Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/3138312e3232342e3137342e302f32342d3234203d3e20323636393034.roa
File:                     3138312e3232342e3137342e302f32342d3234203d3e20323636393034.roa (raw, json)
Hash identifier:          LhKPY4/JEXsnG5yoDbtwA9K33SNO9Uuwz+So/TK+zfc=
Subject key identifier:   A6:49:D7:09:A3:57:88:6A:23:C5:DF:1F:35:46:1B:5D:33:24:CE:5A
Certificate issuer:       /CN=A5277502999C0778EA28B6DE57F3CF801BE9ADDA
Certificate serial:       642707F716999A19804BF4EC8A9837703CBB0A93
Authority key identifier: A5:27:75:02:99:9C:07:78:EA:28:B6:DE:57:F3:CF:80:1B:E9:AD:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/3138312e3232342e3137342e302f32342d3234203d3e20323636393034.roa
Signing time:             Fri 06 Sep 2024 11:50:00 +0000
ROA not before:           Fri 06 Sep 2024 11:45:00 +0000
ROA not after:            Fri 05 Sep 2025 11:50:00 +0000
asID:                     266904
IP address blocks:        181.224.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:27:07:f7:16:99:9a:19:80:4b:f4:ec:8a:98:37:70:3c:bb:0a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5277502999C0778EA28B6DE57F3CF801BE9ADDA
        Validity
            Not Before: Sep  6 11:45:00 2024 GMT
            Not After : Sep  5 11:50:00 2025 GMT
        Subject: CN=A649D709A357886A23C5DF1F35461B5D3324CE5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0d:7a:c1:39:f8:7a:0c:36:d6:da:d8:e0:b9:
                    dd:38:4a:78:68:a3:1c:b7:d2:d2:8c:45:9d:b5:18:
                    d9:b3:36:5d:19:5a:0b:2b:98:2f:f7:d4:60:67:bf:
                    41:1c:0a:1f:cb:9f:00:c7:44:aa:94:27:a2:a0:4d:
                    8a:bb:ae:ec:38:e2:96:3e:ad:ea:6e:30:61:42:23:
                    7e:06:2a:76:9c:65:ae:e4:d9:12:44:17:b9:07:f6:
                    f4:e6:40:4c:b6:dd:3f:bf:e8:87:00:08:cd:0d:83:
                    78:f0:25:96:f5:48:95:93:0b:57:b6:d5:73:f3:4d:
                    bb:58:f5:8a:19:0a:de:e1:8a:e0:63:6e:96:66:34:
                    95:4f:c7:b1:60:d0:26:1a:8e:e2:8e:9b:e0:86:08:
                    bf:06:21:1d:57:b0:4c:ca:63:39:51:7b:4f:9f:88:
                    5e:8d:da:88:1e:36:48:be:ee:c1:a7:30:89:d6:59:
                    52:b7:e1:d8:34:3d:ad:aa:53:fd:02:a1:51:79:48:
                    5d:7f:a7:71:44:36:52:90:e7:8f:a6:a5:c8:b1:36:
                    05:6d:de:c5:c3:6b:75:e7:69:30:31:62:4f:1f:05:
                    e2:56:bd:08:14:9b:33:89:6c:cc:57:cc:f6:e7:ee:
                    1e:27:9e:f8:61:b0:4d:9f:3c:83:9c:96:81:ec:44:
                    a8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:49:D7:09:A3:57:88:6A:23:C5:DF:1F:35:46:1B:5D:33:24:CE:5A
            X509v3 Authority Key Identifier:
                keyid:A5:27:75:02:99:9C:07:78:EA:28:B6:DE:57:F3:CF:80:1B:E9:AD:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5277502999C0778EA28B6DE57F3CF801BE9ADDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D9AC601C727045BA0785B226E74867CCC40ECFF0620422B0388E3C8DE529B409/0/3138312e3232342e3137342e302f32342d3234203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:42:16:aa:30:fb:b3:70:07:90:fc:aa:91:fe:b7:4c:32:95:
         46:23:0e:ab:30:be:4f:3d:d2:b4:fa:2b:e1:27:b4:e3:57:f6:
         a1:a7:82:2b:12:9f:0b:5f:66:4c:8a:a7:57:77:85:39:d1:37:
         85:52:f2:95:c8:8d:ec:21:fa:1e:91:d2:0c:0e:15:54:43:8e:
         08:b9:01:d4:ee:4e:f7:af:7f:5d:eb:02:92:b6:23:2d:27:73:
         d6:93:d3:05:34:92:0f:ac:d4:3a:ea:28:f4:33:f2:fa:40:91:
         29:f7:72:77:ce:21:f1:54:72:55:41:fc:3c:67:80:70:cf:cf:
         6f:93:0f:9b:78:11:3f:3d:9f:f6:eb:16:34:c2:06:ed:74:84:
         59:a9:e6:7f:cd:13:f1:4a:2b:89:70:0a:61:51:9b:d4:8e:8a:
         7d:c7:25:4a:e0:f8:43:d9:06:a5:a1:41:11:68:ce:0d:f7:19:
         52:83:48:9f:0f:bf:6e:73:e1:25:b7:d7:c7:35:32:bd:80:8a:
         eb:c7:74:57:09:2b:da:94:bf:b7:52:23:98:d4:67:ef:97:5e:
         d0:be:77:08:75:bb:0d:c9:e6:30:bc:9d:9e:ef:8b:ff:4c:fd:
         e1:f5:ed:b3:1e:33:59:9a:ec:22:92:56:dc:44:83:99:db:66:
         62:07:79:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:51 2024 by rpki-client on console-ams.rpki-client.org