Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3138312e3139392e3132382e302f32302d3230203d3e203332303334.roa
File:                     3138312e3139392e3132382e302f32302d3230203d3e203332303334.roa (raw, json)
Hash identifier:          /zZspczwqZEeavkMEZ6dwVTR9LE2RegSoSSQI2BS1r0=
Subject key identifier:   86:65:EC:E8:41:0F:CC:43:D1:5A:C5:8A:88:51:17:0F:EC:17:FE:C4
Certificate issuer:       /CN=DC553BD05B33548C342568566291E719B4FA73B9
Certificate serial:       3DC01CB3FF2EB5272D154BCC9A9B953A3F54990A
Authority key identifier: DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3138312e3139392e3132382e302f32302d3230203d3e203332303334.roa
Signing time:             Tue 05 Mar 2024 18:06:27 +0000
ROA not before:           Tue 05 Mar 2024 18:01:27 +0000
ROA not after:            Tue 04 Mar 2025 18:06:27 +0000
asID:                     32034
IP address blocks:        181.199.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c0:1c:b3:ff:2e:b5:27:2d:15:4b:cc:9a:9b:95:3a:3f:54:99:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC553BD05B33548C342568566291E719B4FA73B9
        Validity
            Not Before: Mar  5 18:01:27 2024 GMT
            Not After : Mar  4 18:06:27 2025 GMT
        Subject: CN=8665ECE8410FCC43D15AC58A8851170FEC17FEC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:67:0f:d4:b2:d0:a3:68:39:f4:b7:5d:16:dc:
                    3e:1a:56:7b:84:5c:5d:c6:44:03:7c:d8:81:2d:aa:
                    4e:08:82:90:e1:90:dc:e4:c9:57:01:03:81:45:a8:
                    df:e4:81:93:c9:67:c3:45:fb:c0:ff:88:c7:d7:94:
                    10:23:5e:fc:b2:82:45:33:2d:71:33:2a:ce:78:33:
                    9e:cd:3c:17:20:97:97:9a:c4:43:b4:6e:b1:bf:a2:
                    ee:d1:cf:71:bd:6f:7d:69:ea:8e:f3:71:ca:3b:1f:
                    0e:dd:5e:ae:8e:7d:21:93:cf:10:8f:5f:39:b5:a9:
                    e4:68:54:31:65:d1:59:18:8c:6b:ca:2b:eb:da:ce:
                    8b:f7:75:5a:17:7c:a7:33:dc:39:ea:85:6d:41:cd:
                    52:4e:44:7b:2c:a3:b2:28:72:b9:7f:e1:ee:2f:e9:
                    14:b1:c7:71:38:42:8a:a9:3a:84:d6:fe:df:98:94:
                    08:ed:83:84:fd:f7:48:93:f0:0e:a1:b5:a2:6b:ca:
                    6c:c7:58:01:9e:12:3e:71:f7:6a:89:51:09:37:18:
                    23:d2:f1:20:6a:51:a3:62:22:1c:9e:84:d0:32:12:
                    79:ad:0b:c3:08:59:b7:78:72:f5:0b:a7:73:39:69:
                    8f:2b:a9:37:b3:80:d9:70:90:a5:87:7a:6e:04:db:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:65:EC:E8:41:0F:CC:43:D1:5A:C5:8A:88:51:17:0F:EC:17:FE:C4
            X509v3 Authority Key Identifier:
                keyid:DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3138312e3139392e3132382e302f32302d3230203d3e203332303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:ee:9b:d9:7f:bc:0c:60:d8:7d:2f:13:8b:84:0b:6b:85:9b:
         0f:b2:67:72:44:a9:29:32:95:2e:65:fd:18:0b:12:39:a0:0f:
         5f:2a:be:b6:72:01:76:a7:ad:30:6f:40:6e:1a:51:d4:fb:a7:
         58:f7:4b:76:d3:0f:fc:ae:59:8e:9c:68:ff:88:01:e9:5c:a7:
         70:32:cd:22:4b:32:69:67:00:e7:66:06:ee:c2:47:8d:a3:79:
         09:f4:a1:0e:3d:94:d0:11:28:32:07:ed:c6:64:15:ee:63:87:
         e7:5b:6a:c1:90:6d:4f:da:95:5c:63:33:9c:f3:34:0b:22:fb:
         2f:24:d0:c1:6a:19:d6:cf:d7:1c:74:0c:7d:2b:2f:d5:23:8b:
         5c:49:45:a7:79:73:9e:ee:a1:c8:b5:3a:05:b9:e6:d0:4b:5d:
         96:16:24:c2:08:5e:1d:d0:bc:25:d9:05:d2:d7:51:5f:c7:70:
         5d:6e:e1:11:15:07:2f:de:76:0a:59:11:78:59:84:5f:2d:b2:
         14:87:c2:ab:49:f3:fa:90:e4:aa:86:25:4f:05:8f:fa:43:ea:
         f2:58:9e:15:bd:f4:80:a9:92:0c:ce:2e:36:4c:17:a9:f8:7a:
         33:bb:26:bf:f1:77:29:c6:ac:28:de:db:27:9e:4f:c1:c2:5a:
         93:9d:04:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 07:33:44 2024 by rpki-client on console-fra.rpki-client.org