Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e36342e302f31382d3234203d3e203532323537.roa
File:                     3138312e3139392e36342e302f31382d3234203d3e203532323537.roa (raw, json)
Hash identifier:          jQgDOT/uTOybi5CzDr+gp7yj/4Z6AVyVO1ZyWgyh+lM=
Subject key identifier:   B8:31:9A:24:F1:2A:88:FD:A2:1C:F4:BC:6C:68:40:D3:D6:F1:74:7B
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       5F93AAB50E8EFC20B1BBA12692A1E2B08216FA1B
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e36342e302f31382d3234203d3e203532323537.roa
Signing time:             Tue 05 Mar 2024 18:10:22 +0000
ROA not before:           Tue 05 Mar 2024 18:05:22 +0000
ROA not after:            Tue 04 Mar 2025 18:10:22 +0000
asID:                     52257
IP address blocks:        181.199.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:93:aa:b5:0e:8e:fc:20:b1:bb:a1:26:92:a1:e2:b0:82:16:fa:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:22 2024 GMT
            Not After : Mar  4 18:10:22 2025 GMT
        Subject: CN=B8319A24F12A88FDA21CF4BC6C6840D3D6F1747B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:04:e5:9f:6a:da:71:7d:9b:41:d4:65:02:
                    4c:52:12:a8:ef:c9:61:68:a1:3e:8d:09:1d:19:67:
                    b4:0b:9a:c7:c9:ae:73:92:b9:ff:cc:43:d1:13:db:
                    20:cc:92:f9:11:b7:5d:6d:89:f6:ae:0d:8f:11:6e:
                    d8:84:de:aa:6f:d5:f9:23:3d:f1:f8:1e:1c:63:03:
                    fa:b0:3d:b3:b8:3e:e5:79:cc:40:c7:29:82:34:12:
                    8d:a7:f5:e3:49:99:20:8e:e8:92:f8:d7:aa:24:b0:
                    f8:66:64:5e:aa:87:c5:46:a2:57:9c:27:0c:cc:cd:
                    d2:90:ec:c4:1a:69:6d:47:04:33:22:a9:c2:7b:97:
                    94:0f:d3:94:14:bb:b7:77:09:4e:18:fe:07:96:3b:
                    30:a4:ff:72:88:bc:ab:27:45:b8:b0:ad:1a:30:6d:
                    f0:88:dc:03:55:ae:9b:b0:8b:8e:19:95:ad:0e:a6:
                    dc:48:ca:31:98:90:81:10:36:d8:ff:d3:d3:14:e1:
                    bf:2b:17:af:de:d6:6c:b4:cd:34:0f:26:5c:cb:c5:
                    fd:ae:8c:1c:2f:f9:d0:e3:3f:b2:7b:fe:1d:28:01:
                    86:eb:db:98:c0:f7:e2:eb:ec:17:08:78:9c:10:9e:
                    df:07:8e:21:2c:20:c2:98:64:57:0d:59:52:40:c2:
                    c6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:31:9A:24:F1:2A:88:FD:A2:1C:F4:BC:6C:68:40:D3:D6:F1:74:7B
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e36342e302f31382d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         11:55:08:0b:ad:70:9e:a3:f4:cf:36:1a:3c:0a:ab:96:22:2d:
         09:1a:dc:ba:c7:a4:40:11:45:b3:d2:ea:59:c5:bc:2f:3b:36:
         ec:1a:ef:4e:9b:02:15:bf:bd:69:af:51:03:73:d9:70:ab:e1:
         a8:3f:aa:94:ed:45:6e:3c:8b:79:69:92:1c:20:e0:b9:2b:a2:
         6e:bd:b4:8c:21:f1:5f:68:4f:22:d4:c8:0f:02:b6:e0:13:eb:
         a1:45:15:77:42:76:df:33:fb:00:6a:31:a0:6b:a4:74:85:44:
         d5:4f:f7:10:01:e7:26:f0:ef:ff:54:3a:9b:89:b8:02:5c:2b:
         a9:31:f3:f8:84:95:43:d3:f1:e8:eb:cd:4b:1e:c5:3e:51:6d:
         03:71:27:ed:5e:78:47:05:6a:29:15:69:0e:56:b0:05:a6:82:
         a5:9d:de:0b:cc:ed:ae:a0:e6:7d:53:39:66:67:d9:7d:84:d1:
         0f:60:ff:ee:bc:ca:9d:51:c5:97:20:a0:db:b6:6f:4b:fe:ed:
         49:78:a5:02:cd:6a:78:bf:5c:b1:3b:c3:b0:fa:4a:56:0a:26:
         05:4d:d9:38:f0:fa:62:e6:ca:dc:c4:70:3c:41:d3:b9:ad:cc:
         a6:85:53:cd:aa:f4:8d:20:e6:68:6d:68:aa:f7:d2:48:14:1a:
         bc:44:da:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:32 2024 by rpki-client on console-ams.rpki-client.org