Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/3138312e3137342e3139322e302f32302d3234203d3e20323632313932.roa
File:                     3138312e3137342e3139322e302f32302d3234203d3e20323632313932.roa (raw, json)
Hash identifier:          VN4mWRbEmOj3cdvx4OlgVlN7kyqIBFARbA6qHcTgc0E=
Subject key identifier:   C3:B3:FA:61:7B:90:24:32:33:07:FD:B2:46:DD:62:71:45:DC:C1:D0
Certificate issuer:       /CN=5549DCBABEF802D34A53A975A5F06A3653F6C752
Certificate serial:       0203A4DD5F1BEBA8CB124F63DD454C875415A704
Authority key identifier: 55:49:DC:BA:BE:F8:02:D3:4A:53:A9:75:A5:F0:6A:36:53:F6:C7:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/3138312e3137342e3139322e302f32302d3234203d3e20323632313932.roa
Signing time:             Tue 05 Mar 2024 17:54:00 +0000
ROA not before:           Tue 05 Mar 2024 17:49:00 +0000
ROA not after:            Tue 04 Mar 2025 17:54:00 +0000
asID:                     262192
IP address blocks:        181.174.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:03:a4:dd:5f:1b:eb:a8:cb:12:4f:63:dd:45:4c:87:54:15:a7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5549DCBABEF802D34A53A975A5F06A3653F6C752
        Validity
            Not Before: Mar  5 17:49:00 2024 GMT
            Not After : Mar  4 17:54:00 2025 GMT
        Subject: CN=C3B3FA617B9024323307FDB246DD627145DCC1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c0:d0:cd:b7:bc:cc:51:40:02:fc:ce:be:9a:
                    c8:92:1c:a8:71:63:27:79:2e:b0:d8:f6:0f:d8:c2:
                    bc:d1:08:91:8f:35:be:a7:39:e1:19:19:fd:43:f6:
                    66:4d:75:40:76:81:d7:7f:d4:b4:eb:dc:72:74:93:
                    ce:20:e6:2c:39:ea:0f:e5:48:e8:d3:25:21:ee:54:
                    5f:f7:fb:9f:b0:e4:38:ab:39:57:9e:06:be:22:12:
                    58:c7:65:ec:de:ba:7c:f6:37:f5:d5:8c:45:ab:f2:
                    cd:94:a2:86:32:1c:02:c1:d1:2d:08:6b:9a:06:93:
                    da:3b:10:06:6b:e6:52:ee:ed:3b:2e:3c:ee:63:91:
                    53:5e:2e:e4:40:6c:df:59:ba:be:e5:f2:a0:d5:06:
                    07:30:4c:4f:3f:1c:4b:83:ab:75:b0:da:57:80:01:
                    b4:a8:34:d8:37:f7:73:ec:60:77:a6:37:4e:58:c8:
                    05:2c:53:bb:67:85:c6:62:84:86:07:3e:57:ec:e9:
                    68:38:ff:85:1c:49:4f:54:44:38:cb:47:79:0c:5e:
                    00:5f:59:b0:2b:97:92:12:16:ae:dc:38:26:e9:b4:
                    4c:55:dd:91:c2:a8:46:b9:d6:b9:a3:89:de:60:0a:
                    a9:da:eb:4e:7f:c5:28:60:01:f1:d4:4c:87:52:60:
                    2f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B3:FA:61:7B:90:24:32:33:07:FD:B2:46:DD:62:71:45:DC:C1:D0
            X509v3 Authority Key Identifier:
                keyid:55:49:DC:BA:BE:F8:02:D3:4A:53:A9:75:A5:F0:6A:36:53:F6:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/3138312e3137342e3139322e302f32302d3234203d3e20323632313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:04:aa:ea:25:11:73:09:99:65:09:1b:8f:22:b0:18:52:c8:
         e4:fc:b5:f1:76:bb:a1:c5:8e:26:ba:38:8b:47:9c:2c:b3:f4:
         3d:96:0b:f1:7d:65:e8:93:cb:69:30:8a:67:6c:79:69:7c:8e:
         c5:0c:89:59:23:2d:80:46:10:69:15:f9:dc:e0:bf:af:38:df:
         7b:6e:af:3f:df:f7:9f:f0:75:6d:11:eb:5c:ff:45:64:39:1f:
         7e:39:3c:cb:a9:41:cf:4e:27:3d:1e:b9:2f:6d:bd:16:2d:cd:
         2d:a5:ee:a3:c9:b8:a8:b6:12:d1:7f:3e:2c:94:bb:18:c3:3f:
         74:e5:90:8b:0d:18:0a:78:a5:8b:c7:3d:05:50:ca:cd:c2:2c:
         10:20:8d:e2:18:c8:62:15:56:14:6c:28:f2:36:37:03:29:bf:
         a7:46:9f:d0:85:71:94:99:4b:59:28:c1:37:00:54:ac:57:ed:
         4b:30:64:0d:89:48:08:b5:c0:27:a7:ca:d8:35:9c:f5:f5:36:
         36:9b:a1:9b:67:af:69:6c:fa:10:a1:a4:30:01:68:fa:0d:b0:
         d7:a9:d2:81:18:75:47:67:ee:0d:d8:f4:63:72:f1:19:85:56:
         db:75:b1:a5:4c:aa:61:07:e4:e5:71:b9:91:e7:2d:a3:ed:bf:
         bf:96:94:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:30:32 2024 by rpki-client on console-ams.rpki-client.org