Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132352e302f32342d3234203d3e203538333439.roa
File:                     3138312e3233332e3132352e302f32342d3234203d3e203538333439.roa (raw, json)
Hash identifier:          GA9y5Gu1rpDEvAFRJebcNBQkTTjZzDOC0C1htO4EYOw=
Subject key identifier:   DF:05:25:51:2F:7F:A0:DB:71:81:BD:53:86:7E:E0:82:5A:4E:F8:FF
Certificate issuer:       /CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
Certificate serial:       75BC4C1CD161CEB58299B641BE2AD745D8DC7EBC
Authority key identifier: A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132352e302f32342d3234203d3e203538333439.roa
Signing time:             Tue 05 Mar 2024 18:22:01 +0000
ROA not before:           Tue 05 Mar 2024 18:17:01 +0000
ROA not after:            Tue 04 Mar 2025 18:22:01 +0000
asID:                     58349
IP address blocks:        181.233.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bc:4c:1c:d1:61:ce:b5:82:99:b6:41:be:2a:d7:45:d8:dc:7e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
        Validity
            Not Before: Mar  5 18:17:01 2024 GMT
            Not After : Mar  4 18:22:01 2025 GMT
        Subject: CN=DF0525512F7FA0DB7181BD53867EE0825A4EF8FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c5:9e:fe:aa:91:d9:32:61:db:91:ef:52:c4:
                    1a:0e:6a:ee:f8:65:7f:fb:00:a7:7b:a3:ec:dd:ea:
                    79:84:74:e1:60:52:38:69:5e:6b:14:c6:31:8c:f3:
                    39:3c:5d:95:45:8a:35:e6:78:d8:df:5b:c9:58:18:
                    65:8a:3d:4c:5d:75:37:0a:bb:d0:95:92:32:28:b1:
                    21:87:8a:f2:38:5e:8b:64:02:be:79:ae:ad:62:7f:
                    c6:84:fa:9d:92:92:d6:e7:29:00:69:d4:c8:15:a8:
                    4a:c3:44:0e:66:7e:e0:6e:66:4a:10:f5:7d:37:c1:
                    23:3c:2a:3c:c6:0d:94:77:f1:7a:4e:5c:85:86:e3:
                    fb:cf:39:61:cb:80:9c:46:d0:6a:f7:af:27:b3:1f:
                    4e:6b:85:dc:bc:26:35:f2:8d:0a:e2:50:27:9a:f4:
                    25:25:e4:18:8d:b5:87:f5:7b:ae:38:2c:4d:e5:bb:
                    39:15:a3:10:ad:18:22:aa:6d:ff:e3:50:4a:b5:bd:
                    d1:96:57:9f:65:13:58:40:7c:bc:03:eb:aa:b8:70:
                    f6:39:69:f7:de:48:61:d6:d0:45:53:d5:ea:54:76:
                    12:85:7a:b3:80:3e:d2:9c:3c:ca:bc:c5:f7:a1:c0:
                    02:d2:ff:ac:a4:5c:77:06:61:d1:76:8b:d7:92:d8:
                    75:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:05:25:51:2F:7F:A0:DB:71:81:BD:53:86:7E:E0:82:5A:4E:F8:FF
            X509v3 Authority Key Identifier:
                keyid:A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3138312e3233332e3132352e302f32342d3234203d3e203538333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:01:26:e7:5a:30:27:97:34:66:ca:26:f2:28:4a:57:ae:20:
         fe:74:9c:b0:b4:95:80:d8:32:5d:42:bc:fa:a1:87:6e:06:39:
         7a:40:44:39:6f:16:10:bf:6c:9f:46:29:be:7e:fe:86:85:61:
         46:6c:63:f0:aa:44:b6:5e:3a:54:ae:5f:68:1e:46:a7:71:ba:
         58:97:50:80:e3:6c:03:72:d7:66:5c:4a:5b:25:ea:52:7f:48:
         06:e3:28:9f:5b:1b:62:19:e6:f5:8e:fc:9b:46:bc:1c:0e:64:
         7e:74:cf:3c:97:b3:c1:4f:d7:29:4c:56:4d:27:9a:bd:55:7f:
         12:aa:3d:b9:60:1d:2c:3c:13:46:7e:c8:ad:3a:66:5d:42:4e:
         d0:9e:38:76:2e:4b:0b:e6:7b:bd:af:4e:17:9a:9a:3e:76:f7:
         25:7c:3c:bd:7c:89:bf:8c:a2:a1:05:88:d6:6f:7d:f4:fe:72:
         d3:dd:6b:ed:0f:10:39:b2:c7:0c:94:8f:10:35:2b:f1:46:3d:
         20:dd:7b:db:8a:0c:f7:a6:f0:61:79:e3:84:5f:af:3d:f6:3b:
         f4:b0:90:ae:35:63:fe:ef:15:d4:c1:85:e5:e1:82:be:30:cf:
         54:48:65:19:28:fe:0d:2f:25:2a:75:fa:16:d0:de:64:a3:ee:
         e3:5a:dc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org