Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/3138312e3232342e31362e302f32322d3234203d3e20323635353836.roa
File:                     3138312e3232342e31362e302f32322d3234203d3e20323635353836.roa (raw, json)
Hash identifier:          X4qYskBL5q+uuTxxjfEFFcaph/Fsfl7gkIoGLMEsXYM=
Subject key identifier:   AD:C1:A2:39:1D:B0:1F:EF:B9:F3:A7:7D:4F:71:44:45:B5:6C:1E:3C
Certificate issuer:       /CN=9C464528F67B00410467C3FEDE9E1DD404D5EA8B
Certificate serial:       7C2E15FEB135008FDDDF8045C2575151218ED682
Authority key identifier: 9C:46:45:28:F6:7B:00:41:04:67:C3:FE:DE:9E:1D:D4:04:D5:EA:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/3138312e3232342e31362e302f32322d3234203d3e20323635353836.roa
Signing time:             Tue 05 Mar 2024 18:14:22 +0000
ROA not before:           Tue 05 Mar 2024 18:09:22 +0000
ROA not after:            Tue 04 Mar 2025 18:14:22 +0000
asID:                     265586
IP address blocks:        181.224.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2e:15:fe:b1:35:00:8f:dd:df:80:45:c2:57:51:51:21:8e:d6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C464528F67B00410467C3FEDE9E1DD404D5EA8B
        Validity
            Not Before: Mar  5 18:09:22 2024 GMT
            Not After : Mar  4 18:14:22 2025 GMT
        Subject: CN=ADC1A2391DB01FEFB9F3A77D4F714445B56C1E3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bf:d5:f8:58:dc:52:45:a0:08:af:c7:38:0f:
                    a1:b1:84:9b:55:fc:b4:04:e2:e5:04:16:f8:de:34:
                    4c:0f:df:c5:52:e5:9f:33:e2:8e:47:2d:03:30:93:
                    16:e7:6d:f1:10:c3:fb:11:6b:ed:6d:ef:fe:d1:06:
                    35:40:e9:60:02:c1:74:8b:40:31:22:b8:95:26:a9:
                    8e:48:9e:28:84:46:ba:f7:56:f7:1f:3b:16:ed:44:
                    56:b5:96:b9:ef:ab:d5:b6:43:08:a8:c6:85:fc:15:
                    e2:8d:7a:d1:1c:43:08:e3:ed:d6:3a:ac:51:0b:81:
                    4b:35:3f:80:48:54:a4:7b:e0:73:fd:9e:92:9d:7e:
                    2b:e8:13:00:30:8a:0e:81:4a:d6:f8:8b:de:5b:1a:
                    33:fa:b1:00:e0:8e:5d:cc:2b:7d:54:6d:73:14:90:
                    82:59:51:13:15:11:d7:1e:45:64:5e:4e:4e:45:8b:
                    54:64:14:00:47:ce:f8:8b:2c:c5:ab:ba:f4:df:d6:
                    ef:5b:54:35:a9:f9:3c:70:61:e9:06:fb:c2:4f:8d:
                    34:73:28:59:bc:12:d8:89:0e:30:ca:b0:c3:a7:a3:
                    19:f1:ea:7c:5c:d5:7d:82:b7:eb:0f:c0:f3:2c:8b:
                    2a:d4:48:38:b1:68:fb:89:68:8d:b1:22:33:7d:8d:
                    87:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C1:A2:39:1D:B0:1F:EF:B9:F3:A7:7D:4F:71:44:45:B5:6C:1E:3C
            X509v3 Authority Key Identifier:
                keyid:9C:46:45:28:F6:7B:00:41:04:67:C3:FE:DE:9E:1D:D4:04:D5:EA:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C464528F67B00410467C3FEDE9E1DD404D5EA8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D991C1ABB7D7CC748E3105F7C3797DC577B3B32E8D488CD78563CF52DE76AAE8/0/3138312e3232342e31362e302f32322d3234203d3e20323635353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:f2:62:29:86:a2:14:02:8f:23:c8:10:96:47:a8:c5:39:17:
         04:00:78:bf:5a:2b:09:3e:cf:5e:3e:35:12:c3:e2:f0:a2:1c:
         0f:bb:4e:21:38:ba:c3:d0:b9:db:2f:b9:26:26:b9:e2:54:58:
         01:1c:43:75:c8:89:f0:8e:02:27:9d:0b:b9:e4:d9:69:b3:7c:
         70:f2:28:c6:d6:85:5e:fa:fb:2b:05:97:dd:df:8e:3f:91:ad:
         15:2c:8e:73:c9:ee:bd:e5:09:76:6e:6a:10:b5:4e:e5:19:ec:
         db:40:86:0f:5f:58:c4:e7:8a:90:1f:57:f3:fa:f3:2b:b5:ab:
         f0:a5:39:6b:a3:ff:3b:1b:cc:5a:19:60:1d:5c:0d:fc:23:dc:
         58:86:bf:51:a5:64:d7:91:78:73:74:15:e4:3b:4e:6f:52:74:
         21:8c:fc:5f:38:04:66:bd:55:5d:4d:ea:39:8c:58:ae:82:45:
         86:2b:52:b8:ed:60:ea:dc:27:67:eb:32:98:73:1b:85:d8:d3:
         5b:21:3e:78:a7:91:ba:f3:f4:8b:1e:58:d9:c6:00:68:bf:b3:
         12:b5:78:bc:08:1b:3e:a2:19:42:91:47:39:26:d8:e6:e4:ad:
         d2:01:02:db:c9:c6:57:e7:6d:47:30:05:5b:9e:40:bc:37:59:
         2a:ef:5b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:06 2024 by rpki-client on console-ams.rpki-client.org