Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233322e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3233322e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          Gqm2SigEsqTAPUg6xsDajiCbE1yRJZJquD+6yjpwiNA=
Subject key identifier:   0A:A5:76:83:DC:7C:3F:63:CE:27:C8:04:8A:73:9B:10:D9:C0:4F:C2
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       234A2EE625B20AB5D907F43E1EE7CD690032E7E3
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233322e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 04 Feb 2025 18:49:33 +0000
ROA not before:           Tue 04 Feb 2025 18:44:33 +0000
ROA not after:            Tue 03 Feb 2026 18:49:33 +0000
asID:                     262253
IP address blocks:        181.224.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4a:2e:e6:25:b2:0a:b5:d9:07:f4:3e:1e:e7:cd:69:00:32:e7:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Feb  4 18:44:33 2025 GMT
            Not After : Feb  3 18:49:33 2026 GMT
        Subject: CN=0AA57683DC7C3F63CE27C8048A739B10D9C04FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9a:4b:96:94:36:d8:5e:f2:f8:0a:bb:fd:a1:
                    dd:98:8a:b3:23:81:e5:4a:b3:8c:3d:43:38:0b:05:
                    3b:3a:2c:60:19:58:a8:5d:44:0e:1c:c1:52:ad:e0:
                    d6:4c:69:44:9f:45:64:04:59:a2:cd:aa:41:63:26:
                    bd:57:8c:f5:71:ee:c9:c0:38:9e:62:b5:a0:9a:27:
                    de:68:aa:8c:c8:71:f3:ef:0e:25:d7:a7:1b:7a:b7:
                    18:75:c6:1f:60:18:72:73:c8:92:86:46:7e:1b:38:
                    df:bc:18:a1:04:be:17:fc:b1:b5:f3:2f:17:83:27:
                    94:a6:e5:24:b3:ff:77:94:07:48:70:12:c7:fa:89:
                    20:1a:5b:94:2f:87:99:5b:2a:92:0d:82:36:82:8d:
                    11:34:30:cf:18:8a:fc:17:09:2a:c2:35:eb:6c:9c:
                    c1:3f:24:94:75:3d:78:28:90:95:a1:55:c6:36:19:
                    97:f4:9b:aa:48:82:ee:a1:30:49:fe:7b:b1:9a:16:
                    10:c6:fb:2d:51:f1:0d:7c:e5:ee:40:b6:92:ca:34:
                    e6:81:f2:91:99:af:b1:58:51:4f:7b:46:f6:77:7d:
                    31:6f:b2:98:b8:ea:ac:1e:b9:4f:20:b7:a5:7f:09:
                    15:fe:92:c4:e7:7c:bb:5e:e1:37:27:d8:a2:6f:f7:
                    1c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A5:76:83:DC:7C:3F:63:CE:27:C8:04:8A:73:9B:10:D9:C0:4F:C2
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233322e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:a6:6c:26:e2:2b:a2:7c:24:4e:15:da:f9:4b:39:82:d4:b4:
         4a:75:af:e3:27:74:38:9e:c4:8c:52:45:f8:03:55:89:fd:27:
         7a:01:87:38:ef:07:16:f1:ae:f8:69:6d:b0:c3:a4:d9:b0:f0:
         60:f5:da:cc:dc:43:3a:6b:59:bd:ef:13:83:48:1f:16:4e:7b:
         ae:3c:b8:7c:33:3c:9c:f5:cd:35:95:f6:52:81:57:b1:ae:e9:
         82:64:0a:60:51:64:62:95:0f:80:9a:69:a9:25:94:c6:6e:76:
         fe:b2:40:86:83:9b:cb:bd:71:1f:7c:12:e2:14:d2:fa:2d:1d:
         bf:bf:05:51:b4:cb:fc:e1:71:f5:36:63:03:5c:59:a0:4a:2b:
         87:fb:03:6c:b7:ae:c4:be:55:e4:3a:f5:91:7b:f5:83:14:bc:
         db:b9:08:5e:ee:11:57:9d:1f:b8:e8:22:6f:aa:f1:ff:5e:53:
         aa:70:16:8a:7b:a9:21:7f:49:2f:dd:ef:54:23:c6:a3:9b:a1:
         20:a4:cb:35:02:01:0a:47:46:a4:1b:7f:ca:b8:3e:cc:13:bc:
         9b:bb:f6:ee:bd:3b:b6:29:4a:08:b5:93:fa:79:dc:a3:b4:49:
         5d:47:0e:29:5b:c3:8a:1b:fd:17:2e:0d:17:59:d8:8d:8a:14:
         1e:c6:a1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:04 2025 by rpki-client