Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3232372e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3232372e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          tj1R1DcxEFl5rZM81oaYBOh8AGTvcCTOFS/saT/oMxs=
Subject key identifier:   3D:9D:1D:9B:85:4A:31:99:49:CE:C1:EA:60:C9:54:2D:5E:61:92:CC
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       5375A71901659C5EBFB88252B334A7F689AFEF0F
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3232372e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 04 Feb 2025 18:49:41 +0000
ROA not before:           Tue 04 Feb 2025 18:44:41 +0000
ROA not after:            Tue 03 Feb 2026 18:49:41 +0000
asID:                     262253
IP address blocks:        181.224.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:75:a7:19:01:65:9c:5e:bf:b8:82:52:b3:34:a7:f6:89:af:ef:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Feb  4 18:44:41 2025 GMT
            Not After : Feb  3 18:49:41 2026 GMT
        Subject: CN=3D9D1D9B854A319949CEC1EA60C9542D5E6192CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:37:15:97:42:b8:39:e0:43:5d:87:7d:54:
                    61:a9:45:45:52:df:6d:70:15:d1:3d:6d:79:30:78:
                    7f:41:4a:a8:c3:3b:62:c6:ff:66:42:ef:e0:99:77:
                    03:94:20:64:e3:db:3e:e2:8c:3e:99:0a:ba:d2:9e:
                    d2:48:ff:90:93:38:19:de:33:11:8b:c0:8e:71:b6:
                    14:df:d4:49:78:4a:dc:59:98:b6:2a:39:c6:1b:ed:
                    51:df:00:25:b0:8f:04:46:2f:ad:e1:5f:76:71:55:
                    ff:a8:52:df:b9:60:f3:e6:3c:75:22:71:c7:a1:26:
                    80:53:4e:98:8c:c2:38:96:3c:18:b6:76:6f:ac:d9:
                    1a:d1:6b:41:90:4d:c4:ff:58:ac:c8:ed:94:da:4d:
                    59:0d:e0:18:bf:31:c6:ef:fe:30:97:a9:03:8c:16:
                    19:41:56:93:ee:62:ac:35:50:11:c4:f1:a6:d8:af:
                    98:f9:60:e5:dd:52:2c:49:d6:75:4a:77:e1:8c:b9:
                    db:2e:e6:c9:41:21:a6:cc:65:34:dd:10:d1:10:cf:
                    b6:e7:d4:a5:95:d7:9a:35:36:99:e3:18:cc:2e:d0:
                    17:8c:15:b2:26:f4:82:9b:52:c3:a5:76:7f:1b:df:
                    0a:ec:ab:a5:21:04:13:fe:65:30:85:68:6e:6e:58:
                    08:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9D:1D:9B:85:4A:31:99:49:CE:C1:EA:60:C9:54:2D:5E:61:92:CC
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3232372e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:c9:23:f9:0e:88:61:82:8a:d1:f5:db:19:3a:7b:82:17:6c:
         41:b9:b6:e8:84:26:58:13:84:8d:95:c2:0e:cf:51:50:a8:39:
         d4:f1:8b:f0:49:ef:71:9e:ef:07:27:b2:a1:83:ef:62:ed:78:
         d0:4f:7a:93:d1:62:d7:64:93:3c:6f:34:fd:24:cf:b5:5a:a8:
         0b:c8:b8:ac:c3:c8:48:a7:72:d2:7b:b4:cd:62:f7:e1:0e:f2:
         9c:2c:00:a9:31:01:44:bb:6d:74:4e:a8:b2:9a:c5:32:64:9c:
         55:18:f5:8f:a6:ee:90:0b:91:74:44:06:7c:96:69:e6:c5:41:
         53:54:df:e3:ef:b3:f7:7b:85:df:88:3c:f3:bf:18:1c:64:25:
         23:b7:10:04:d5:cc:b0:fe:26:6e:61:d5:4d:c6:57:20:5e:99:
         86:7a:17:e7:58:4e:d9:05:06:10:7b:9d:04:64:28:8b:75:39:
         46:22:59:31:41:05:48:ef:e2:7d:33:83:31:11:e1:c7:4a:3f:
         f1:9d:6b:c2:26:b0:6d:55:69:dd:82:94:d9:52:23:2e:3c:23:
         45:48:ef:60:df:d7:e6:ee:0a:49:b0:2f:26:dd:6e:03:32:9d:
         48:c0:2c:06:60:0f:8e:ed:b4:63:d1:a9:5a:eb:fd:02:c2:02:
         34:89:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:03 2025 by rpki-client