Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/3138312e3139322e36342e302f32302d3234203d3e203532343139.roa
File:                     3138312e3139322e36342e302f32302d3234203d3e203532343139.roa (raw, json)
Hash identifier:          1v8gYgCNyg3D9HBr5SQ8pXNn5rjjv0i+HeQy7PI26zA=
Subject key identifier:   1C:E6:AB:1D:95:E7:05:E2:10:91:6F:4C:54:81:CA:19:D8:64:2A:43
Certificate issuer:       /CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
Certificate serial:       600D96206FD64EA9D787A09688CB1634E2AC0E9D
Authority key identifier: D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/3138312e3139322e36342e302f32302d3234203d3e203532343139.roa
Signing time:             Tue 05 Mar 2024 18:01:18 +0000
ROA not before:           Tue 05 Mar 2024 17:56:18 +0000
ROA not after:            Tue 04 Mar 2025 18:01:18 +0000
asID:                     52419
IP address blocks:        181.192.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0d:96:20:6f:d6:4e:a9:d7:87:a0:96:88:cb:16:34:e2:ac:0e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
        Validity
            Not Before: Mar  5 17:56:18 2024 GMT
            Not After : Mar  4 18:01:18 2025 GMT
        Subject: CN=1CE6AB1D95E705E210916F4C5481CA19D8642A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:29:0b:5e:a9:93:51:9f:b5:0b:ce:27:ac:db:
                    fa:74:78:9f:22:98:7b:a3:70:80:17:79:95:08:00:
                    9a:dc:58:d8:d1:9d:b4:57:a2:ab:36:fd:df:35:c4:
                    30:85:e6:ec:81:b1:d4:c9:09:67:f2:48:ea:1b:7e:
                    c8:6c:43:fd:5f:fa:c8:0a:ad:d0:f6:d1:18:89:99:
                    9b:ee:e0:85:87:47:9a:fe:d6:b3:45:f9:b3:df:bb:
                    d1:5c:01:04:3c:ea:7b:39:e0:83:94:7e:c5:ab:05:
                    d2:d6:4e:d6:79:de:af:11:64:8a:da:f8:23:a0:a5:
                    05:27:2b:eb:fb:05:9a:7b:df:55:a2:73:76:de:de:
                    61:d0:7c:a6:64:64:75:f8:93:23:99:e3:a0:cc:2d:
                    d8:64:79:d5:5c:b4:29:40:04:7b:2b:00:b5:f6:bc:
                    d2:08:32:21:1e:7d:5b:1b:21:e1:72:b3:3c:6c:4f:
                    e3:6f:25:ab:9c:83:4a:31:7a:d5:ac:f1:d4:8b:fd:
                    6e:35:50:8d:dc:f9:b6:4e:31:cf:a9:6a:21:5a:d0:
                    d8:78:2c:47:3b:ad:9d:ed:32:c0:78:72:7e:43:4f:
                    bf:7c:c2:3d:88:ac:1a:32:e8:8f:39:23:f8:06:c8:
                    00:91:05:24:4c:3d:47:7b:8c:dd:bc:6d:75:9b:5b:
                    02:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E6:AB:1D:95:E7:05:E2:10:91:6F:4C:54:81:CA:19:D8:64:2A:43
            X509v3 Authority Key Identifier:
                keyid:D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/3138312e3139322e36342e302f32302d3234203d3e203532343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d1:65:bb:57:ce:6a:02:24:63:23:0c:a5:c1:b8:b0:a5:6b:32:
         d9:04:cb:08:0a:2a:04:9a:48:20:f0:e7:d4:4d:3f:66:5b:47:
         d0:dc:fd:4b:1d:76:09:15:c6:0e:ea:60:80:23:af:d0:2d:c1:
         26:7d:1a:26:43:9c:b6:79:43:0d:84:cb:37:74:28:06:a2:f6:
         8f:1b:b5:4e:fc:ad:53:5b:30:b7:ba:55:4a:d8:60:ad:51:91:
         81:c5:2f:0d:53:62:09:a3:74:93:13:77:83:b5:7c:d7:8e:d9:
         4f:ec:9e:9b:46:15:a9:34:89:e4:7d:10:56:26:95:a0:d2:1d:
         d9:e8:85:f0:97:cc:45:5b:f9:bb:6e:1c:d3:75:4b:9e:7a:46:
         39:62:79:88:d3:2a:44:ab:ea:9e:8d:11:f0:27:45:ff:c1:10:
         3d:e8:74:92:7f:df:98:df:c4:5b:22:b9:cd:cd:20:e7:18:a7:
         2f:d6:8f:c6:6e:6d:6f:04:71:00:43:17:cb:46:cf:cc:5b:78:
         fe:e6:c0:5c:03:e0:78:d3:fd:c7:f0:b4:d5:8f:b0:78:d0:5a:
         4a:d8:b3:a1:ea:c2:7a:b0:86:01:4c:35:9a:93:a6:af:e4:b4:
         b1:5d:b7:42:27:e6:9a:45:ce:5a:5f:2d:3d:55:64:37:de:bd:
         db:52:b7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org