Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/3138312e3233332e3138322e302f32332d3234203d3e20323732303338.roa
File:                     3138312e3233332e3138322e302f32332d3234203d3e20323732303338.roa (raw, json)
Hash identifier:          bJ5/I55Qe5Cq/Q0kDTH9OPhgyMQLsm7JT3fY8z/hK4s=
Subject key identifier:   A7:22:99:49:1B:D3:59:06:36:21:C4:94:C4:49:9C:8A:5A:07:83:0C
Certificate issuer:       /CN=FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF
Certificate serial:       2F0ED54A1B50697E24EE4387A2994CD83A4A9B51
Authority key identifier: FD:A5:A3:52:F4:B8:A1:5F:DA:0A:C9:ED:2B:32:89:C3:22:2C:BA:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/3138312e3233332e3138322e302f32332d3234203d3e20323732303338.roa
Signing time:             Tue 05 Mar 2024 18:13:01 +0000
ROA not before:           Tue 05 Mar 2024 18:08:01 +0000
ROA not after:            Tue 04 Mar 2025 18:13:01 +0000
asID:                     272038
IP address blocks:        181.233.182.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0e:d5:4a:1b:50:69:7e:24:ee:43:87:a2:99:4c:d8:3a:4a:9b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF
        Validity
            Not Before: Mar  5 18:08:01 2024 GMT
            Not After : Mar  4 18:13:01 2025 GMT
        Subject: CN=A72299491BD359063621C494C4499C8A5A07830C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:89:bc:c2:93:de:3a:82:90:37:da:e0:00:
                    1a:3e:f7:81:09:96:1c:82:5e:87:ad:cb:5f:80:00:
                    db:11:98:f6:be:4f:1a:6a:fe:76:ef:3f:37:5e:da:
                    95:9c:dd:97:c1:dd:6a:1e:46:b7:64:0c:b8:09:c5:
                    70:84:19:f1:35:01:13:af:57:0c:f6:b1:d6:98:26:
                    94:4a:52:ef:0f:e2:44:2e:6d:dc:79:5e:6c:ab:74:
                    64:16:d6:40:b2:ca:25:29:50:38:84:a1:5a:4f:e9:
                    7d:c2:8e:40:05:c7:48:e8:34:18:c0:9e:00:ed:f5:
                    17:46:3c:ab:e3:ec:c3:3d:be:9c:46:16:e5:db:b6:
                    73:be:b9:cd:22:b4:1d:c6:0f:4e:fb:fb:79:47:1b:
                    3e:fb:7b:47:97:94:23:bb:3f:ec:30:19:71:20:d1:
                    d9:79:92:ef:de:93:8c:09:11:f5:ce:d6:64:2d:86:
                    e5:d7:ee:c6:7a:d3:3c:52:5b:88:06:20:74:87:a8:
                    df:73:ce:41:87:8b:97:23:4a:e7:4a:1d:96:a8:ad:
                    b2:8b:ce:a2:0a:94:7f:b2:37:8d:dd:27:29:b0:0b:
                    22:92:c9:86:60:31:a3:56:f8:a7:fd:7b:68:ce:be:
                    e9:04:0c:52:a6:4d:2f:92:ab:d2:22:3c:fd:e3:fe:
                    c8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:22:99:49:1B:D3:59:06:36:21:C4:94:C4:49:9C:8A:5A:07:83:0C
            X509v3 Authority Key Identifier:
                keyid:FD:A5:A3:52:F4:B8:A1:5F:DA:0A:C9:ED:2B:32:89:C3:22:2C:BA:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/3138312e3233332e3138322e302f32332d3234203d3e20323732303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:7e:2a:8a:ef:8f:4a:95:c6:5f:df:bd:b9:e6:45:ad:73:68:
         1f:66:b2:fe:cb:05:1d:b9:ca:82:d4:25:f9:a6:f4:7f:fe:79:
         f8:6a:f6:07:e5:75:11:62:52:10:69:5f:28:9a:ae:b6:b2:e7:
         98:6e:5e:8d:8a:31:77:0d:9b:7d:36:8f:b0:0d:33:60:83:f4:
         5e:ce:ea:38:18:45:00:b4:ff:42:a0:0e:62:57:2a:36:6a:36:
         92:91:f8:6f:55:f0:8a:27:b1:47:6e:b2:c6:c9:77:ee:bb:21:
         b4:4d:08:df:67:02:04:88:e9:2c:29:0b:d8:c1:09:c1:fd:6b:
         bd:fa:f4:60:04:d9:01:13:a4:ef:b7:56:66:1b:b1:c4:94:33:
         54:c5:19:6f:f2:9e:93:f1:18:db:0a:dc:5f:dd:37:78:a7:c2:
         f1:98:bb:29:a3:31:8d:5f:36:c6:31:dd:ea:a9:32:bf:0f:a1:
         44:2c:f4:65:d9:73:d6:df:ad:58:85:56:2d:c0:24:65:8d:bf:
         26:41:05:3e:a6:9c:31:ed:03:10:84:78:2e:78:cb:28:c2:e2:
         97:48:66:12:59:14:b8:48:7e:ab:1f:ab:ce:ad:30:de:6f:9a:
         48:cd:79:d0:48:66:95:36:d7:be:e2:23:23:0a:53:1c:8f:88:
         8f:a0:09:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:59 2024 by rpki-client on console-fra.rpki-client.org