Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/3138312e3232342e3137332e302f32342d3234203d3e20323633323338.roa
File:                     3138312e3232342e3137332e302f32342d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          dBBf3w6SPvN+6NeQeKG4FSLuhg78DxDlxGpJdQd2QuM=
Subject key identifier:   98:E0:AB:66:E8:BD:EE:64:65:9B:FB:6A:ED:26:B1:88:60:B4:EE:11
Certificate issuer:       /CN=A5277502999C0778EA28B6DE57F3CF801BE9ADDA
Certificate serial:       5C89F0FE39D1D762EBC177A9941D7AEA42C86F36
Authority key identifier: A5:27:75:02:99:9C:07:78:EA:28:B6:DE:57:F3:CF:80:1B:E9:AD:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/3138312e3232342e3137332e302f32342d3234203d3e20323633323338.roa
Signing time:             Fri 30 Aug 2024 14:20:00 +0000
ROA not before:           Fri 30 Aug 2024 14:15:00 +0000
ROA not after:            Fri 29 Aug 2025 14:20:00 +0000
asID:                     263238
IP address blocks:        181.224.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:89:f0:fe:39:d1:d7:62:eb:c1:77:a9:94:1d:7a:ea:42:c8:6f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5277502999C0778EA28B6DE57F3CF801BE9ADDA
        Validity
            Not Before: Aug 30 14:15:00 2024 GMT
            Not After : Aug 29 14:20:00 2025 GMT
        Subject: CN=98E0AB66E8BDEE64659BFB6AED26B18860B4EE11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:29:c1:09:8e:85:3d:70:38:74:93:c4:ed:
                    d6:85:95:d2:7a:be:74:ba:3b:c3:90:3c:c0:b1:08:
                    04:ee:21:57:f8:61:62:38:e9:4e:a0:1e:1a:a4:74:
                    4d:fa:e4:93:54:85:23:f5:6f:32:6e:e1:16:b0:a5:
                    15:ae:a3:65:eb:5b:94:8e:5a:d1:f8:14:e4:f5:e4:
                    48:d0:79:64:27:1c:46:30:0e:d5:60:d1:a0:c2:02:
                    ee:56:b4:af:b7:6a:f5:22:17:1a:6f:9f:98:c7:c5:
                    1d:b9:fb:73:a9:37:16:3e:b7:35:76:dd:28:75:bf:
                    bc:3c:79:32:ea:2c:47:1b:54:c7:32:18:ff:ea:dc:
                    b0:24:72:2a:b3:7d:63:54:e8:2e:fd:df:ac:30:1e:
                    9d:ed:c2:7a:30:1d:fc:3e:0a:df:20:b1:18:c8:b6:
                    5b:b1:d0:12:ad:55:a2:a3:07:44:bd:35:23:8f:71:
                    98:95:4e:d5:3a:e1:ff:11:ce:56:83:07:7e:a6:db:
                    b4:55:e1:b1:30:12:5a:03:e5:e0:68:d5:66:a1:fb:
                    20:5c:94:0e:46:99:99:e3:47:65:33:2c:94:33:34:
                    71:75:1a:af:56:c4:da:8d:88:9b:04:af:66:d1:3b:
                    91:74:02:25:30:6c:58:1e:67:b0:e0:bb:75:b8:ce:
                    a0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E0:AB:66:E8:BD:EE:64:65:9B:FB:6A:ED:26:B1:88:60:B4:EE:11
            X509v3 Authority Key Identifier:
                keyid:A5:27:75:02:99:9C:07:78:EA:28:B6:DE:57:F3:CF:80:1B:E9:AD:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/3138312e3232342e3137332e302f32342d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:1a:56:67:17:83:cb:4c:d1:1a:a4:14:fd:80:ae:0a:ab:02:
         d6:9e:40:22:a3:53:84:4f:b0:b1:37:3e:19:af:d0:89:49:46:
         a7:67:03:78:44:74:24:a3:89:a3:f8:21:7b:6b:20:b4:27:05:
         54:40:54:fe:42:80:9d:40:b4:53:fc:af:13:98:6b:09:58:86:
         59:5f:5f:53:4a:ee:ec:7f:22:4f:56:63:b8:ea:40:e5:ad:ff:
         ed:b4:8d:d4:18:82:83:f5:eb:27:f7:49:6f:ed:1e:a0:f1:59:
         86:99:a7:d2:66:7e:39:9d:72:f3:f6:d2:a6:c0:2b:d3:a4:29:
         b7:80:b2:33:ba:96:14:1c:fc:b1:4e:ab:36:e3:84:67:b4:85:
         d4:2d:b4:a5:25:05:24:0c:9f:e1:c1:f8:06:28:43:db:53:93:
         d7:16:d6:e0:9b:04:f3:67:80:77:f0:b0:f9:a7:d8:68:f0:e1:
         50:d7:03:07:69:3c:a1:a2:66:32:82:68:ed:f9:1f:6b:7c:c0:
         c8:5b:8d:47:d8:6e:62:ee:cc:02:39:98:87:ad:72:98:58:49:
         77:a9:73:ff:76:e9:b6:dc:ec:eb:15:43:0e:82:f7:11:a8:a7:
         22:c2:bc:d6:0b:ab:78:b2:52:fb:82:fc:05:57:60:e0:4e:80:
         c0:82:30:5c
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUXInw/jnR12LrwXeplB166kLIbzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUyNzc1MDI5OTlDMDc3OEVBMjhCNkRFNTdGM0NGODAx
QkU5QUREQTAeFw0yNDA4MzAxNDE1MDBaFw0yNTA4MjkxNDIwMDBaMDMxMTAvBgNV
BAMTKDk4RTBBQjY2RThCREVFNjQ2NTlCRkI2QUVEMjZCMTg4NjBCNEVFMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjkSnBCY6FPXA4dJPE7daFldJ6
vnS6O8OQPMCxCATuIVf4YWI46U6gHhqkdE365JNUhSP1bzJu4RawpRWuo2XrW5SO
WtH4FOT15EjQeWQnHEYwDtVg0aDCAu5WtK+3avUiFxpvn5jHxR25+3OpNxY+tzV2
3Sh1v7w8eTLqLEcbVMcyGP/q3LAkciqzfWNU6C7936wwHp3twnowHfw+Ct8gsRjI
tlux0BKtVaKjB0S9NSOPcZiVTtU64f8RzlaDB36m27RV4bEwEloD5eBo1Wah+yBc
lA5GmZnjR2UzLJQzNHF1Gq9WxNqNiJsEr2bRO5F0AiUwbFgeZ7Dgu3W4zqB1AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUmOCrZui97mRlm/tq7SaxiGC07hEwHwYDVR0j
BBgwFoAUpSd1ApmcB3jqKLbeV/PPgBvprdowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOUFDNjAxQzcyNzA0NUJBMDc4NUIyMjZFNzQ4NjdDQ0M0
MEVDRkYwNjIwNDIyQjAzODhFM0M4REU1MjlCNDA5LzAvQTUyNzc1MDI5OTlDMDc3
OEVBMjhCNkRFNTdGM0NGODAxQkU5QUREQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTI3NzUwMjk5OUMwNzc4RUEy
OEI2REU1N0YzQ0Y4MDFCRTlBRERBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDlBQzYwMUM3MjcwNDVCQTA3ODVCMjI2RTc0ODY3Q0NDNDBFQ0ZGMDYy
MDQyMkIwMzg4RTNDOERFNTI5QjQwOS8wLzMxMzgzMTJlMzIzMjM0MmUzMTM3MzMy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzMjMzMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1
4K0wDQYJKoZIhvcNAQELBQADggEBABcaVmcXg8tM0RqkFP2ArgqrAtaeQCKjU4RP
sLE3Phmv0IlJRqdnA3hEdCSjiaP4IXtrILQnBVRAVP5CgJ1AtFP8rxOYawlYhllf
X1NK7ux/Ik9WY7jqQOWt/+20jdQYgoP16yf3SW/tHqDxWYaZp9JmfjmdcvP20qbA
K9OkKbeAsjO6lhQc/LFOqzbjhGe0hdQttKUlBSQMn+HB+AYoQ9tTk9cW1uCbBPNn
gHfwsPmn2Gjw4VDXAwdpPKGiZjKCaO35H2t8wMhbjUfYbmLuzAI5mIetcphYSXep
c/926bbc7OsVQw6C9xGopyLCvNYLq3iyUvuC/AVXYOBOgMCCMFw=
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:51 2024 by rpki-client on console-ams.rpki-client.org