Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/3138312e3233322e3233362e302f32322d3234203d3e20323731393434.roa
File:                     3138312e3233322e3233362e302f32322d3234203d3e20323731393434.roa (raw, json)
Hash identifier:          VU+lFlEw2D7tiUnWAH8aKqegntoVaH3ddfuFGCOL2kA=
Subject key identifier:   B8:AD:73:F5:88:34:DC:53:93:1C:02:47:42:D7:15:EA:5A:5F:07:60
Certificate issuer:       /CN=E9083A90EEA0434C3986E9FAB7BF8133F280BD9A
Certificate serial:       589439D85BEB0C4E8BAAE87729DAC4E714383220
Authority key identifier: E9:08:3A:90:EE:A0:43:4C:39:86:E9:FA:B7:BF:81:33:F2:80:BD:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/3138312e3233322e3233362e302f32322d3234203d3e20323731393434.roa
Signing time:             Tue 05 Mar 2024 18:05:19 +0000
ROA not before:           Tue 05 Mar 2024 18:00:19 +0000
ROA not after:            Tue 04 Mar 2025 18:05:19 +0000
asID:                     271944
IP address blocks:        181.232.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:94:39:d8:5b:eb:0c:4e:8b:aa:e8:77:29:da:c4:e7:14:38:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9083A90EEA0434C3986E9FAB7BF8133F280BD9A
        Validity
            Not Before: Mar  5 18:00:19 2024 GMT
            Not After : Mar  4 18:05:19 2025 GMT
        Subject: CN=B8AD73F58834DC53931C024742D715EA5A5F0760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:52:a1:62:e5:ce:00:98:20:3a:67:14:f8:cd:
                    ec:f4:a5:55:43:eb:24:ad:2d:df:f7:7f:60:c9:48:
                    d3:d1:12:e7:55:9e:6d:a1:07:83:85:6b:9c:3b:7f:
                    35:27:5e:54:31:9f:28:b3:68:e3:0f:31:20:6b:f2:
                    54:64:b9:51:98:e8:4f:65:88:99:b6:3c:d8:30:7a:
                    08:06:d3:04:3f:60:bf:b3:b9:3b:25:3c:28:7f:4d:
                    1d:20:b9:b2:70:8f:c2:56:9e:ed:f6:e6:37:e3:06:
                    2e:dc:58:50:12:97:4f:9f:5b:1d:56:6b:bb:91:f0:
                    e2:c5:f5:23:ab:38:b7:99:3e:bd:6c:fb:ef:20:3b:
                    0e:22:d2:fe:e7:44:6d:f3:2c:05:b5:51:cf:20:9a:
                    b1:3e:a5:77:25:38:e9:5d:8f:d7:46:1e:d3:05:c3:
                    d7:91:b7:bc:5a:e1:c5:fb:74:54:42:a1:c1:f0:c3:
                    b9:92:6a:50:6f:78:d9:2c:19:3e:54:f7:a1:e9:95:
                    3a:ef:65:42:5a:d6:3a:59:b0:af:d1:2f:d0:b1:59:
                    52:91:31:88:fd:cb:4e:13:81:72:f6:c8:41:ec:4a:
                    8e:e2:cd:59:31:6c:e2:ae:8a:a0:87:45:b9:6d:90:
                    78:15:9e:4e:d4:e0:4c:4b:6a:be:fa:48:8e:29:ba:
                    77:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AD:73:F5:88:34:DC:53:93:1C:02:47:42:D7:15:EA:5A:5F:07:60
            X509v3 Authority Key Identifier:
                keyid:E9:08:3A:90:EE:A0:43:4C:39:86:E9:FA:B7:BF:81:33:F2:80:BD:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9083A90EEA0434C3986E9FAB7BF8133F280BD9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE9CB2711C62D86D5FDC003A2983C7307E0197708EA6F71323FD1F961158CBA7/0/3138312e3233322e3233362e302f32322d3234203d3e20323731393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:7f:08:90:6f:71:4a:af:0e:11:4b:11:9f:48:d1:0c:0c:c4:
         37:64:f0:93:54:98:49:69:85:49:83:d4:7b:be:92:d3:04:d1:
         5f:74:62:ad:14:dd:b7:cf:49:e1:1a:a5:e9:79:8a:6e:84:77:
         54:82:29:ac:f4:c1:d8:8c:aa:a6:65:c7:a7:57:de:61:bd:f5:
         ff:21:fc:65:d7:29:84:0a:29:fc:0f:3c:97:8e:4b:a0:27:6e:
         ab:89:6c:3f:60:ca:a8:a7:3b:c4:8d:d2:c5:87:fa:c1:b2:35:
         1b:6e:43:2c:b6:ee:e9:18:5f:e9:15:94:20:97:b4:18:54:e1:
         54:3a:43:f4:cf:a2:88:b1:d8:ab:97:cb:09:3c:18:04:9e:81:
         a6:fa:7b:05:ca:6a:de:15:9f:a9:f6:8c:96:de:92:21:32:2d:
         66:46:8e:a2:9b:1f:0f:6d:6e:3b:2d:8a:8f:0b:05:17:ef:9c:
         30:a5:fa:98:7d:b9:37:7d:d9:f1:6c:c8:64:38:14:ca:a7:ea:
         da:f7:6a:8f:a5:b3:07:d5:ee:af:ca:ce:6b:9a:a1:f7:2e:44:
         f1:1c:71:fd:a4:dc:02:01:b2:c1:84:2e:13:6c:c7:82:5e:ad:
         75:05:7a:13:7c:2c:33:a6:91:5d:d0:4a:3e:ce:16:27:66:f0:
         70:56:b3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:09 2024 by rpki-client on console-fra.rpki-client.org