Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36312e302f32342d3234203d3e20323634383331.roa
File:                     3138312e3131342e36312e302f32342d3234203d3e20323634383331.roa (raw, json)
Hash identifier:          967HR5A440g4ENEfuJQATd9K+mM+8d+Uu4SzfPFgCyY=
Subject key identifier:   3C:DC:2E:A1:8E:D2:51:66:F7:B5:78:54:B7:23:74:E5:A5:AB:E0:BD
Certificate issuer:       /CN=E91120749BBFC9A09C6A5455EF3C216072739D2A
Certificate serial:       23C3D9E118EF4994CD0B6E28B3A5AABE887D6E99
Authority key identifier: E9:11:20:74:9B:BF:C9:A0:9C:6A:54:55:EF:3C:21:60:72:73:9D:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36312e302f32342d3234203d3e20323634383331.roa
Signing time:             Tue 05 Mar 2024 17:41:48 +0000
ROA not before:           Tue 05 Mar 2024 17:36:48 +0000
ROA not after:            Tue 04 Mar 2025 17:41:48 +0000
asID:                     264831
IP address blocks:        181.114.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c3:d9:e1:18:ef:49:94:cd:0b:6e:28:b3:a5:aa:be:88:7d:6e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E91120749BBFC9A09C6A5455EF3C216072739D2A
        Validity
            Not Before: Mar  5 17:36:48 2024 GMT
            Not After : Mar  4 17:41:48 2025 GMT
        Subject: CN=3CDC2EA18ED25166F7B57854B72374E5A5ABE0BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:83:42:1d:ba:64:1d:a6:3f:7a:67:d8:58:
                    d7:ec:54:02:7c:56:bb:27:57:83:a6:30:12:6d:3c:
                    b8:dc:c5:8b:86:57:fa:c4:ee:c2:dc:d1:05:06:98:
                    eb:38:f3:86:ce:ed:b0:95:68:91:77:9a:dd:8a:98:
                    3e:b2:6c:bc:0e:61:26:bf:a0:bc:12:b4:01:4a:63:
                    18:77:79:40:e2:03:24:33:6b:10:c1:8e:a5:b9:d6:
                    35:28:f5:18:5e:6e:a0:9a:60:ea:50:4f:57:ec:20:
                    24:78:0f:47:e2:dd:bf:4d:5e:d9:f7:51:55:fb:84:
                    16:81:ed:08:da:53:1b:a2:47:54:c0:eb:be:0d:81:
                    14:68:80:35:2b:ed:1e:f4:e8:4f:ba:3e:38:3f:c6:
                    d1:b6:33:15:d5:7f:fa:21:e4:b2:66:90:3d:e6:ed:
                    3d:99:29:d7:af:2b:9a:05:99:22:a5:84:53:1f:61:
                    c7:3f:90:8b:1d:76:39:21:76:ae:2c:82:7d:44:73:
                    b4:25:19:71:68:fc:14:12:65:13:4a:72:f2:cb:23:
                    fe:49:80:fd:85:21:7a:91:23:7f:17:27:49:ed:23:
                    2c:a9:36:11:c3:3a:42:e4:c0:7b:1f:b3:f2:48:b8:
                    4c:5f:4a:69:65:78:75:5c:6d:9b:82:19:7a:19:c6:
                    0a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DC:2E:A1:8E:D2:51:66:F7:B5:78:54:B7:23:74:E5:A5:AB:E0:BD
            X509v3 Authority Key Identifier:
                keyid:E9:11:20:74:9B:BF:C9:A0:9C:6A:54:55:EF:3C:21:60:72:73:9D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36312e302f32342d3234203d3e20323634383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:a9:ab:f9:ad:85:15:b5:6c:09:03:d2:e5:21:42:13:ea:9f:
         9b:d6:95:15:c0:8c:44:9a:e3:22:10:86:4a:1c:76:92:b6:2a:
         72:b4:b2:31:6f:4e:be:98:fb:15:2c:c8:57:cc:58:69:27:44:
         07:bf:1a:f6:ae:7a:99:07:79:97:db:63:4f:b8:2c:80:dc:db:
         1f:82:8c:57:c7:cc:94:8d:40:2e:e1:52:08:db:dc:dc:2b:6f:
         9a:67:07:fa:f4:7d:bf:e2:16:ba:da:12:54:89:5c:a0:c8:40:
         b6:ea:79:ed:4d:41:7c:50:86:f4:26:0c:f6:56:18:92:8e:4b:
         c8:2d:ef:e5:35:74:4f:db:43:95:f2:c5:ff:14:22:03:95:bd:
         19:79:d0:12:fb:a3:c0:5c:38:d4:6e:dd:4d:9f:bf:28:c4:8e:
         b6:42:4a:ec:d4:b2:8e:1c:c3:22:4c:39:0f:66:89:25:bf:d9:
         32:20:0b:83:13:39:d8:fe:00:fb:3f:0a:c5:ae:e7:21:08:a9:
         2c:2a:6c:1a:a9:1a:f6:29:e5:dd:32:56:2d:24:8b:9d:57:49:
         fa:b8:bf:b2:0d:8c:3a:f1:ff:fa:de:af:88:b8:b9:e1:9b:de:
         a2:96:f4:16:c0:e1:cb:f9:01:f1:87:9b:a8:be:55:d6:78:9d:
         aa:78:16:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org