Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33362e302f32322d3234203d3e203232333638.roa
File:                     3138312e3137342e33362e302f32322d3234203d3e203232333638.roa (raw, json)
Hash identifier:          CH/zhcQ3y2NPRIdZH6R87ufnf/daz72sKg+iq05pyfI=
Subject key identifier:   A9:C6:24:C6:D8:6F:94:4F:52:A6:D5:7A:C2:10:2F:8E:18:ED:AE:B3
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       18C17DB28C95F343A9B5BF78F063CC099509D86A
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33362e302f32322d3234203d3e203232333638.roa
Signing time:             Tue 05 Mar 2024 18:05:54 +0000
ROA not before:           Tue 05 Mar 2024 18:00:54 +0000
ROA not after:            Tue 04 Mar 2025 18:05:54 +0000
asID:                     22368
IP address blocks:        181.174.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c1:7d:b2:8c:95:f3:43:a9:b5:bf:78:f0:63:cc:09:95:09:d8:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Mar  5 18:00:54 2024 GMT
            Not After : Mar  4 18:05:54 2025 GMT
        Subject: CN=A9C624C6D86F944F52A6D57AC2102F8E18EDAEB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:dd:7b:10:02:77:a7:64:d0:a5:39:1a:f4:2a:
                    e3:bd:5d:ba:bc:88:62:eb:57:65:c9:9c:28:e9:b6:
                    b4:03:20:6a:13:5b:7f:e5:ba:1d:9c:09:a1:98:0e:
                    ae:e6:ed:a9:46:78:e8:f8:a6:db:d3:03:20:75:8e:
                    83:3b:a7:53:8e:0a:60:69:8d:fd:fa:5b:f9:94:2c:
                    b0:09:d0:ed:6d:30:7e:23:e8:be:8d:eb:c3:d0:7f:
                    e1:c2:27:4d:5f:10:e4:72:84:7a:53:01:0a:9e:b3:
                    85:f8:52:df:23:0e:55:80:11:11:9d:c5:81:fd:86:
                    a1:c3:bc:49:77:e5:25:2a:e4:70:04:76:64:fb:77:
                    5c:d7:85:40:88:e1:87:20:60:4f:12:0f:1f:05:05:
                    94:fe:59:8b:90:1c:f4:20:11:5d:83:f9:19:9b:24:
                    61:fd:e4:5b:4c:76:f4:77:eb:bd:a9:f8:38:c3:0c:
                    64:f6:22:4d:f4:8f:f5:b2:93:42:6b:63:b1:dc:2b:
                    a4:19:95:12:2b:e1:c3:80:26:93:99:ab:e6:c3:43:
                    05:37:f1:7c:ea:35:aa:44:96:a6:05:55:4c:b3:1d:
                    0c:0f:5f:e7:21:3d:f2:73:57:fe:00:12:48:b3:74:
                    b5:00:ee:5d:70:5f:1d:2e:5f:15:94:f0:a7:3a:91:
                    e6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C6:24:C6:D8:6F:94:4F:52:A6:D5:7A:C2:10:2F:8E:18:ED:AE:B3
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33362e302f32322d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:0e:ad:b7:76:dc:ed:f2:c9:fe:ff:88:fa:eb:1a:66:7a:22:
         65:db:a7:20:fa:ec:b6:64:bc:d5:0a:29:5a:e6:41:19:4e:2e:
         32:09:95:4e:60:91:f2:c7:fa:5b:f6:ea:e5:24:4d:51:79:2a:
         99:87:b3:4b:14:4f:db:fa:59:dc:95:10:25:36:f0:32:ef:0f:
         0f:78:4a:53:a3:51:22:58:52:d7:6d:aa:27:b6:79:d2:7e:a3:
         90:0d:6e:4c:df:99:c5:a8:be:42:2a:4b:a4:63:f9:a3:74:b7:
         3b:51:a0:38:6b:10:b7:1e:25:6e:08:9e:ae:bb:48:08:54:52:
         8b:f1:97:97:af:88:92:7d:4d:f4:3b:9b:20:a7:db:ee:8b:1a:
         6f:a6:ab:27:d1:ac:11:70:45:22:4c:52:30:b5:47:ee:36:f8:
         d2:1f:a5:10:c5:65:37:bb:7a:e6:52:eb:a4:60:e3:92:b8:dc:
         83:e1:50:69:d8:e5:34:87:78:82:cd:b5:34:9d:db:b7:40:d1:
         32:97:cb:b8:dc:c1:7e:de:83:c5:06:3a:5d:32:1f:cf:17:15:
         37:75:66:dc:01:23:05:d4:94:84:72:05:7f:40:d6:3f:3e:de:
         19:ca:af:9f:15:4f:2c:df:5a:45:1a:a5:19:6a:f1:ed:72:06:
         54:34:38:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:41 2024 by rpki-client on console-fra.rpki-client.org