Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32362e302f32342d3234203d3e20323633383039.roa
File:                     3138312e3139312e32362e302f32342d3234203d3e20323633383039.roa (raw, json)
Hash identifier:          hMP5+J4WwHcIXFu8YLqgqP6islqf7vPePI0fafMnjpU=
Subject key identifier:   59:E9:C7:60:7B:DE:99:E5:8C:4E:F9:48:A0:06:62:AB:BC:63:2B:24
Certificate issuer:       /CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
Certificate serial:       0BB95FAB8E3F95F008F09452526E94D962308F79
Authority key identifier: 3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32362e302f32342d3234203d3e20323633383039.roa
Signing time:             Tue 05 Mar 2024 18:09:05 +0000
ROA not before:           Tue 05 Mar 2024 18:04:05 +0000
ROA not after:            Tue 04 Mar 2025 18:09:05 +0000
asID:                     263809
IP address blocks:        181.191.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b9:5f:ab:8e:3f:95:f0:08:f0:94:52:52:6e:94:d9:62:30:8f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76
        Validity
            Not Before: Mar  5 18:04:05 2024 GMT
            Not After : Mar  4 18:09:05 2025 GMT
        Subject: CN=59E9C7607BDE99E58C4EF948A00662ABBC632B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:c4:56:0e:7f:f1:a5:fd:45:1b:85:ce:e9:
                    ac:38:a7:c4:ad:5b:37:f2:3d:e5:9d:55:68:d4:53:
                    4c:4f:c5:b5:fc:86:24:ff:f4:3e:76:f4:55:57:1c:
                    d4:22:32:0e:5a:d5:bf:b1:b4:95:8e:07:90:46:1e:
                    b1:ab:9b:40:53:4b:2e:9d:ac:45:39:ae:6d:c2:30:
                    0b:f3:73:aa:be:24:4b:c7:c6:00:89:e9:d6:33:d1:
                    26:39:14:65:08:d8:26:f3:ff:2f:01:4d:be:75:d0:
                    af:e9:a7:67:a0:34:88:6e:1b:7e:39:7a:6d:ef:bc:
                    f1:63:2c:5a:39:ab:12:98:d9:7c:eb:f7:ce:73:80:
                    68:c2:b3:0c:b0:1b:85:0a:73:4c:75:73:a3:ca:73:
                    19:36:b4:e8:28:48:e8:e0:47:b0:95:1b:51:74:5b:
                    1e:ce:81:7b:ac:e0:1f:d4:84:46:eb:6f:ec:9e:f8:
                    77:57:06:ab:47:f9:fc:a9:53:22:9c:76:67:01:fc:
                    87:7e:ae:46:9f:2a:19:b6:ac:bc:fc:b8:55:6a:f0:
                    fa:57:c0:2c:6c:aa:5a:76:0c:ab:95:a5:cf:48:b2:
                    e3:d5:05:45:52:8d:58:05:fb:18:91:26:ef:dc:c0:
                    94:7e:91:ed:ec:c9:46:bb:48:93:47:f3:18:36:76:
                    ff:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E9:C7:60:7B:DE:99:E5:8C:4E:F9:48:A0:06:62:AB:BC:63:2B:24
            X509v3 Authority Key Identifier:
                keyid:3D:06:F0:A5:D3:F0:CF:D8:4C:F1:A8:1F:12:D5:E3:C7:62:3E:CD:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D06F0A5D3F0CFD84CF1A81F12D5E3C7623ECD76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FF2D4DC420C4C39790BC2C03D51255D0A1C01933F37C28DC074059858B00573E/0/3138312e3139312e32362e302f32342d3234203d3e20323633383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:cc:a4:66:6e:4f:29:c9:f0:67:36:49:9e:c8:e6:f7:1a:3c:
         60:07:dc:e2:2c:c0:c6:c9:9f:e6:52:06:c1:8d:e4:d2:ee:52:
         53:3f:83:db:d6:e7:24:0f:4f:bd:69:1d:e0:54:22:f8:b5:4f:
         a6:c5:26:3d:d7:fb:c6:40:90:3a:76:4a:e4:99:33:ce:01:9d:
         9c:ea:f7:ce:95:af:42:1c:04:dd:7f:cd:25:02:d2:9b:5d:44:
         ae:1b:54:07:b7:95:3b:da:c7:78:b7:7b:a5:2f:07:6d:e9:bc:
         b8:72:c5:5e:57:1e:8c:5c:60:26:af:b4:66:bb:59:47:99:a2:
         07:5f:24:87:e1:6d:33:c1:4d:7c:dc:92:0a:e7:1d:08:d3:17:
         54:57:00:76:8f:88:ab:a2:8c:f9:3b:c1:bd:da:62:b8:fc:e5:
         71:46:e8:02:8a:a0:9e:19:f9:9c:b4:51:f9:78:a9:5b:93:87:
         d8:e6:60:f9:ba:e0:2e:b8:fe:3f:db:6f:5d:92:f3:58:57:99:
         4b:07:6d:2d:91:56:38:42:29:bb:7f:4b:0a:d2:83:cd:4b:36:
         74:23:ea:bf:4d:cf:79:ae:2e:23:bf:1b:e5:49:44:05:a3:16:
         eb:07:25:42:28:d2:1c:f3:62:85:65:3c:84:0a:b1:44:0a:15:
         3d:a4:81:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:02 2024 by rpki-client on console-ams.rpki-client.org