Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1ABAB5B5F1D63078CFD7CD91F85B287F557685B0AD5D26D654669F48D9601B7/0/3138312e3139312e3132342e302f32322d3234203d3e20323635373936.roa
File:                     3138312e3139312e3132342e302f32322d3234203d3e20323635373936.roa (raw, json)
Hash identifier:          wqGnX7/omh/Pgp1uWmXsIrU7p3+B9AHZyfP5XIcVgbY=
Subject key identifier:   E9:13:EF:EA:AA:FD:AF:15:5B:81:52:1F:0E:32:D8:6F:B3:7B:02:4D
Certificate issuer:       /CN=85F4566088745ADBB1E092E7B22AB66DA1835628
Certificate serial:       5ED8E8BD8B9D0C34A765332EE428701CAB51E561
Authority key identifier: 85:F4:56:60:88:74:5A:DB:B1:E0:92:E7:B2:2A:B6:6D:A1:83:56:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85F4566088745ADBB1E092E7B22AB66DA1835628.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1ABAB5B5F1D63078CFD7CD91F85B287F557685B0AD5D26D654669F48D9601B7/0/3138312e3139312e3132342e302f32322d3234203d3e20323635373936.roa
Signing time:             Tue 05 Mar 2024 17:54:01 +0000
ROA not before:           Tue 05 Mar 2024 17:49:01 +0000
ROA not after:            Tue 04 Mar 2025 17:54:01 +0000
asID:                     265796
IP address blocks:        181.191.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1ABAB5B5F1D63078CFD7CD91F85B287F557685B0AD5D26D654669F48D9601B7/0/85F4566088745ADBB1E092E7B22AB66DA1835628.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1ABAB5B5F1D63078CFD7CD91F85B287F557685B0AD5D26D654669F48D9601B7/0/85F4566088745ADBB1E092E7B22AB66DA1835628.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85F4566088745ADBB1E092E7B22AB66DA1835628.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d8:e8:bd:8b:9d:0c:34:a7:65:33:2e:e4:28:70:1c:ab:51:e5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F4566088745ADBB1E092E7B22AB66DA1835628
        Validity
            Not Before: Mar  5 17:49:01 2024 GMT
            Not After : Mar  4 17:54:01 2025 GMT
        Subject: CN=E913EFEAAAFDAF155B81521F0E32D86FB37B024D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ed:9b:85:f0:67:dc:ec:89:43:11:91:4a:30:
                    ee:b8:97:8d:ad:c8:d2:69:46:af:2d:ed:9b:6b:9a:
                    a8:b4:72:18:0d:cd:bb:3f:a6:be:2e:f1:cc:0e:8e:
                    8e:ee:26:76:62:32:81:c5:92:62:c9:ba:55:86:ad:
                    d9:d2:bb:99:d9:c9:72:bc:98:d9:23:24:8a:ab:25:
                    a9:b0:63:77:a3:b9:9b:9e:2d:7a:2a:62:db:1c:8b:
                    fd:55:bd:66:fb:fd:d6:cb:ab:ab:f1:40:b3:f5:0d:
                    a2:20:0f:39:44:88:61:fc:27:99:d2:30:0d:52:e0:
                    ca:b2:5a:0d:5c:c3:5d:75:6f:fa:59:fc:35:80:4c:
                    c4:e2:0b:e0:7a:0e:78:6d:c8:c6:e3:26:4a:93:73:
                    6d:ae:88:a1:38:95:99:41:45:3e:33:f3:9f:31:f8:
                    fe:ef:01:11:b1:db:d1:6b:54:25:0e:cd:1d:36:7e:
                    d7:e4:9c:a3:79:08:4b:37:5b:cc:d3:c8:ec:95:81:
                    aa:d9:4d:2a:1f:83:c8:84:cb:d6:b0:bf:54:c3:6e:
                    d7:d5:e5:49:9e:52:e4:42:18:4c:87:f8:ce:d4:bb:
                    e4:b9:d9:5a:67:f1:c2:38:c6:68:3c:42:c1:b7:37:
                    56:bf:fa:02:cf:8a:b5:1b:66:79:e5:76:b7:22:66:
                    b5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:13:EF:EA:AA:FD:AF:15:5B:81:52:1F:0E:32:D8:6F:B3:7B:02:4D
            X509v3 Authority Key Identifier:
                keyid:85:F4:56:60:88:74:5A:DB:B1:E0:92:E7:B2:2A:B6:6D:A1:83:56:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1ABAB5B5F1D63078CFD7CD91F85B287F557685B0AD5D26D654669F48D9601B7/0/85F4566088745ADBB1E092E7B22AB66DA1835628.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85F4566088745ADBB1E092E7B22AB66DA1835628.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1ABAB5B5F1D63078CFD7CD91F85B287F557685B0AD5D26D654669F48D9601B7/0/3138312e3139312e3132342e302f32322d3234203d3e20323635373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:26:f2:fe:52:85:51:76:d1:6d:ce:24:df:0d:70:0f:3c:cd:
         ad:b2:27:c9:d8:d7:9d:c1:fe:2d:61:01:3a:01:6f:9f:b1:93:
         2c:3b:f5:7f:ac:cb:5e:e1:5c:82:9b:d8:29:27:92:27:73:c6:
         db:8c:a2:70:78:df:6d:59:f8:3d:ce:f2:53:80:51:e7:1b:0a:
         17:e6:bd:2c:ae:85:6d:bb:31:50:b9:a6:ff:52:56:7d:15:20:
         09:40:f6:8b:31:31:42:e5:fc:94:a0:b5:77:7e:49:a9:45:e9:
         40:fe:d8:26:31:d4:11:06:97:89:d7:01:ea:cc:73:ec:d2:0a:
         35:cd:94:d8:40:98:ac:4d:a1:45:32:a5:18:de:a5:57:00:f4:
         9b:e7:9c:9d:cc:27:f0:e5:62:fd:59:59:c6:a0:61:3c:36:c9:
         00:ff:af:6d:ea:ac:1a:b0:22:c6:25:9c:24:09:be:19:cc:17:
         5d:38:fe:54:8b:d6:d3:be:a6:60:19:e6:df:20:bd:18:28:92:
         91:45:55:eb:79:84:1d:69:03:39:7a:c5:f8:2e:7f:b0:74:71:
         ed:b7:e5:75:2a:90:39:7c:ed:0c:dc:7d:83:10:0d:99:69:4f:
         23:09:3e:f3:45:83:34:48:c8:43:6e:54:7e:37:cf:b6:85:18:
         45:8a:88:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org