Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36322e302f32342d3234203d3e20323634383331.roa
File:                     3138312e3131342e36322e302f32342d3234203d3e20323634383331.roa (raw, json)
Hash identifier:          fdDn4frvPbAj/nvOFKSaHD3HNbbuMlV1k0akobihUPY=
Subject key identifier:   EA:78:BC:5E:D6:EC:52:51:8D:F8:18:D1:6F:BA:C0:C1:FA:3E:D4:37
Certificate issuer:       /CN=E91120749BBFC9A09C6A5455EF3C216072739D2A
Certificate serial:       4046C4D88A31FB265BB8B2B1F85D1C6FDA119C02
Authority key identifier: E9:11:20:74:9B:BF:C9:A0:9C:6A:54:55:EF:3C:21:60:72:73:9D:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36322e302f32342d3234203d3e20323634383331.roa
Signing time:             Tue 05 Mar 2024 17:41:47 +0000
ROA not before:           Tue 05 Mar 2024 17:36:47 +0000
ROA not after:            Tue 04 Mar 2025 17:41:47 +0000
asID:                     264831
IP address blocks:        181.114.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:46:c4:d8:8a:31:fb:26:5b:b8:b2:b1:f8:5d:1c:6f:da:11:9c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E91120749BBFC9A09C6A5455EF3C216072739D2A
        Validity
            Not Before: Mar  5 17:36:47 2024 GMT
            Not After : Mar  4 17:41:47 2025 GMT
        Subject: CN=EA78BC5ED6EC52518DF818D16FBAC0C1FA3ED437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2b:19:24:a2:4f:0c:98:d0:6a:82:a7:1f:8c:
                    c7:98:93:fb:d3:23:0d:84:56:1e:38:c1:30:16:e0:
                    b9:49:5d:3b:b5:86:0a:31:96:ea:39:82:dc:c9:5a:
                    3b:4a:a6:a1:3e:ba:2c:e8:13:b0:f8:d0:c2:1e:78:
                    99:e6:5b:21:bf:ac:d4:75:04:76:31:47:19:38:d1:
                    8a:f1:f4:d1:73:a2:f7:4c:ec:8e:f3:3a:e2:7d:7c:
                    eb:93:c8:ac:e6:76:7d:58:b8:25:0f:3f:8f:dc:02:
                    a1:2f:94:8f:86:d8:a8:67:8d:f1:e3:3b:89:24:ae:
                    78:42:08:1e:80:2f:11:ab:d7:65:4d:29:af:46:28:
                    6c:e0:83:4f:0e:8d:82:57:b8:0c:95:f4:85:52:28:
                    12:11:31:f2:89:8f:db:d6:15:38:05:b8:19:22:eb:
                    b2:48:d8:9a:cb:97:f5:17:55:74:51:9f:71:b9:c5:
                    d1:3b:fe:80:f6:8d:ad:42:a7:dd:b8:29:30:c9:16:
                    ec:19:28:aa:9a:14:e9:b6:ef:e7:69:8f:30:26:97:
                    4e:5a:8e:e5:38:ce:56:1b:60:ac:4b:d6:2e:38:3c:
                    49:cf:01:29:a6:eb:3c:c0:25:34:3e:bb:c4:b9:35:
                    14:c3:98:6d:20:95:a6:dc:3e:db:c4:cb:7b:3d:07:
                    40:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:78:BC:5E:D6:EC:52:51:8D:F8:18:D1:6F:BA:C0:C1:FA:3E:D4:37
            X509v3 Authority Key Identifier:
                keyid:E9:11:20:74:9B:BF:C9:A0:9C:6A:54:55:EF:3C:21:60:72:73:9D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36322e302f32342d3234203d3e20323634383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:a4:70:2d:4a:03:5f:ee:8e:94:ce:bf:c6:9a:79:8d:18:b4:
         80:0c:c7:07:26:47:13:a4:b6:1e:35:6f:08:0a:25:b0:58:51:
         3d:da:cd:34:d1:f2:0c:5c:e5:f8:05:79:dd:c1:86:5d:36:6e:
         17:2f:16:fe:64:a7:89:0b:d0:c8:22:1f:e0:62:75:2c:0c:60:
         e9:b2:94:c1:22:c3:b0:e3:22:b9:7b:d3:5e:12:72:b3:4f:f1:
         5b:83:0e:33:d8:8d:04:8f:94:40:a1:9d:c6:2c:84:7e:92:db:
         09:5e:32:90:6a:19:4c:e9:8a:fc:b8:22:b7:4f:3d:c7:7e:00:
         15:1a:1e:ce:1a:ae:8f:b2:38:93:db:0f:fc:f3:4a:be:dc:6c:
         8c:3b:a4:da:c8:86:68:81:70:85:1f:a6:d8:c9:da:ef:40:75:
         d5:39:4c:55:d9:f3:ba:5a:a2:a7:7e:18:2f:23:62:b7:fe:7b:
         39:fe:09:41:3c:bb:1f:4e:bf:1c:eb:6b:05:2f:13:e8:c8:14:
         e5:39:cd:e7:03:9d:d7:a0:05:b0:40:5d:fd:96:83:3a:8c:61:
         4f:29:80:e3:85:e2:1a:e2:b6:45:87:03:8b:0f:89:7a:2e:c9:
         d5:93:df:17:fc:d5:05:7b:a1:29:e2:ce:6e:ca:77:72:1a:37:
         e8:6f:3a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org