Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139382e302e302f31362d3234203d3e203139313639.roa
File:                     3138312e3139382e302e302f31362d3234203d3e203139313639.roa (raw, json)
Hash identifier:          QGPBiv+pbrm7QbimJIVAqfUvxb00xn0C38YFsBJt3Cs=
Subject key identifier:   24:A0:90:2F:A3:93:67:B1:5D:09:B8:49:1B:73:4F:03:91:02:87:4B
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       472E7CBB181A28944AD89F29AA96B482E5307546
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139382e302e302f31362d3234203d3e203139313639.roa
Signing time:             Tue 05 Mar 2024 18:10:32 +0000
ROA not before:           Tue 05 Mar 2024 18:05:32 +0000
ROA not after:            Tue 04 Mar 2025 18:10:32 +0000
asID:                     19169
IP address blocks:        181.198.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2e:7c:bb:18:1a:28:94:4a:d8:9f:29:aa:96:b4:82:e5:30:75:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:32 2024 GMT
            Not After : Mar  4 18:10:32 2025 GMT
        Subject: CN=24A0902FA39367B15D09B8491B734F039102874B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:d8:e3:68:70:54:e9:05:82:9c:02:ad:2f:
                    7e:de:52:43:32:c5:b8:e6:1d:d4:f3:db:da:7a:d8:
                    a1:1b:54:2b:43:ee:2f:4e:6f:94:9b:98:81:96:4b:
                    43:ee:71:cf:6b:78:c4:e3:c1:c2:ae:89:36:dc:d4:
                    be:80:9b:c0:0f:8f:46:6b:76:90:8f:3c:78:8a:2c:
                    5a:c3:f4:8d:4c:12:9c:f9:9f:43:1a:d5:d0:ca:90:
                    07:95:d8:f2:66:63:8b:3a:47:59:80:c4:57:b8:af:
                    38:90:f9:58:fa:b1:41:eb:40:6e:bf:5b:3e:f0:80:
                    b9:a1:a4:88:8e:86:4b:48:f5:aa:25:b9:c0:a8:0d:
                    33:2d:d5:ce:c6:00:b5:c5:20:58:e6:1c:31:41:c3:
                    fb:3a:64:68:e4:03:c7:1d:15:d5:a7:39:89:6a:db:
                    09:81:a0:c2:dc:d8:b4:23:22:a5:f6:8e:72:be:89:
                    6e:79:ed:6a:84:cf:fe:13:58:b5:c1:45:71:f5:69:
                    35:c4:32:95:67:5f:fe:9b:87:61:d6:e1:62:61:02:
                    3d:19:c1:14:ec:11:c3:e9:01:77:14:21:1b:60:21:
                    7c:bb:96:d9:33:ee:ac:80:94:ed:92:a3:48:46:0c:
                    4c:68:48:c7:85:cf:a6:2d:61:f5:b9:31:10:b4:60:
                    6e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A0:90:2F:A3:93:67:B1:5D:09:B8:49:1B:73:4F:03:91:02:87:4B
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139382e302e302f31362d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.198.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         48:31:0c:3e:34:9a:2e:89:cf:d1:b9:75:09:7f:c7:65:b0:f6:
         27:b0:90:96:64:e8:f8:ca:c4:28:08:02:06:33:c7:a9:a1:a7:
         34:0c:a9:54:bf:22:02:ae:27:08:67:28:0a:34:66:74:6d:17:
         62:41:ed:b8:37:fc:5e:4a:a3:3a:9b:50:f3:13:3d:cf:e8:a3:
         ab:05:5d:14:ed:e7:6c:6f:0f:b8:2c:0d:df:13:b6:1c:5d:05:
         47:61:7a:36:57:40:95:09:a2:2e:54:38:1b:cc:75:1a:e8:b9:
         45:0b:b2:50:c0:bb:83:f9:28:d2:a8:6e:c5:a7:ac:45:77:93:
         03:79:48:c9:be:ca:67:1b:07:8b:e9:56:02:78:f6:c6:6f:d5:
         d0:76:27:47:36:44:57:ce:03:27:b7:a7:6b:7b:6d:82:65:b7:
         ad:73:c7:6e:ac:d3:6e:d2:b9:24:a2:72:43:6f:7a:b1:81:ff:
         f6:f8:08:6a:5b:fb:6d:18:fc:0c:98:c7:5a:71:63:a8:ac:87:
         97:d5:cb:e6:81:99:33:41:53:1e:b0:9c:cf:a4:0b:6b:61:50:
         9b:43:78:43:60:f0:85:e5:90:da:eb:5d:35:36:81:f2:28:d2:
         0a:75:c3:56:db:14:7b:ef:30:8d:e5:9a:06:f0:71:01:09:e1:
         2a:d1:2e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:32 2024 by rpki-client on console-ams.rpki-client.org