Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37382e302f32342d3234203d3e20323731393137.roa
File:                     3138312e3138392e37382e302f32342d3234203d3e20323731393137.roa (raw, json)
Hash identifier:          lJ55Va8DOO/GrG67mR6bU4NXSxRrRmwYZ5cTVvDEobI=
Subject key identifier:   B5:86:C4:0C:8B:E6:2C:E9:ED:3D:05:1C:26:05:A5:CE:6B:C4:D4:2D
Certificate issuer:       /CN=1A90820403E94C622A991DBEB877EB7197198430
Certificate serial:       76630423ED3CABB0DF66CD75BC46CF239D67014B
Authority key identifier: 1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37382e302f32342d3234203d3e20323731393137.roa
Signing time:             Fri 24 May 2024 15:00:00 +0000
ROA not before:           Fri 24 May 2024 14:55:00 +0000
ROA not after:            Fri 23 May 2025 15:00:00 +0000
asID:                     271917
IP address blocks:        181.189.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:63:04:23:ed:3c:ab:b0:df:66:cd:75:bc:46:cf:23:9d:67:01:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90820403E94C622A991DBEB877EB7197198430
        Validity
            Not Before: May 24 14:55:00 2024 GMT
            Not After : May 23 15:00:00 2025 GMT
        Subject: CN=B586C40C8BE62CE9ED3D051C2605A5CE6BC4D42D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:d2:d7:f0:8f:f0:3f:34:19:cc:06:61:3e:
                    aa:67:b3:9b:34:7c:1b:ed:de:c0:57:cf:49:50:e0:
                    ef:b8:eb:18:2d:23:1d:52:1a:a1:a9:e7:14:54:43:
                    cc:b5:86:ec:aa:70:05:c6:e8:7f:5d:d0:82:f6:28:
                    33:d4:ca:c5:df:e9:8b:77:b9:24:41:52:fa:64:35:
                    02:7e:09:47:62:52:63:9d:b7:f4:ee:e4:e7:11:db:
                    9f:d5:1f:38:98:0b:ab:bc:95:77:59:a7:96:9f:8d:
                    06:f2:e8:5c:52:8f:d3:2b:b1:c0:30:d2:a1:92:41:
                    59:74:de:de:0c:f6:b4:2c:d9:98:1d:9a:45:6a:b4:
                    0a:77:c0:8a:81:12:ba:a2:5e:85:10:e6:75:af:56:
                    57:3a:25:9c:0f:ea:d7:cd:45:f1:d4:e8:42:26:e4:
                    0d:3d:68:38:1b:dc:18:97:93:d5:02:1e:49:21:85:
                    d5:31:80:82:d8:be:a2:4a:26:56:14:9f:5e:80:72:
                    28:91:13:97:25:65:9b:bd:23:44:76:dc:24:d9:e2:
                    84:06:23:ef:31:17:c9:77:70:da:ec:40:6b:27:cb:
                    88:1e:4e:76:97:52:9f:39:d2:3c:62:2d:e2:41:7b:
                    99:23:12:b6:2c:d6:fd:46:e6:90:9d:7e:45:a4:fe:
                    a3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:86:C4:0C:8B:E6:2C:E9:ED:3D:05:1C:26:05:A5:CE:6B:C4:D4:2D
            X509v3 Authority Key Identifier:
                keyid:1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37382e302f32342d3234203d3e20323731393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:7c:1a:6f:72:70:42:8a:67:c5:8a:fa:3e:d2:bd:fc:2c:51:
         ff:4e:58:5d:96:06:5c:50:9a:1d:af:5b:42:e5:59:c5:cc:fc:
         e2:67:0a:2f:f7:46:68:52:aa:69:e4:68:98:27:ce:04:03:c8:
         24:04:1b:7b:be:24:cf:55:6d:43:f3:bb:83:0b:37:58:5b:42:
         b2:65:cf:2f:6b:c5:75:a8:ae:37:81:cf:4d:74:6f:ec:05:fa:
         e5:99:7e:c8:33:02:c6:5d:f6:01:15:d3:05:18:91:99:c9:f9:
         b2:c7:da:73:f7:ea:3b:43:ba:20:f6:46:91:0c:01:68:d2:8f:
         b5:36:02:72:f5:ea:94:98:d1:a9:6c:9a:9a:49:0c:d7:7a:0e:
         a5:4a:37:b8:7a:ce:48:17:c8:d8:0a:29:7a:ff:1d:54:97:65:
         2b:9c:1f:f5:9e:03:6e:9d:d2:ee:40:1c:e9:2e:2a:ee:e2:d3:
         bf:8c:40:4b:1e:49:a2:c8:da:1f:7b:a7:28:23:cc:0c:32:44:
         19:e5:b9:11:8b:85:78:0c:0a:b4:60:fa:3f:fd:c7:ac:4a:43:
         14:d1:d9:0c:56:32:ea:a2:2c:1f:59:29:48:58:23:38:c8:a4:
         67:f0:4f:a5:31:97:ff:bd:5a:ce:29:47:b8:8b:ca:62:e4:1e:
         57:9b:da:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org