Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/3138312e3131342e35372e302f32342d3234203d3e20323633313730.roa
File:                     3138312e3131342e35372e302f32342d3234203d3e20323633313730.roa (raw, json)
Hash identifier:          l+GyvVeIkGskd/75RYfPF7hwGu2sAyj3yJ15wrNa9Bg=
Subject key identifier:   ED:5E:03:C3:2C:C7:66:C9:D2:DE:B8:1C:44:5E:07:C0:7B:D3:CA:3E
Certificate issuer:       /CN=211623745083F5BD547E7869C6748AF8F2418ECF
Certificate serial:       3BECD592286AC007FBFA2A6EFAA6655C664BE942
Authority key identifier: 21:16:23:74:50:83:F5:BD:54:7E:78:69:C6:74:8A:F8:F2:41:8E:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211623745083F5BD547E7869C6748AF8F2418ECF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/3138312e3131342e35372e302f32342d3234203d3e20323633313730.roa
Signing time:             Tue 05 Mar 2024 17:41:41 +0000
ROA not before:           Tue 05 Mar 2024 17:36:41 +0000
ROA not after:            Tue 04 Mar 2025 17:41:41 +0000
asID:                     263170
IP address blocks:        181.114.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/211623745083F5BD547E7869C6748AF8F2418ECF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/211623745083F5BD547E7869C6748AF8F2418ECF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211623745083F5BD547E7869C6748AF8F2418ECF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ec:d5:92:28:6a:c0:07:fb:fa:2a:6e:fa:a6:65:5c:66:4b:e9:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211623745083F5BD547E7869C6748AF8F2418ECF
        Validity
            Not Before: Mar  5 17:36:41 2024 GMT
            Not After : Mar  4 17:41:41 2025 GMT
        Subject: CN=ED5E03C32CC766C9D2DEB81C445E07C07BD3CA3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2a:67:5e:6a:7e:04:9d:74:a7:87:9c:19:f1:
                    9f:eb:e3:e2:c3:14:b9:0a:f1:be:3e:ae:6e:7c:5a:
                    fe:da:cb:72:9a:64:4d:64:0a:d7:3d:c7:47:aa:93:
                    7b:d4:d8:2a:c3:b6:2e:20:a4:e5:eb:51:88:fc:b7:
                    3b:47:6c:15:d2:ab:2f:22:ac:f9:29:7b:60:aa:8b:
                    d0:42:98:28:f6:55:ce:ec:13:06:ec:d7:45:1a:7d:
                    38:01:cc:18:fe:c3:09:78:8d:94:81:fc:84:e5:ba:
                    27:c5:36:a0:5d:87:40:12:dc:12:86:53:95:3f:0a:
                    a4:7f:13:f3:26:dd:5e:d9:5c:ee:78:44:8f:70:7d:
                    24:0c:e1:69:32:7e:86:c0:ec:de:a3:65:15:1f:39:
                    e1:49:02:86:40:eb:9b:6f:cb:be:ea:f2:3b:39:94:
                    9e:02:42:58:2e:e9:41:4b:a9:eb:a8:68:36:9c:1c:
                    b8:3e:a3:4e:e6:18:c7:0b:0c:f5:0a:c0:07:09:54:
                    49:62:d7:99:c2:26:6c:c4:e3:69:93:2a:6a:ec:2f:
                    a0:d7:44:5e:24:1a:e4:e1:f0:e1:ee:b0:0c:3a:96:
                    f8:39:e8:d4:73:71:02:84:ad:3a:48:59:15:bc:24:
                    5e:1e:91:01:cc:aa:0e:81:f1:34:c1:8a:ff:4c:4f:
                    e3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5E:03:C3:2C:C7:66:C9:D2:DE:B8:1C:44:5E:07:C0:7B:D3:CA:3E
            X509v3 Authority Key Identifier:
                keyid:21:16:23:74:50:83:F5:BD:54:7E:78:69:C6:74:8A:F8:F2:41:8E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/211623745083F5BD547E7869C6748AF8F2418ECF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211623745083F5BD547E7869C6748AF8F2418ECF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/3138312e3131342e35372e302f32342d3234203d3e20323633313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:01:7a:69:a5:a8:ba:49:c0:fc:77:aa:57:69:c7:3e:7e:fa:
         2e:77:60:13:a6:67:f7:a5:4c:7f:f2:7f:5c:58:91:63:3d:0d:
         2a:b9:d5:87:6e:56:4e:08:4c:05:ee:78:78:23:75:81:05:51:
         bd:95:a4:6a:13:b6:bf:86:e5:ca:dd:1c:a2:b2:2a:8c:1b:d6:
         d1:95:b6:39:58:5f:92:fd:ef:af:86:69:36:2a:df:9f:68:8b:
         01:d8:4d:53:4d:66:1d:0d:a0:b0:35:99:88:47:f1:2c:c1:02:
         b2:f3:7e:06:01:cf:69:5f:14:17:ce:98:42:41:5c:8f:4d:aa:
         a6:5c:71:95:06:b6:24:56:29:c9:0f:94:c9:f0:66:9e:8b:3b:
         31:32:e4:6b:11:d9:4c:6b:74:7d:ba:85:00:33:b2:6f:09:7f:
         25:e1:d2:93:b1:e1:68:30:71:d0:67:1b:d9:00:44:9f:ce:62:
         e4:89:76:9d:dd:3f:a5:e9:f2:f8:a5:eb:35:79:1a:b1:f3:0d:
         77:d0:04:5e:b5:02:d8:72:3c:67:b3:9b:15:a8:8f:69:3a:68:
         62:55:55:fc:19:bb:09:50:4e:76:ab:7b:e3:48:4b:26:bb:76:
         9c:24:58:f4:a2:05:1d:a1:4b:a1:a3:51:14:cf:80:b1:1b:03:
         b4:ab:af:ea
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUO+zVkihqwAf7+ipu+qZlXGZL6UIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExNjIzNzQ1MDgzRjVCRDU0N0U3ODY5QzY3NDhBRjhG
MjQxOEVDRjAeFw0yNDAzMDUxNzM2NDFaFw0yNTAzMDQxNzQxNDFaMDMxMTAvBgNV
BAMTKEVENUUwM0MzMkNDNzY2QzlEMkRFQjgxQzQ0NUUwN0MwN0JEM0NBM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGKmdean4EnXSnh5wZ8Z/r4+LD
FLkK8b4+rm58Wv7ay3KaZE1kCtc9x0eqk3vU2CrDti4gpOXrUYj8tztHbBXSqy8i
rPkpe2Cqi9BCmCj2Vc7sEwbs10UafTgBzBj+wwl4jZSB/ITluifFNqBdh0AS3BKG
U5U/CqR/E/Mm3V7ZXO54RI9wfSQM4WkyfobA7N6jZRUfOeFJAoZA65tvy77q8js5
lJ4CQlgu6UFLqeuoaDacHLg+o07mGMcLDPUKwAcJVEli15nCJmzE42mTKmrsL6DX
RF4kGuTh8OHusAw6lvg56NRzcQKErTpIWRW8JF4ekQHMqg6B8TTBiv9MT+NJAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU7V4DwyzHZsnS3rgcRF4HwHvTyj4wHwYDVR0j
BBgwFoAUIRYjdFCD9b1UfnhpxnSK+PJBjs8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GM0FEMTZFQ0Y0Q0Q5NDU1RDBFMzk1ODA5MDBCOTc5NTdF
MDU2QjA0RDNFRUZFQTU0RjdFOEQxQzI3NjgyRDAwLzAvMjExNjIzNzQ1MDgzRjVC
RDU0N0U3ODY5QzY3NDhBRjhGMjQxOEVDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTE2MjM3NDUwODNGNUJENTQ3
RTc4NjlDNjc0OEFGOEYyNDE4RUNGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjNBRDE2RUNGNENEOTQ1NUQwRTM5NTgwOTAwQjk3OTU3RTA1NkIwNEQz
RUVGRUE1NEY3RThEMUMyNzY4MkQwMC8wLzMxMzgzMTJlMzEzMTM0MmUzNTM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMzMzEzNzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtXI5
MA0GCSqGSIb3DQEBCwUAA4IBAQAmAXpppai6ScD8d6pXacc+fvoud2ATpmf3pUx/
8n9cWJFjPQ0qudWHblZOCEwF7nh4I3WBBVG9laRqE7a/huXK3RyisiqMG9bRlbY5
WF+S/e+vhmk2Kt+faIsB2E1TTWYdDaCwNZmIR/EswQKy834GAc9pXxQXzphCQVyP
TaqmXHGVBrYkVinJD5TJ8GaeizsxMuRrEdlMa3R9uoUAM7JvCX8l4dKTseFoMHHQ
ZxvZAESfzmLkiXad3T+l6fL4pes1eRqx8w130ARetQLYcjxns5sVqI9pOmhiVVX8
GbsJUE52q3vjSEsmu3acJFj0ogUdoUuho1EUz4CxGwO0q6/q
-----END CERTIFICATE-----
Generated at Fri May 3 00:46:57 2024 by rpki-client on console-ams.rpki-client.org