Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/3138312e3139312e38302e302f32322d3234203d3e20323635373930.roa
File:                     3138312e3139312e38302e302f32322d3234203d3e20323635373930.roa (raw, json)
Hash identifier:          PG/xt1VwTiDpfN2YIppu4LkuSJykKlsFfMn34To4mbU=
Subject key identifier:   DB:59:BD:B1:28:6E:AD:F9:05:48:DA:5C:BE:D8:EF:3D:90:EA:3D:1C
Certificate issuer:       /CN=D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A
Certificate serial:       6BDFF18F6DB15203E6BC68F511F85E8CA55CC8B1
Authority key identifier: D5:FA:C1:4B:3F:2B:69:C2:46:42:E1:33:8A:FE:00:4B:BF:C2:B5:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/3138312e3139312e38302e302f32322d3234203d3e20323635373930.roa
Signing time:             Tue 05 Mar 2024 17:47:33 +0000
ROA not before:           Tue 05 Mar 2024 17:42:33 +0000
ROA not after:            Tue 04 Mar 2025 17:47:33 +0000
asID:                     265790
IP address blocks:        181.191.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:df:f1:8f:6d:b1:52:03:e6:bc:68:f5:11:f8:5e:8c:a5:5c:c8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A
        Validity
            Not Before: Mar  5 17:42:33 2024 GMT
            Not After : Mar  4 17:47:33 2025 GMT
        Subject: CN=DB59BDB1286EADF90548DA5CBED8EF3D90EA3D1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:21:85:05:b0:f7:ef:e6:3f:af:ef:bf:b9:
                    a0:06:b8:4d:b1:40:b6:d7:cf:49:4d:a9:f0:ca:69:
                    39:4a:83:b8:fa:07:6e:71:d0:c4:cf:30:47:fa:96:
                    a3:80:6e:ed:fe:72:0b:2a:0f:e7:22:2e:92:b7:77:
                    24:e4:a2:e5:9d:f8:19:ef:06:86:ea:d9:b1:87:ec:
                    f1:ca:cd:a9:89:7a:46:d0:a6:cb:41:cb:ed:65:e0:
                    bb:91:73:01:b3:46:41:7e:18:a0:cd:86:c7:b4:47:
                    32:dd:4c:96:95:55:51:6a:de:cf:b8:8a:bb:c1:57:
                    87:42:ec:8f:90:07:fc:b7:b2:48:a2:72:b2:d9:c4:
                    c7:1b:70:1a:b6:52:fd:c0:9b:19:0c:62:bb:a9:b4:
                    24:a6:ba:c9:6d:90:e9:ec:df:d4:df:e5:59:68:12:
                    54:8f:05:16:75:c6:e4:21:d1:ca:88:83:c5:2e:d8:
                    9f:af:11:a5:b8:41:c7:a5:eb:9c:7f:3f:5d:51:0b:
                    9d:39:ef:db:e1:28:c1:60:79:5b:3f:b5:88:e0:b3:
                    2a:17:19:f7:68:69:75:fb:42:35:7e:1b:24:95:c9:
                    d7:6d:d6:85:19:c8:02:39:a4:6f:bd:ce:39:2b:35:
                    23:2f:5c:0f:dc:56:c4:a8:da:58:f8:ac:f7:51:26:
                    05:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:59:BD:B1:28:6E:AD:F9:05:48:DA:5C:BE:D8:EF:3D:90:EA:3D:1C
            X509v3 Authority Key Identifier:
                keyid:D5:FA:C1:4B:3F:2B:69:C2:46:42:E1:33:8A:FE:00:4B:BF:C2:B5:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5FAC14B3F2B69C24642E1338AFE004BBFC2B59A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D25856337EA42E80A5B896959C01DDF39D4059364D92807071347A83FE05A549/0/3138312e3139312e38302e302f32322d3234203d3e20323635373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:34:a3:54:8b:24:c2:76:0d:71:63:8c:8d:b5:ab:d0:ef:5b:
         4b:6a:00:eb:f1:06:ff:3e:fe:c6:74:58:11:ee:07:dd:5e:b3:
         fa:bb:a0:da:eb:ae:7c:54:27:a6:67:9f:bb:a0:53:6e:b8:f5:
         5e:16:76:04:61:58:cf:94:bb:12:a1:f3:8b:b0:cd:5d:16:43:
         06:d1:2d:01:9f:7d:5f:eb:7d:0d:20:0a:0a:42:35:67:07:6b:
         c6:6c:37:c8:bb:e5:bc:8c:3e:cf:80:9e:fc:ef:66:cf:ce:26:
         24:c3:b0:0a:63:d9:18:48:7a:c8:e4:a9:da:85:ac:bc:e3:50:
         61:f5:05:a9:02:bb:18:a4:2f:a5:55:78:39:46:0c:4b:ca:d3:
         48:26:60:2d:28:97:21:eb:59:bf:b3:fc:a2:de:0c:c1:64:97:
         3e:2c:68:65:1c:64:ea:36:49:4f:5f:8d:85:3e:f8:c4:1b:67:
         89:29:e8:93:8c:ec:3b:1e:45:df:ac:7e:75:be:47:df:5b:3e:
         60:bf:63:41:1f:ea:71:00:4b:81:94:8a:85:1a:99:18:61:b5:
         8c:51:6c:89:fe:7b:4d:a6:9c:30:b1:63:5b:13:91:2e:df:a6:
         5d:0c:63:d4:66:6e:af:e3:cd:55:54:86:22:f0:51:07:4a:c7:
         ff:fa:13:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:28 2024 by rpki-client on console-fra.rpki-client.org