Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa
File:                     3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa (raw, json)
Hash identifier:          DVmw+iYm1oA92UXy8A+0cn2pbJE/jctDKdy5FiTgHW8=
Subject key identifier:   F1:79:A3:DD:0F:ED:1E:A9:33:BD:53:D5:76:0A:23:F9:BE:C3:AF:9D
Certificate issuer:       /CN=8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7
Certificate serial:       7FD1D33150F765F99B4E4BB60FED58A5E5C6CC96
Authority key identifier: 82:25:D5:85:11:74:DA:30:BC:CC:AA:6A:CF:25:AB:C8:BB:FE:92:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa
Signing time:             Tue 05 Mar 2024 18:09:29 +0000
ROA not before:           Tue 05 Mar 2024 18:04:29 +0000
ROA not after:            Tue 04 Mar 2025 18:09:29 +0000
asID:                     271855
IP address blocks:        181.191.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d1:d3:31:50:f7:65:f9:9b:4e:4b:b6:0f:ed:58:a5:e5:c6:cc:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7
        Validity
            Not Before: Mar  5 18:04:29 2024 GMT
            Not After : Mar  4 18:09:29 2025 GMT
        Subject: CN=F179A3DD0FED1EA933BD53D5760A23F9BEC3AF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:36:1b:9d:d9:36:7e:e1:b8:fb:06:eb:63:
                    e5:0e:6f:d8:4a:62:d6:8a:e2:14:f0:3e:69:4b:88:
                    d7:cf:4c:17:0c:3d:0f:3b:08:09:29:cc:68:ed:ef:
                    75:6c:76:1f:f9:b9:68:5d:fc:62:11:1d:42:d7:00:
                    e0:41:54:ef:19:26:06:c1:61:c8:07:92:3f:2d:92:
                    51:27:1e:61:58:61:a5:aa:30:06:e6:b7:8b:14:2f:
                    22:84:05:bd:59:81:5b:d3:a7:d4:23:cb:55:90:50:
                    ca:ef:ad:12:96:84:7a:27:24:49:8d:c4:f1:5b:79:
                    af:4d:66:33:8a:c9:73:a3:7a:1a:aa:25:8d:57:95:
                    4f:b1:a1:ec:ae:a7:cd:01:78:7e:b0:b4:2e:e5:50:
                    70:84:bc:95:9c:91:58:ae:41:c4:f7:5f:33:7e:0c:
                    e8:89:2b:ee:9b:45:27:93:cb:56:c0:17:29:c1:6c:
                    82:80:f6:1c:f3:bc:4d:15:84:64:c9:07:22:30:20:
                    78:95:75:a6:bb:6b:77:ec:82:a5:e4:f7:99:44:8e:
                    cd:4f:2f:e1:36:c9:82:02:fa:97:0c:2c:00:f8:d7:
                    f6:c1:98:9b:83:a9:00:2c:4a:d5:aa:24:99:1e:02:
                    0d:b5:dd:3f:b8:68:a3:40:90:85:46:0c:c9:00:0d:
                    32:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:79:A3:DD:0F:ED:1E:A9:33:BD:53:D5:76:0A:23:F9:BE:C3:AF:9D
            X509v3 Authority Key Identifier:
                keyid:82:25:D5:85:11:74:DA:30:BC:CC:AA:6A:CF:25:AB:C8:BB:FE:92:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/3138312e3139312e3232342e302f32322d3234203d3e20323731383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:e2:2c:2d:6a:ef:c9:d2:2b:81:ea:f4:e1:9e:b4:4d:5c:13:
         e3:a2:de:6a:a2:40:a9:b8:a0:ae:06:be:29:2f:75:a8:50:01:
         12:49:7a:81:4e:33:fa:c9:f5:57:d3:c9:12:06:b7:1a:4a:b1:
         18:0c:a9:04:ac:8a:30:50:d9:cc:79:67:e9:a7:f8:bb:a6:ad:
         84:98:36:82:74:87:2f:bf:80:73:04:06:b7:b0:7d:52:ba:c7:
         fd:19:9c:ad:60:7f:92:11:ae:f1:b9:3e:a4:28:8b:35:8a:4d:
         21:a2:52:94:25:98:ab:21:63:45:e1:73:ff:4a:76:b5:a9:f0:
         c5:f9:b2:63:64:8d:32:78:44:03:e4:6e:c1:dc:78:43:3f:d0:
         87:98:4d:c9:6d:92:1a:bd:06:79:93:df:82:e1:fe:cf:d3:ce:
         f4:82:4d:10:97:98:d2:04:d9:38:85:98:b1:3e:6b:20:98:a3:
         e4:78:a4:30:db:2b:54:39:ee:a9:b5:80:d5:b6:d4:e8:b9:9b:
         b1:c3:9b:82:56:47:01:dd:2b:d4:8d:97:44:bf:4a:65:de:e8:
         5b:7e:9e:e3:aa:b5:bc:a3:fe:88:b6:e9:d2:4d:74:bd:6f:da:
         3a:11:8d:99:56:39:1e:f8:21:cd:14:60:97:47:19:c0:f4:3a:
         8e:a5:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:33 2024 by rpki-client on console-fra.rpki-client.org