Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137392e3132382e302f31372d3234203d3e203134373534.roa
File:                     3138312e3137392e3132382e302f31372d3234203d3e203134373534.roa (raw, json)
Hash identifier:          KPDr9u55ZgiYQzxiCFLIxa5fRjV2y/fTVvaXPrAImKc=
Subject key identifier:   7A:B8:ED:E7:DE:6E:FC:23:D1:E4:AA:E3:9E:F0:4C:EA:FB:62:5E:E5
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       52B1FEBB91DA534BC032426E8047C0199DA6D54C
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137392e3132382e302f31372d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 18:18:10 +0000
ROA not before:           Tue 05 Mar 2024 18:13:10 +0000
ROA not after:            Tue 04 Mar 2025 18:18:10 +0000
asID:                     14754
IP address blocks:        181.179.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b1:fe:bb:91:da:53:4b:c0:32:42:6e:80:47:c0:19:9d:a6:d5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Mar  5 18:13:10 2024 GMT
            Not After : Mar  4 18:18:10 2025 GMT
        Subject: CN=7AB8EDE7DE6EFC23D1E4AAE39EF04CEAFB625EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f6:03:d2:5b:eb:5d:31:17:87:75:87:e8:62:
                    fb:68:d1:6d:f5:a6:7d:f7:7a:98:76:98:23:5a:20:
                    7a:ea:c5:8a:f2:85:38:54:95:cb:5b:42:80:d8:34:
                    7c:1f:1f:bd:72:71:7d:25:d8:cf:c1:f6:b9:a8:09:
                    c2:5d:1c:aa:ba:46:21:13:20:b1:cb:b3:53:c5:56:
                    fa:b7:b9:f5:3e:83:09:6a:05:0d:a4:4a:73:ac:0b:
                    46:39:69:d3:49:09:7e:af:de:6f:5f:a8:c9:12:05:
                    07:66:36:1e:18:0d:72:b4:f0:98:d8:54:6c:3d:3e:
                    cd:1a:ca:82:3e:03:6c:5d:97:45:13:c6:21:cf:51:
                    ee:eb:08:f3:2b:e6:82:05:4f:34:27:c7:cb:0d:be:
                    53:68:d0:c0:f1:0d:13:7e:9d:9f:7d:c7:93:72:7a:
                    e2:e2:44:af:a3:ab:97:4d:26:1f:8c:88:10:cc:9b:
                    78:cc:a6:f5:bb:b6:80:c5:29:05:12:82:0a:00:90:
                    21:b6:c6:fa:21:77:56:00:d9:0a:7a:19:d4:09:53:
                    be:14:ff:bc:4a:4d:45:1f:cb:22:6f:7e:fa:6e:d3:
                    62:fb:24:fc:81:be:51:26:bf:51:9a:eb:c0:20:df:
                    1e:de:4e:f3:3c:c6:d0:8c:e2:1b:69:22:8b:32:0d:
                    73:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B8:ED:E7:DE:6E:FC:23:D1:E4:AA:E3:9E:F0:4C:EA:FB:62:5E:E5
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3138312e3137392e3132382e302f31372d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.179.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         68:74:6c:86:e8:28:87:e2:75:d6:77:08:d9:0a:ae:e6:6a:8e:
         be:84:e4:74:5e:d9:f9:a4:2d:50:09:e6:30:a7:e2:90:53:84:
         19:e0:a7:14:cf:22:64:4f:ce:56:3b:36:00:08:11:3e:be:07:
         22:86:29:c1:6d:32:71:10:57:7e:f7:b8:81:c0:5f:6f:89:d3:
         16:91:5b:ac:f1:fe:8a:bb:4e:ac:eb:98:5e:bc:70:87:c8:07:
         9a:b8:04:1c:91:c2:53:cf:b6:d7:28:3a:f0:77:24:11:7f:6a:
         4a:0b:2b:81:0f:23:ff:99:19:5a:1b:ed:0a:bc:fb:30:b8:61:
         35:d5:08:9e:90:d1:6f:cc:15:79:80:fa:21:12:21:92:4f:12:
         e0:6b:04:77:6b:0d:ed:0a:1a:0c:1e:35:66:f7:74:11:0e:a4:
         02:ba:d4:fd:c5:45:01:c9:ea:71:6d:c1:42:dc:20:b9:5f:c1:
         a7:94:5b:00:ec:ca:bb:10:97:1e:fa:f0:5e:3c:cd:79:8c:a2:
         f6:dd:b2:86:3f:0c:72:03:75:97:e7:51:fd:aa:f4:a9:73:24:
         b6:a9:93:b4:bd:8a:06:0a:9e:1e:a0:f3:84:3e:5b:a0:5f:39:
         58:c0:72:b2:1d:b2:52:cf:2e:1e:5c:0a:06:06:b2:8a:29:16:
         6c:01:a3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:16 2024 by rpki-client on console-fra.rpki-client.org