Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37372e302f32342d3234203d3e20323731393137.roa
File:                     3138312e3138392e37372e302f32342d3234203d3e20323731393137.roa (raw, json)
Hash identifier:          Y9KlrT9qn8DJOa1TRHzJcKPfYfNv3/51EO5bpTxX1ZA=
Subject key identifier:   18:36:40:EC:B8:C5:5F:1B:0B:1C:4B:36:2D:22:39:FA:2E:FB:F7:70
Certificate issuer:       /CN=1A90820403E94C622A991DBEB877EB7197198430
Certificate serial:       25EC055333ADFA6FCD2266029952EDA5E43E3E49
Authority key identifier: 1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37372e302f32342d3234203d3e20323731393137.roa
Signing time:             Fri 24 May 2024 15:00:01 +0000
ROA not before:           Fri 24 May 2024 14:55:01 +0000
ROA not after:            Fri 23 May 2025 15:00:01 +0000
asID:                     271917
IP address blocks:        181.189.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ec:05:53:33:ad:fa:6f:cd:22:66:02:99:52:ed:a5:e4:3e:3e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90820403E94C622A991DBEB877EB7197198430
        Validity
            Not Before: May 24 14:55:01 2024 GMT
            Not After : May 23 15:00:01 2025 GMT
        Subject: CN=183640ECB8C55F1B0B1C4B362D2239FA2EFBF770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b9:ad:ef:ad:55:39:a6:de:9f:e6:f3:d3:3c:
                    d0:f8:cc:00:d9:7f:53:d0:72:7c:fb:a1:35:67:84:
                    a2:46:91:d0:ce:ed:d2:f8:0b:53:df:bb:b6:c9:a7:
                    94:a1:d8:f5:cf:e6:eb:df:3f:84:1a:b4:bd:a4:d5:
                    ba:3e:c5:a3:79:f9:73:06:b5:2d:4a:f8:3b:67:02:
                    c0:17:e0:c7:cc:b7:dd:f1:4b:5d:12:b8:07:d5:a0:
                    4d:2d:e3:37:e6:74:65:23:38:b2:e7:21:6b:fe:09:
                    22:c3:db:fc:2c:bd:db:57:de:bc:0c:b7:b5:59:7c:
                    c8:f9:1e:fe:cb:2f:84:e4:5c:68:25:56:c7:9d:8a:
                    28:a0:71:cb:9f:70:57:39:eb:9d:77:6b:72:b6:9f:
                    32:fb:34:90:29:c3:83:2f:a3:36:c5:36:0d:0e:18:
                    ab:d3:50:1f:6a:2e:21:cc:ae:b5:3c:23:b0:1a:05:
                    a0:e1:ba:ed:52:74:bd:25:42:de:9b:bc:a4:9b:55:
                    31:95:43:94:14:ba:0b:1b:fc:96:2b:27:ae:1a:18:
                    de:ad:73:4f:26:d9:b7:2d:8e:c8:54:f8:2e:32:5f:
                    4b:19:af:9f:e0:eb:a1:af:7a:21:9e:27:97:e2:ef:
                    58:a3:5e:88:fe:a2:0d:93:5a:28:7d:f1:48:69:4b:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:36:40:EC:B8:C5:5F:1B:0B:1C:4B:36:2D:22:39:FA:2E:FB:F7:70
            X509v3 Authority Key Identifier:
                keyid:1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37372e302f32342d3234203d3e20323731393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:27:0f:2e:7e:67:1b:af:01:32:f0:24:41:4c:85:1f:87:24:
         c9:16:c5:13:2c:65:7f:ab:fd:6b:df:61:3f:2d:8d:3d:4b:c2:
         27:c3:b2:09:d0:74:8a:78:98:8c:10:e2:2c:f0:56:4e:c9:fe:
         f1:00:68:dc:3a:f8:a5:96:de:93:f3:d6:a3:2d:e0:15:98:dd:
         f0:74:8c:17:40:2a:38:f0:4f:4c:5c:8a:bf:a5:b1:c5:4b:f9:
         02:25:0c:81:59:67:f5:a7:e4:36:51:3e:37:a4:58:0f:91:83:
         6e:6b:75:9b:b2:44:ba:53:92:5a:1c:6b:ca:bd:70:56:e6:21:
         a6:2b:4e:bd:ae:9c:c7:91:22:ce:d1:a0:20:58:19:16:1e:bc:
         ef:50:89:36:ba:7b:83:3b:74:76:93:1b:e1:cf:e1:ed:86:57:
         83:8e:22:e1:71:50:3b:4b:69:ed:58:57:f3:5b:51:4e:f2:86:
         78:e5:8e:a9:90:a4:ae:0e:40:52:fa:3e:cf:a5:5f:92:d6:99:
         03:48:2a:d0:a7:3d:fd:cb:4e:c3:25:79:50:6f:35:4f:a8:18:
         1d:74:e3:c2:13:cc:7c:d3:18:1b:df:b3:7c:0e:f9:cb:d8:e2:
         cb:ee:63:6c:19:fc:38:05:6e:18:da:3b:bf:11:2b:df:88:e2:
         0b:08:b0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org