Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e32382e302f32322d3234203d3e203532323537.roa
File:                     3138312e3139392e32382e302f32322d3234203d3e203532323537.roa (raw, json)
Hash identifier:          nInGb/QCs9BZUq1Vv+DmPgOIxNyilp094Znqd+V9kHo=
Subject key identifier:   C3:F8:50:FE:30:C9:3A:B6:1F:47:9C:B0:5B:E5:93:80:B2:31:B1:6C
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       2B31E042F5E05759668C70A1F782DAD3489FEA94
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e32382e302f32322d3234203d3e203532323537.roa
Signing time:             Tue 05 Mar 2024 18:10:37 +0000
ROA not before:           Tue 05 Mar 2024 18:05:37 +0000
ROA not after:            Tue 04 Mar 2025 18:10:37 +0000
asID:                     52257
IP address blocks:        181.199.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:31:e0:42:f5:e0:57:59:66:8c:70:a1:f7:82:da:d3:48:9f:ea:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:37 2024 GMT
            Not After : Mar  4 18:10:37 2025 GMT
        Subject: CN=C3F850FE30C93AB61F479CB05BE59380B231B16C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0e:e8:10:ca:fc:20:d8:fa:bb:e8:d5:70:0e:
                    a8:cb:4f:4e:d4:95:fe:be:66:11:85:f1:a2:46:c6:
                    3f:69:44:d5:54:cd:ad:d8:3c:2e:2a:79:0d:3c:a6:
                    92:a4:cb:5a:9c:f1:a4:65:ed:20:8e:9a:7a:04:d7:
                    56:c3:fe:74:f0:7f:87:2b:94:91:25:2a:49:bb:5a:
                    32:81:4c:f8:de:8e:69:e7:46:57:a9:0e:7a:d4:9c:
                    9a:d6:36:23:65:b7:52:97:e0:5c:82:96:f7:0a:21:
                    67:8c:7a:a6:2c:10:d2:38:89:b6:16:e2:fc:26:3f:
                    f6:38:b6:4b:8e:b7:40:59:83:e7:2b:af:d8:ae:25:
                    41:ff:82:a6:ae:7a:0e:16:ee:8c:5d:4c:ca:73:6f:
                    ec:6e:2f:60:d4:8a:fa:7a:a3:d7:44:06:69:4e:d4:
                    11:2b:b2:9a:7a:b3:5a:dd:64:2b:ce:e4:2e:2a:c3:
                    1e:ee:38:ec:d4:d6:65:72:f4:8c:8f:ca:9b:8c:2b:
                    77:56:00:da:09:9a:ef:fc:67:98:1a:41:14:cc:f4:
                    b2:3c:f6:ad:68:f6:71:a6:87:fd:76:c6:02:5d:49:
                    5c:a4:a7:f9:b2:eb:6e:14:95:ef:b2:6d:e2:38:4a:
                    b9:31:fa:30:dd:bb:4a:de:4f:14:eb:c2:9e:5e:1c:
                    af:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F8:50:FE:30:C9:3A:B6:1F:47:9C:B0:5B:E5:93:80:B2:31:B1:6C
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e32382e302f32322d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:18:4d:4e:13:70:b3:f9:7a:e8:c5:29:d8:fc:22:b1:01:cf:
         b4:11:2f:10:74:99:78:ca:4a:75:e3:b9:06:64:5d:4e:02:a7:
         13:08:46:2e:a9:71:e8:d3:fa:ca:b4:ee:fa:8d:db:63:85:8e:
         d1:a1:c9:5b:05:77:ec:57:bb:fd:c8:28:89:d7:6e:61:72:50:
         10:52:3a:54:c6:40:0d:3c:05:da:9b:c0:5f:b8:ca:4b:57:0d:
         a5:c2:5e:66:ef:e4:4a:a1:9f:2c:3b:7b:63:ff:06:2b:4c:fa:
         7f:b7:fe:87:38:d0:5e:45:5b:1d:6f:1f:6b:f5:08:bd:a4:a5:
         34:28:5b:2c:21:d8:eb:38:15:b7:aa:ad:fb:56:dd:28:d5:3f:
         69:0d:d4:ea:b9:15:bf:8a:b4:bb:93:45:a5:d0:92:9b:c5:40:
         c6:81:72:80:d9:62:80:b5:14:2d:44:53:b1:84:7f:0e:09:6e:
         94:ef:36:77:b0:3f:ee:92:fa:fb:ca:40:e0:53:d5:de:5b:ff:
         c3:c1:a3:e0:d0:e7:4d:0c:90:4b:32:bb:af:01:3a:1d:ff:4a:
         d6:3e:16:f3:f6:8e:27:aa:bc:93:9d:cc:9f:5f:dc:ba:63:90:
         2d:fe:23:2a:19:82:4e:ba:e3:8e:ae:48:91:3c:cd:55:23:f6:
         4b:d8:e9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:47 2024 by rpki-client on console-fra.rpki-client.org