:
         cd:ff:90:d9:a0:5f:5d:fb:76:0f:d3:cb:db:81:f5:a2:25:06:
         01:35:e4:69:10:2b:c1:65:a7:d1:ca:3f:dd:05:3a:c6:15:b7:
         32:f3:35:75:21:a1:8f:29:2c:5c:40:78:a2:26:50:82:8f:a6:
         cd:df:b5:62:df:fa:cd:18:da:b2:63:02:39:51:16:77:67:34:
         41:3b:2d:5f:05:37:0e:ef:1e:3e:d2:d6:d0:f1:01:0d:41:2d:
         c5:1e:60:d4:09:7f:31:96:ca:5e:bc:ab:2c:0b:27:1a:e1:a8:
         a7:69:13:9d:18:8a:64:46:b9:a6:0e:1e:6e:40:f2:38:c6:6b:
         27:d7:70:4b:1b:8b:1e:cb:2f:c8:78:10:3a:7e:7e:38:05:2d:
         6b:a7:a0:d6:64:f4:08:61:a7:59:78:6e:e5:f6:26:1d:5a:06:
         46:0b:a6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:29 2024 by rpki-client on console-fra.rpki-client.org