Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37392e302f32342d3234203d3e20323731393137.roa
File:                     3138312e3138392e37392e302f32342d3234203d3e20323731393137.roa (raw, json)
Hash identifier:          pLF1JvmhZbj9PaBVXWKQAHwSorEBtDlUcytai12aAWU=
Subject key identifier:   AE:23:23:21:F6:FA:94:DC:98:52:4C:54:73:38:B3:E4:E2:A1:44:8C
Certificate issuer:       /CN=1A90820403E94C622A991DBEB877EB7197198430
Certificate serial:       2365595587CF677D886FAAA96A800C8208AEB115
Authority key identifier: 1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37392e302f32342d3234203d3e20323731393137.roa
Signing time:             Fri 24 May 2024 15:00:00 +0000
ROA not before:           Fri 24 May 2024 14:55:00 +0000
ROA not after:            Fri 23 May 2025 15:00:00 +0000
asID:                     271917
IP address blocks:        181.189.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:65:59:55:87:cf:67:7d:88:6f:aa:a9:6a:80:0c:82:08:ae:b1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90820403E94C622A991DBEB877EB7197198430
        Validity
            Not Before: May 24 14:55:00 2024 GMT
            Not After : May 23 15:00:00 2025 GMT
        Subject: CN=AE232321F6FA94DC98524C547338B3E4E2A1448C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:72:82:66:76:24:e6:6c:16:98:5f:b2:2b:6e:
                    cf:99:2c:1d:e7:fd:7f:81:d8:77:ad:b5:a3:fb:a4:
                    11:59:1d:9b:73:0d:03:3f:69:a6:ba:ba:06:40:8e:
                    74:01:44:fb:8b:9d:fd:dd:2e:d6:95:12:59:21:4f:
                    6d:70:96:e8:c8:ef:81:72:f6:74:91:a1:1f:f1:9f:
                    15:d2:e8:00:51:8a:a9:02:3e:b9:ab:76:b6:6e:4e:
                    3f:a3:fe:f4:61:02:af:65:ae:11:3e:8f:11:b4:a5:
                    fc:97:91:64:2d:63:1a:ce:01:8f:ad:5d:85:94:ad:
                    67:f9:c5:ce:09:07:0c:20:bb:37:ad:2c:49:95:b9:
                    4d:e2:48:ad:28:a3:26:d3:46:05:b4:4d:fc:63:8d:
                    c6:ed:27:14:8d:71:64:f1:a0:32:17:de:9c:61:91:
                    63:c3:a1:08:e6:50:93:d1:d5:22:b9:fa:94:0b:6e:
                    42:5a:d6:31:90:af:33:1a:bb:8a:5c:25:64:65:eb:
                    83:65:04:25:fd:b8:3e:16:9c:cd:40:a2:33:e2:20:
                    f2:ea:d4:d9:6a:a9:0f:e3:65:83:59:41:b3:59:95:
                    78:88:ae:4c:b5:55:00:a3:3a:b9:22:6d:83:6a:05:
                    5d:f1:85:fa:8a:7f:b4:3d:09:e1:2f:f0:05:d7:e9:
                    f1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:23:23:21:F6:FA:94:DC:98:52:4C:54:73:38:B3:E4:E2:A1:44:8C
            X509v3 Authority Key Identifier:
                keyid:1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37392e302f32342d3234203d3e20323731393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:1c:04:5a:8e:9a:a0:c1:70:67:75:a4:ee:40:dd:ad:fc:74:
         75:5f:56:7c:b6:75:f6:af:21:c6:b0:f3:16:aa:34:44:09:3a:
         cf:56:89:6a:f4:e2:60:3b:61:7e:55:c2:99:30:8c:d2:27:9d:
         4b:62:9e:12:c6:05:2a:68:60:57:3b:d9:8f:ce:d1:9e:54:18:
         55:a2:92:36:e3:ea:f5:4d:91:a6:a1:68:6c:df:da:b5:88:5e:
         c9:2b:a6:78:6e:89:cd:e9:eb:a6:e7:07:db:a8:7d:35:c6:2d:
         4c:9f:ad:eb:d8:87:2a:e7:ce:5b:80:75:be:64:8d:36:51:d4:
         10:1f:1a:ec:47:e7:d0:a9:e6:a9:7d:a7:5d:cd:4f:e6:6a:0b:
         f8:fc:40:e6:95:0b:ca:82:38:af:db:12:6e:ff:99:d6:63:29:
         7a:ee:d2:de:90:7a:cf:58:9b:2e:4b:9a:87:f0:df:da:ca:48:
         65:f3:33:9c:4e:74:dd:7c:c5:25:fa:96:66:2b:d1:f0:af:63:
         d1:d0:64:9d:61:a6:12:e8:fe:0d:64:19:76:94:b4:d9:10:08:
         ec:bd:52:eb:df:69:3e:2f:ea:f7:a7:20:90:3f:9e:56:c5:04:
         49:43:f5:a0:57:6b:5c:8a:87:4d:18:52:22:9a:a1:e7:53:9c:
         f9:db:03:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org