Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203532323537.roa
File:                     3138312e33392e302e302f31362d3234203d3e203532323537.roa (raw, json)
Hash identifier:          /efYlD5HUc4VRLj7Jc8jCCO1TrNelCcArVnKy4Hc3m4=
Subject key identifier:   7D:35:C2:8E:CC:4D:2E:EB:DE:E5:2F:7F:78:62:40:B6:14:E7:C8:56
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       5BBCC82B8E0094E4B9F84379ED7340FE6DBD531D
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203532323537.roa
Signing time:             Tue 05 Mar 2024 18:10:34 +0000
ROA not before:           Tue 05 Mar 2024 18:05:34 +0000
ROA not after:            Tue 04 Mar 2025 18:10:34 +0000
asID:                     52257
IP address blocks:        181.39.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:bc:c8:2b:8e:00:94:e4:b9:f8:43:79:ed:73:40:fe:6d:bd:53:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:34 2024 GMT
            Not After : Mar  4 18:10:34 2025 GMT
        Subject: CN=7D35C28ECC4D2EEBDEE52F7F786240B614E7C856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f2:f8:67:f3:0c:a6:52:85:b6:70:fa:20:74:
                    a1:bd:2d:af:e6:41:59:ad:28:e7:78:f9:61:58:7b:
                    05:ff:f9:e1:e8:84:c8:22:44:79:15:cd:75:0a:72:
                    a7:0b:fd:ff:28:45:93:a4:d9:80:47:23:34:c8:d6:
                    16:55:58:0a:d3:1f:1e:27:13:49:5b:91:21:4c:bb:
                    59:de:e5:a5:e4:34:82:0b:85:2b:82:ae:2c:78:71:
                    95:37:6e:ca:0f:f2:cf:ce:6d:9b:83:7f:c6:1d:9d:
                    97:9c:28:76:0d:28:76:53:ac:eb:e4:a4:80:d2:d8:
                    a1:90:41:29:a3:6d:3f:15:14:be:f9:35:bf:87:47:
                    a0:05:20:7d:11:82:bc:01:5c:fe:d1:76:15:98:c4:
                    6c:52:87:74:53:6e:68:03:3c:ff:35:b0:30:51:d8:
                    3c:71:17:4a:29:38:a8:03:c5:f1:e0:98:ea:bd:11:
                    79:26:e5:e4:44:6e:3c:53:c6:9f:59:44:4d:88:75:
                    d1:2b:cd:55:02:0e:67:77:4b:1b:d2:0a:b2:42:80:
                    a9:99:42:9a:6c:92:12:10:d6:42:ff:26:43:d5:31:
                    29:80:90:69:38:10:83:cc:8e:86:51:ff:ef:ce:a2:
                    db:53:a9:3a:80:ea:d0:87:93:cd:7b:fd:a7:fa:00:
                    27:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:35:C2:8E:CC:4D:2E:EB:DE:E5:2F:7F:78:62:40:B6:14:E7:C8:56
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.39.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         62:08:2b:ab:bf:c4:0d:95:15:3e:93:98:48:41:b8:c9:72:6f:
         7b:79:ae:4c:45:26:45:5c:c2:4c:20:09:ef:3b:5f:ba:36:ef:
         58:d7:57:0f:27:d2:d4:e3:bc:40:8a:48:80:b9:08:56:49:b4:
         16:35:0e:f2:7a:fb:87:fb:29:19:c3:95:16:5f:bb:70:fe:23:
         67:14:e9:4f:57:e3:45:42:ea:4a:e8:e6:b6:9c:e9:d5:bd:79:
         8b:dd:a9:c4:5a:20:41:22:0a:f1:26:d7:7f:7c:83:7b:44:54:
         d0:eb:58:9b:19:78:4d:1c:61:ea:af:13:a9:6e:f3:c7:96:e8:
         3d:a9:e5:0b:2f:8c:16:95:ed:ae:cf:97:0d:8d:22:2d:b5:5a:
         41:3b:d4:63:c4:8b:72:a6:ae:59:9b:26:0e:b8:53:b2:71:47:
         81:f7:ff:b1:7f:6e:ba:e6:fa:08:94:98:99:b1:e6:dc:7f:f6:
         8f:96:b7:30:33:41:d2:ef:48:f1:8c:0b:8a:72:11:ff:1e:d0:
         23:82:cf:6f:e4:e1:5d:90:75:a1:98:7d:8d:bc:c3:10:ae:92:
         69:bc:4d:a0:a9:8a:91:61:9c:d4:9d:c8:74:25:b5:95:f7:b5:
         9b:ca:a9:96:b8:87:46:22:70:d4:b8:2c:94:50:fb:d7:17:70:
         58:6c:43:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:47 2024 by rpki-client on console-fra.rpki-client.org