Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e302e302f31372d3234203d3e203237393437.roa
File:                     3138312e3139392e302e302f31372d3234203d3e203237393437.roa (raw, json)
Hash identifier:          RKV8wbouD5uXrNvUT8YwgQMKXsLn6Mp7ePPBTgMFkoo=
Subject key identifier:   74:C9:D3:AA:F6:63:73:BA:0E:AC:23:B2:84:B8:DC:B8:20:C8:B1:52
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       3A6E69D8CD5CF05C7F6C037A34136812007AE831
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e302e302f31372d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:10:26 +0000
ROA not before:           Tue 05 Mar 2024 18:05:26 +0000
ROA not after:            Tue 04 Mar 2025 18:10:26 +0000
asID:                     27947
IP address blocks:        181.199.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6e:69:d8:cd:5c:f0:5c:7f:6c:03:7a:34:13:68:12:00:7a:e8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:26 2024 GMT
            Not After : Mar  4 18:10:26 2025 GMT
        Subject: CN=74C9D3AAF66373BA0EAC23B284B8DCB820C8B152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:02:4e:e6:f0:54:c4:84:eb:68:48:a4:ed:e9:
                    ff:d0:8d:2e:20:8f:e2:2b:85:4d:18:79:c5:c0:77:
                    0d:9a:56:18:0d:39:d0:f9:49:67:3c:00:89:2b:aa:
                    2f:8f:4f:99:f4:9b:cb:ca:9f:9b:9e:7d:c8:35:f6:
                    ef:ea:77:1a:56:d2:c7:00:96:95:6e:25:9e:02:c0:
                    e6:58:45:6b:ad:35:a6:70:c1:1c:06:80:2d:b1:ea:
                    7c:08:3a:55:9c:7a:fa:e1:e8:27:94:83:2c:0e:a6:
                    58:77:62:49:d1:fe:40:e7:fe:63:c3:93:6e:b9:3f:
                    78:c3:51:27:fc:c3:4c:05:54:ff:7e:e3:3c:af:40:
                    c5:3e:20:65:30:7f:bf:55:07:23:d1:4e:96:54:94:
                    6e:2e:1a:31:5c:e2:73:7b:d9:47:24:68:69:4a:19:
                    75:0c:64:e3:4c:88:63:65:ca:a3:1f:50:92:d0:0d:
                    98:db:f6:5d:9b:1a:26:40:8f:f9:9d:5e:00:eb:61:
                    0c:e5:9b:9f:e1:83:f7:bf:8a:9c:5b:2e:fa:46:6c:
                    c6:55:1f:d6:9b:1a:87:c8:65:d3:ed:8e:59:91:2d:
                    eb:bd:b2:c7:8c:a5:62:ab:50:dd:2e:80:a4:68:c3:
                    cd:ac:46:71:8b:4c:e4:b9:73:ce:bb:8c:ab:53:41:
                    14:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C9:D3:AA:F6:63:73:BA:0E:AC:23:B2:84:B8:DC:B8:20:C8:B1:52
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e302e302f31372d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         13:b3:08:89:a1:07:39:61:71:57:c4:21:e2:b6:db:21:39:d7:
         6b:83:b5:12:fd:49:15:61:24:e4:59:b7:f7:4a:35:c9:d9:7a:
         03:04:5b:d5:68:8d:29:cd:1e:8c:8e:80:20:7d:eb:3b:5b:c3:
         0b:8a:c3:6d:ea:3d:38:48:06:95:29:ff:45:55:64:6c:b2:67:
         fe:54:7a:11:f9:70:79:07:1f:3e:cb:69:27:ba:6a:c3:5e:3d:
         86:6d:41:83:5d:a0:3c:be:6f:01:0c:d2:d5:21:06:40:33:98:
         aa:c3:a4:d3:01:51:01:cc:8c:c8:3d:9f:8e:2f:2a:42:cc:42:
         01:4d:c3:64:38:1e:22:57:e1:ca:05:71:1a:eb:4f:76:a6:7e:
         b3:de:4a:a5:37:88:31:1e:55:5e:c3:87:7c:b5:67:b0:10:61:
         82:d7:33:7e:ea:7f:29:f4:af:39:e9:56:c7:19:f5:06:d7:8c:
         e2:8a:05:47:3c:b1:ff:ae:31:61:73:cd:0b:f2:f0:5d:f5:4a:
         79:af:52:c1:eb:27:a2:b6:59:d7:b3:54:31:5d:90:60:44:a3:
         5b:18:67:69:b8:05:17:e3:db:62:5e:61:d3:22:aa:5c:9e:79:
         bf:64:a1:e4:87:c3:f1:8d:2d:a3:02:e7:03:97:0c:65:a5:97:
         1f:c3:98:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:32 2024 by rpki-client on console-ams.rpki-client.org