Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36302e302f32342d3234203d3e20323634383331.roa
File:                     3138312e3131342e36302e302f32342d3234203d3e20323634383331.roa (raw, json)
Hash identifier:          tJDcpPridozJlvzZjZm4Q0D7TBJGrrEco4UhgAqLbPg=
Subject key identifier:   EF:36:5F:68:E5:DA:6C:BB:CB:13:21:45:45:6E:A7:2F:A1:A5:9F:72
Certificate issuer:       /CN=E91120749BBFC9A09C6A5455EF3C216072739D2A
Certificate serial:       08D70C9F4861F8563635507A810848B1B984D732
Authority key identifier: E9:11:20:74:9B:BF:C9:A0:9C:6A:54:55:EF:3C:21:60:72:73:9D:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36302e302f32342d3234203d3e20323634383331.roa
Signing time:             Tue 05 Mar 2024 17:41:47 +0000
ROA not before:           Tue 05 Mar 2024 17:36:47 +0000
ROA not after:            Tue 04 Mar 2025 17:41:47 +0000
asID:                     264831
IP address blocks:        181.114.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d7:0c:9f:48:61:f8:56:36:35:50:7a:81:08:48:b1:b9:84:d7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E91120749BBFC9A09C6A5455EF3C216072739D2A
        Validity
            Not Before: Mar  5 17:36:47 2024 GMT
            Not After : Mar  4 17:41:47 2025 GMT
        Subject: CN=EF365F68E5DA6CBBCB132145456EA72FA1A59F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:11:5b:03:1c:31:30:d8:9f:78:25:6d:52:d8:
                    18:9f:ff:21:07:6a:51:54:1a:53:3e:2a:f8:46:12:
                    50:e2:8f:7f:d6:09:15:b0:a6:f1:63:2f:a9:4f:00:
                    63:ea:7f:ce:3a:f7:da:6b:6c:80:c1:b3:eb:9c:67:
                    cc:1c:a1:9e:56:b9:11:85:95:80:d5:cc:f0:16:41:
                    b8:2a:cc:9f:f1:a7:69:56:55:a5:9d:65:7c:6d:f4:
                    30:45:b8:bc:8e:8a:43:b0:f3:82:96:cf:df:46:72:
                    a7:89:23:9a:fa:d2:77:61:6a:a1:7d:9a:07:52:38:
                    bb:f6:ea:e6:9a:b8:e1:b3:5f:d5:db:c4:d2:1d:1c:
                    4e:7b:21:dd:23:80:59:29:90:a7:86:a3:fb:98:bd:
                    3f:6d:77:9a:c7:56:a8:99:25:f1:2b:f6:fe:6f:8a:
                    4f:bc:c7:c6:23:bc:8a:7c:35:b6:25:e8:64:83:83:
                    5a:00:8b:42:10:ac:d3:85:5d:ed:7e:c9:53:69:f5:
                    71:b3:14:84:40:96:c9:ab:5f:b0:39:21:f0:11:92:
                    e8:35:2b:af:9a:75:28:17:83:39:81:28:44:05:d6:
                    1e:30:96:51:8d:0a:e2:8a:2a:8a:c3:4f:b4:c3:71:
                    be:96:c6:62:e0:3a:0d:0f:f1:80:0d:63:c6:c2:a7:
                    56:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:36:5F:68:E5:DA:6C:BB:CB:13:21:45:45:6E:A7:2F:A1:A5:9F:72
            X509v3 Authority Key Identifier:
                keyid:E9:11:20:74:9B:BF:C9:A0:9C:6A:54:55:EF:3C:21:60:72:73:9D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36302e302f32342d3234203d3e20323634383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:92:b6:38:ce:ae:8c:ca:01:aa:9d:20:22:2b:da:4d:b7:6a:
         7b:b3:11:1c:aa:dd:35:73:53:f1:55:80:c4:b9:8f:b8:8c:5a:
         0e:e4:cf:53:20:0d:3d:fa:92:a6:0b:ed:65:03:f0:48:af:e1:
         e3:4d:b4:59:49:a8:53:78:f2:c3:39:67:80:88:6e:10:80:bf:
         be:51:03:b7:b2:ff:73:3d:08:13:d6:ab:39:c8:be:ac:98:e0:
         ed:99:20:9b:8e:de:4e:10:8c:f2:5b:f4:7b:d4:ce:d8:29:62:
         c7:a7:8c:2e:8c:7f:e9:6e:a1:c2:df:61:d8:35:9d:65:ce:6a:
         7f:49:c4:e0:68:31:b0:72:59:b9:37:10:65:14:3f:fd:51:21:
         8f:a7:c2:8a:70:f9:c1:13:ec:e2:ef:82:ff:dd:b4:f9:d5:fd:
         87:53:53:0d:b8:2a:c4:eb:08:90:88:13:af:26:55:f8:8c:ed:
         8c:ea:93:1d:44:a9:0e:d3:a9:40:d7:23:39:8a:fb:d5:87:1e:
         ce:b5:74:b6:05:fd:f2:fe:45:55:21:e8:7b:58:d2:a3:4c:30:
         2e:81:75:b1:ac:e6:f5:a7:f2:bc:9b:f1:0e:01:43:a2:0e:36:
         07:5a:24:6c:c4:6f:2a:c3:f7:b2:77:8a:fb:9c:15:00:57:46:
         34:ae:37:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:50 2024 by rpki-client on console-ams.rpki-client.org