Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e312e302f32342d3234203d3e203532323537.roa
File:                     3138312e3139392e312e302f32342d3234203d3e203532323537.roa (raw, json)
Hash identifier:          EB9JKt1JhSaIe2t9EL6lZZIQqS7SQzyUgb4JWEQzXQ8=
Subject key identifier:   2D:A6:1D:C6:38:4C:22:CC:3E:6E:CF:4F:F4:D0:08:AE:EC:9A:3D:B1
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       2B5B3A9DADBB7E82F0EC1210979FDAC5558BA7CD
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e312e302f32342d3234203d3e203532323537.roa
Signing time:             Tue 05 Mar 2024 18:10:36 +0000
ROA not before:           Tue 05 Mar 2024 18:05:36 +0000
ROA not after:            Tue 04 Mar 2025 18:10:36 +0000
asID:                     52257
IP address blocks:        181.199.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5b:3a:9d:ad:bb:7e:82:f0:ec:12:10:97:9f:da:c5:55:8b:a7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:36 2024 GMT
            Not After : Mar  4 18:10:36 2025 GMT
        Subject: CN=2DA61DC6384C22CC3E6ECF4FF4D008AEEC9A3DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:86:01:54:ff:fe:1d:81:a0:3f:bf:f3:da:
                    fe:01:06:f5:d3:b6:96:0e:c7:6b:79:08:3d:db:77:
                    a5:f8:ec:61:19:c7:c3:22:f0:e8:86:df:91:20:39:
                    09:fe:ae:46:51:1b:98:c8:01:6c:e1:7b:09:44:fa:
                    ed:2a:2d:aa:93:2f:0a:ba:bf:df:4a:98:7e:9f:14:
                    08:86:13:08:1a:0c:35:02:64:53:24:27:0f:ea:7e:
                    6b:2b:10:df:e9:0f:c7:6a:90:60:20:46:cd:cd:7b:
                    9e:70:6b:dd:b4:76:90:2f:91:a8:96:ab:a2:41:33:
                    8e:cf:06:a7:7e:3c:d2:6c:cf:ad:db:71:72:50:6a:
                    24:d6:f0:c6:6d:9b:ab:8f:73:91:6f:d7:9f:9d:6d:
                    86:29:40:d5:f3:5a:3a:54:8a:69:06:14:81:bc:d1:
                    b6:a0:87:a2:4a:2a:44:9c:08:ec:d2:f9:25:5c:36:
                    64:55:62:6d:36:a0:27:77:4f:6b:c3:b1:1d:74:9c:
                    bf:28:f9:76:a3:26:2d:67:08:a0:3f:dc:1e:82:a4:
                    37:10:4e:81:43:8d:b9:8b:c4:14:2c:82:8a:4c:02:
                    ac:6a:33:84:9d:6d:ca:bf:66:64:19:cf:94:2b:82:
                    04:50:37:e5:1e:46:1f:42:a6:3d:ef:0e:2f:4f:23:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A6:1D:C6:38:4C:22:CC:3E:6E:CF:4F:F4:D0:08:AE:EC:9A:3D:B1
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e312e302f32342d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:12:31:48:80:5d:9c:10:02:c4:2f:96:51:bc:e6:7d:58:b5:
         8f:10:af:f9:39:6a:16:ab:56:a4:2a:0e:43:ed:cb:db:fe:06:
         c7:2b:6f:46:22:c3:1a:f0:2e:04:05:54:bf:7e:e0:34:36:3a:
         28:a2:dd:13:3f:33:b8:a4:7f:35:ed:e2:71:03:e4:7c:fd:56:
         a8:8e:7c:65:79:ac:67:1a:86:42:5b:93:fa:dd:24:19:1c:ac:
         64:a6:11:59:67:ac:59:ca:dd:ff:3a:71:88:c2:b0:5d:7d:51:
         ae:68:b7:f7:8c:84:22:e1:87:61:b9:6c:3a:86:0c:9d:2f:ee:
         35:99:eb:55:31:7d:2b:e4:f6:68:a3:e6:a8:96:9e:9f:ee:56:
         eb:3d:ee:59:2d:c4:0c:f7:ec:4e:3e:ad:f2:5b:25:40:4d:c0:
         3c:20:43:a5:31:45:4c:01:17:d7:63:78:8a:10:36:2b:fc:2c:
         17:5f:67:49:58:7d:29:cc:02:f8:20:6b:03:09:1d:71:fa:53:
         57:01:b2:1b:71:91:2d:8a:d8:5e:f7:cb:6a:04:ac:8a:40:36:
         71:16:be:f0:99:99:6d:a4:d5:2d:b0:f2:6b:0f:40:44:ed:45:
         02:26:7a:d9:f2:aa:ab:42:e6:b5:5f:f5:8a:03:db:cc:ce:b3:
         c9:d3:29:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 17:20:21 2024 by rpki-client on console-fra.rpki-client.org