Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233342e302f32342d3234203d3e20323637373439.roa
File:                     3138312e3232342e3233342e302f32342d3234203d3e20323637373439.roa (raw, json)
Hash identifier:          jzyJGRX7tqV1fx9EZXiI54EM050qIWRZSCF7YfB5MxM=
Subject key identifier:   4B:97:58:10:F8:E6:90:7A:23:F3:2B:A8:58:B5:33:F7:83:02:0B:E2
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       26F30054E05ACD01677E72224F1FB44B1B23E4CA
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233342e302f32342d3234203d3e20323637373439.roa
Signing time:             Tue 05 Mar 2024 18:03:38 +0000
ROA not before:           Tue 05 Mar 2024 17:58:38 +0000
ROA not after:            Tue 04 Mar 2025 18:03:38 +0000
asID:                     267749
IP address blocks:        181.224.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f3:00:54:e0:5a:cd:01:67:7e:72:22:4f:1f:b4:4b:1b:23:e4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Mar  5 17:58:38 2024 GMT
            Not After : Mar  4 18:03:38 2025 GMT
        Subject: CN=4B975810F8E6907A23F32BA858B533F783020BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b4:49:28:52:de:27:a5:c4:fc:d6:62:7b:8a:
                    da:0c:5d:15:89:c9:c1:c8:5e:e2:06:ae:43:b7:f5:
                    26:7d:f0:07:b9:3c:7d:2b:5b:5d:7b:ee:f0:dd:c0:
                    51:c0:64:8e:da:3f:a2:23:59:6d:f5:ad:5e:69:a7:
                    ff:bd:e7:e8:f6:0b:ec:d1:66:3e:10:00:6c:13:62:
                    f9:fe:d9:a0:f0:bb:fa:94:53:29:9f:1b:8f:7d:b7:
                    45:41:66:d2:fd:01:83:b4:d8:00:c9:a2:6b:ce:49:
                    94:9e:3e:b2:e8:26:c7:c3:94:02:d4:8f:62:7d:f3:
                    1a:12:a8:a0:71:08:91:c0:9c:d9:16:5c:85:8b:7e:
                    f8:d9:0f:72:89:c8:eb:11:c5:3c:61:48:61:76:e4:
                    be:d2:89:8b:53:fb:ad:f3:f6:eb:5e:d8:cb:fc:94:
                    47:09:ae:81:dc:7a:84:a8:9c:56:ae:42:58:f1:d7:
                    5f:fe:b8:7a:6a:93:54:bb:23:4c:2f:32:3c:bc:69:
                    f5:30:0b:dc:c8:ee:b9:42:22:f6:66:d8:0a:52:2a:
                    49:42:52:e2:46:3c:ac:d1:7e:9e:46:07:7e:28:ee:
                    0b:10:ec:4d:e1:ec:16:1c:9d:cc:c7:20:86:dd:52:
                    5b:a5:51:f3:4b:07:42:b5:f0:e9:2b:fe:b1:b2:41:
                    25:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:97:58:10:F8:E6:90:7A:23:F3:2B:A8:58:B5:33:F7:83:02:0B:E2
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233342e302f32342d3234203d3e20323637373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:04:6d:6f:3f:92:54:d7:11:c8:aa:a3:24:96:98:0f:59:a3:
         86:11:a4:66:68:71:8a:5c:6a:18:31:ef:cb:a4:e5:6c:4b:b7:
         69:03:b9:a1:fb:dc:41:a8:e1:df:8c:45:fe:f6:47:ae:59:75:
         57:6f:9c:99:37:8a:a3:16:35:9a:b4:1b:c8:a4:d3:c7:91:43:
         52:f4:8e:11:fc:4e:90:b7:ec:f4:4c:21:7b:63:de:d5:57:3e:
         68:f2:7f:bc:01:c7:ae:4b:37:f9:43:e8:4b:33:bf:c7:da:ec:
         3f:58:b7:17:b9:c1:67:77:f4:97:e5:4f:f6:ea:0c:15:57:82:
         9a:3c:ba:90:07:6e:e6:e3:48:60:39:91:f0:d1:5a:a1:d5:03:
         e0:58:c4:ad:a7:6a:f2:30:60:d1:0b:83:56:2d:09:58:e5:d6:
         12:15:6a:8b:88:0a:d6:d2:25:df:25:fa:12:71:58:97:a8:85:
         5d:df:ad:8c:fe:7b:11:d1:24:03:70:c9:b6:71:9e:b2:c9:c8:
         67:e3:d8:da:67:24:49:fd:2a:56:52:52:2c:b0:cb:35:bc:19:
         f2:13:de:c3:7d:0f:62:94:d0:4b:06:81:d3:4c:2d:72:2a:21:
         ac:56:1f:d0:1e:a3:a2:fa:a4:6a:cb:85:b6:c4:9d:ef:0e:2f:
         58:6f:7b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:09:57 2024 by rpki-client on console-fra.rpki-client.org