Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EC35F81B9D810304C92458FDC5F7BA54510B519C7AF9ADDD7B3DF6E2C40649B6/0/3138312e3139312e3232302e302f32322d3234203d3e20323634363139.roa
File:                     3138312e3139312e3232302e302f32322d3234203d3e20323634363139.roa (raw, json)
Hash identifier:          Y0N11Vedb9cmA8R+cklQpFa/7l8vxico0J/LmJIE/Sc=
Subject key identifier:   D7:D1:9C:4F:D3:84:CD:E7:1D:75:1A:B7:C3:67:36:FC:F9:19:57:CB
Certificate issuer:       /CN=64AE10F2D2F7E07B09577E7EAAB1E9EDA123027B
Certificate serial:       1113DECD6D0364F281B6C8BAE2A8903CBC7D278E
Authority key identifier: 64:AE:10:F2:D2:F7:E0:7B:09:57:7E:7E:AA:B1:E9:ED:A1:23:02:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AE10F2D2F7E07B09577E7EAAB1E9EDA123027B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EC35F81B9D810304C92458FDC5F7BA54510B519C7AF9ADDD7B3DF6E2C40649B6/0/3138312e3139312e3232302e302f32322d3234203d3e20323634363139.roa
Signing time:             Tue 05 Mar 2024 17:56:10 +0000
ROA not before:           Tue 05 Mar 2024 17:51:10 +0000
ROA not after:            Tue 04 Mar 2025 17:56:10 +0000
asID:                     264619
IP address blocks:        181.191.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EC35F81B9D810304C92458FDC5F7BA54510B519C7AF9ADDD7B3DF6E2C40649B6/0/64AE10F2D2F7E07B09577E7EAAB1E9EDA123027B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EC35F81B9D810304C92458FDC5F7BA54510B519C7AF9ADDD7B3DF6E2C40649B6/0/64AE10F2D2F7E07B09577E7EAAB1E9EDA123027B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AE10F2D2F7E07B09577E7EAAB1E9EDA123027B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:13:de:cd:6d:03:64:f2:81:b6:c8:ba:e2:a8:90:3c:bc:7d:27:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64AE10F2D2F7E07B09577E7EAAB1E9EDA123027B
        Validity
            Not Before: Mar  5 17:51:10 2024 GMT
            Not After : Mar  4 17:56:10 2025 GMT
        Subject: CN=D7D19C4FD384CDE71D751AB7C36736FCF91957CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:92:70:b3:03:a0:7f:7b:84:1e:a4:1e:b9:
                    f5:31:de:d6:78:83:3f:ee:3a:46:4a:48:d9:20:f3:
                    c3:ca:c9:1a:b5:42:69:08:de:37:c7:44:a4:9a:8c:
                    3f:ea:6d:91:df:ea:33:8b:17:b8:35:68:d2:f7:98:
                    04:e4:67:eb:de:e2:41:5f:0b:17:21:db:aa:66:de:
                    4f:1b:6e:93:f0:b1:b8:1d:03:50:41:bb:bb:96:91:
                    7e:5d:8c:00:ab:cc:72:c2:fd:19:a5:67:e3:a2:8e:
                    19:db:9e:bb:3a:b9:e9:81:e9:24:70:a0:38:8f:f1:
                    b0:0c:e1:c9:74:5c:d1:8f:0d:05:45:e4:d7:74:dc:
                    03:5a:3b:2d:c0:99:76:60:d6:4b:54:1b:d3:84:24:
                    41:a2:96:64:19:0f:7e:2c:37:ae:49:c6:44:97:85:
                    0c:d0:f0:6d:18:4f:34:06:1e:05:af:e1:db:a7:a3:
                    93:12:50:ab:0d:aa:52:08:72:b6:db:1f:2c:0c:23:
                    b2:90:5f:38:c3:8d:40:06:58:94:43:cb:72:af:17:
                    43:84:06:04:05:3d:58:8f:c9:ef:17:51:15:d8:44:
                    ec:3e:54:c1:ca:e7:b2:69:b1:a2:d6:5d:9c:4b:a2:
                    48:5d:b2:ea:94:1c:b9:df:55:db:2a:59:8d:3f:5f:
                    a2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D1:9C:4F:D3:84:CD:E7:1D:75:1A:B7:C3:67:36:FC:F9:19:57:CB
            X509v3 Authority Key Identifier:
                keyid:64:AE:10:F2:D2:F7:E0:7B:09:57:7E:7E:AA:B1:E9:ED:A1:23:02:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EC35F81B9D810304C92458FDC5F7BA54510B519C7AF9ADDD7B3DF6E2C40649B6/0/64AE10F2D2F7E07B09577E7EAAB1E9EDA123027B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AE10F2D2F7E07B09577E7EAAB1E9EDA123027B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC35F81B9D810304C92458FDC5F7BA54510B519C7AF9ADDD7B3DF6E2C40649B6/0/3138312e3139312e3232302e302f32322d3234203d3e20323634363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:54:d4:8a:8e:e5:37:b4:6c:df:89:18:25:ec:20:d1:6d:ca:
         e3:55:b8:c0:c8:7f:87:47:68:ba:06:1b:30:b7:15:64:66:30:
         3d:42:e8:2c:ff:ab:08:2e:f5:13:c7:8e:fc:21:d3:fb:a7:f0:
         91:b5:9d:54:a7:92:44:63:fb:ee:d2:2c:45:2f:d6:fd:bc:00:
         3b:9d:2f:59:e7:c2:73:83:a7:1b:9b:b4:3e:6d:0f:c7:1f:9f:
         ef:3e:fc:bc:3d:f3:1a:22:17:e5:bd:fe:45:cf:cf:0b:b4:40:
         60:cd:9f:2a:66:02:a2:1f:ea:9e:41:16:69:f9:c0:d2:2b:88:
         7f:1c:b1:0c:88:26:24:c6:e8:74:b8:2c:7b:b7:1b:e2:4e:39:
         5d:67:f2:7a:e7:e1:91:9e:72:60:2e:1d:45:ee:54:0b:4d:aa:
         47:85:72:c9:fe:29:86:54:86:b2:4e:c2:1e:06:3a:ca:e8:00:
         6e:75:f6:71:a2:94:fb:6e:cd:b2:5a:32:fb:d2:91:cf:5a:d5:
         86:c4:ab:dd:c9:70:8f:f0:62:5f:ed:6c:de:0b:6c:3b:5d:f0:
         50:0f:5d:21:71:d3:f8:da:6d:17:73:21:60:01:2d:a5:73:02:
         6e:92:f0:b6:b4:97:24:84:b9:d7:13:74:b8:e8:b2:f2:fc:90:
         d1:45:cc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:47:47 2024 by rpki-client on console-ams.rpki-client.org