Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32342e302f32342d3234203d3e20323633383039.roa
File:                     3138312e3139312e32342e302f32342d3234203d3e20323633383039.roa (raw, json)
Hash identifier:          Xef8RnRo6VilHnYGM9T6Prhio+JnfbUOZZwvdg3Vteg=
Subject key identifier:   49:EB:7C:EE:8E:89:3C:E5:35:43:99:AD:80:A3:B6:52:BD:16:49:AE
Certificate issuer:       /CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
Certificate serial:       507CEAF08F86ABD603DF30AD3A1975F4D8BDFC35
Authority key identifier: 3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32342e302f32342d3234203d3e20323633383039.roa
Signing time:             Tue 05 Mar 2024 18:09:05 +0000
ROA not before:           Tue 05 Mar 2024 18:04:05 +0000
ROA not after:            Tue 04 Mar 2025 18:09:05 +0000
asID:                     263809
IP address blocks:        181.191.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:7c:ea:f0:8f:86:ab:d6:03:df:30:ad:3a:19:75:f4:d8:bd:fc:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
        Validity
            Not Before: Mar  5 18:04:05 2024 GMT
            Not After : Mar  4 18:09:05 2025 GMT
        Subject: CN=49EB7CEE8E893CE5354399AD80A3B652BD1649AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:c6:47:3a:45:e3:36:90:e2:6c:11:b8:d0:
                    9d:6d:2c:15:5d:02:2c:52:8a:dc:63:8e:a2:4e:88:
                    ab:5c:7d:3d:5f:25:22:0f:5a:76:80:02:25:b3:a5:
                    20:e0:d9:b8:45:7b:35:54:23:11:c3:6d:99:77:26:
                    bc:dc:36:1d:3e:ec:72:5b:7f:6f:9f:21:9f:a3:80:
                    e1:cb:c5:34:35:0c:e2:5b:59:f9:c3:4d:ec:96:0c:
                    3e:8f:11:2c:9c:3d:3b:e8:f6:23:e1:3c:61:7c:6a:
                    d1:0a:82:c4:53:3e:d8:d8:ab:1e:2a:93:62:17:86:
                    e2:4d:a5:ff:07:2e:65:d9:74:35:a6:11:37:19:b8:
                    f8:c2:a2:e6:08:60:bf:69:2b:73:d8:1e:a2:7f:87:
                    94:01:c7:60:0d:df:fd:87:b5:6d:93:f8:70:be:a6:
                    ce:02:c7:65:52:18:7c:58:01:4f:8a:bd:d4:cd:b2:
                    f5:cc:de:6f:ae:9c:22:f9:22:e2:d5:12:e4:06:6d:
                    15:b0:6c:cd:d5:c6:76:10:18:0e:f2:3a:e8:48:9e:
                    7f:d5:46:b9:80:2b:4c:85:a0:c4:ff:0a:59:da:09:
                    98:5b:bd:d1:be:be:87:66:89:06:4a:a6:23:54:31:
                    98:4c:b7:b5:af:61:ed:d4:04:0b:9e:bc:9f:a9:72:
                    55:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EB:7C:EE:8E:89:3C:E5:35:43:99:AD:80:A3:B6:52:BD:16:49:AE
            X509v3 Authority Key Identifier:
                keyid:3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32342e302f32342d3234203d3e20323633383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:ea:7b:b7:ac:21:b3:e6:17:cc:d8:8b:a7:ed:1f:0a:5c:29:
         c7:5e:8d:a5:bc:77:24:d9:74:2a:7f:c3:28:dc:49:81:0c:2d:
         0a:f9:3c:63:9a:a5:1a:ac:11:48:e8:75:bc:5f:cf:61:66:50:
         dc:ec:11:bc:a6:4a:d0:2f:a9:e8:f4:22:30:41:ad:af:4d:02:
         eb:e1:77:a7:84:30:7d:25:41:2e:03:7d:78:1f:31:3f:ce:d1:
         0d:cc:58:7c:5c:7a:a9:94:d0:15:b4:fa:74:95:bf:d4:c3:f5:
         0c:fb:2e:d3:f0:70:3a:67:0c:b2:e3:64:d1:10:03:48:3c:31:
         61:4c:2d:57:63:76:d4:16:11:25:63:a6:35:12:f7:c8:3a:8f:
         1f:3d:65:6d:d8:b1:76:13:99:b8:cb:12:1e:3f:8f:7d:3e:c4:
         24:3d:da:64:80:fb:c4:fe:4c:3f:b9:1a:31:f3:75:c3:79:94:
         db:cb:a5:24:39:a6:0f:8f:b6:62:a0:7d:7f:aa:44:6f:85:26:
         a8:93:39:84:41:d4:ff:0a:28:68:a6:7d:3a:58:55:a3:eb:79:
         af:49:be:a8:c2:d4:2f:08:f7:e5:22:c6:31:0f:e7:ea:4a:22:
         a7:90:38:89:31:49:30:ad:fd:18:93:c3:4b:7c:3f:0e:ae:d6:
         82:3a:c9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:02 2024 by rpki-client on console-ams.rpki-client.org