Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/3138312e3138382e3132382e302f31382d3234203d3e203237383832.roa
File:                     3138312e3138382e3132382e302f31382d3234203d3e203237383832.roa (raw, json)
Hash identifier:          ilGfFPjK2hz4JL7Wo5b1EEpJaVcPJ990c0X/weIqbBA=
Subject key identifier:   5C:1D:E2:32:28:53:09:4D:D9:6D:23:F2:76:5E:9C:9A:4F:CE:E1:93
Certificate issuer:       /CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
Certificate serial:       5602F2ACB28A9777D85BE9A7CA8D7D4D31D5F763
Authority key identifier: B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/3138312e3138382e3132382e302f31382d3234203d3e203237383832.roa
Signing time:             Tue 05 Mar 2024 18:09:43 +0000
ROA not before:           Tue 05 Mar 2024 18:04:43 +0000
ROA not after:            Tue 04 Mar 2025 18:09:43 +0000
asID:                     27882
IP address blocks:        181.188.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:02:f2:ac:b2:8a:97:77:d8:5b:e9:a7:ca:8d:7d:4d:31:d5:f7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
        Validity
            Not Before: Mar  5 18:04:43 2024 GMT
            Not After : Mar  4 18:09:43 2025 GMT
        Subject: CN=5C1DE2322853094DD96D23F2765E9C9A4FCEE193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c5:77:79:44:7b:b1:99:1f:88:97:60:e8:14:
                    f8:31:20:47:cc:2d:35:70:02:88:5e:15:fc:24:be:
                    f8:79:cd:f8:93:55:cf:0b:be:6a:e8:5c:8b:cd:6f:
                    7e:c0:fc:82:2b:71:eb:04:91:64:09:67:22:e0:48:
                    bd:5f:04:ae:b9:79:86:14:fb:05:6d:31:af:c5:31:
                    50:79:8d:16:5d:64:3c:be:05:51:5f:e1:29:cf:9f:
                    80:1d:57:b8:70:4d:2d:c9:5a:e9:87:c8:e1:e2:ad:
                    4e:5e:75:92:60:08:10:57:4d:f3:bf:55:3f:d8:52:
                    75:67:10:97:ff:9d:1b:90:59:e3:a4:9c:39:b5:2f:
                    45:ee:df:d6:f4:0f:b3:12:23:4e:df:f7:d5:63:ba:
                    d9:0e:d0:61:ca:68:c8:90:31:bb:89:db:df:44:6b:
                    93:20:8c:63:4d:2e:8d:1d:c5:1a:af:d4:80:d8:1c:
                    6e:fc:ca:6f:bb:bd:33:04:14:9c:87:45:79:61:a9:
                    87:88:a0:f3:cd:9e:96:08:db:97:f0:89:92:95:15:
                    06:e6:08:85:fe:4d:4b:95:29:50:f1:47:4c:8c:e3:
                    06:33:4f:f0:a7:16:98:80:ec:99:0f:b9:6e:e5:1c:
                    a2:2c:6e:06:4e:8d:96:a1:96:3c:e6:6c:96:55:80:
                    52:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1D:E2:32:28:53:09:4D:D9:6D:23:F2:76:5E:9C:9A:4F:CE:E1:93
            X509v3 Authority Key Identifier:
                keyid:B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/3138312e3138382e3132382e302f31382d3234203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2a:09:8f:72:dd:c3:c5:d2:f9:5e:08:ee:3c:61:4f:8d:b9:f8:
         b1:f0:1c:54:3b:21:e1:6f:14:33:5b:a5:f1:8b:3f:62:91:6f:
         51:ac:8e:0d:cf:00:d3:4c:43:91:49:71:71:13:ca:59:56:a2:
         ee:5d:76:99:d0:e0:67:5b:15:3d:2f:1c:4f:76:a5:fc:04:51:
         b0:0e:f4:7d:8d:f1:96:c8:83:0e:11:b1:70:63:b8:f7:c6:00:
         4c:c5:0a:14:04:d1:82:2d:a7:cb:3d:06:82:07:34:6b:c7:80:
         f2:8a:b8:b4:63:36:6a:fd:db:25:52:4d:4e:5b:1b:c3:14:f2:
         51:29:e0:ab:9a:d6:8f:0a:98:88:f0:f9:5e:40:e1:06:e4:3d:
         c9:70:89:5c:3c:1c:3e:61:9a:c1:6d:ab:da:94:c8:b9:57:52:
         55:d4:0f:61:65:0b:22:51:11:9b:5f:ad:e6:d6:c7:75:06:22:
         d7:05:a3:da:6e:e3:f9:05:c7:c9:52:5a:4f:f8:ae:74:24:13:
         68:f4:55:d8:b1:2a:83:08:31:03:c4:c7:31:30:ba:4e:d1:b3:
         31:04:86:b7:ac:50:47:44:43:36:12:f4:96:60:84:9d:ba:43:
         a8:ef:7a:a8:c7:63:5c:5a:f3:c7:31:1f:60:32:93:ab:24:e0:
         41:8f:2c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:56 2024 by rpki-client on console-ams.rpki-client.org