Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233352e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3233352e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          4faOmXo0uzkMYUWku+imUF6/cZotOmibPgjDdZyHhh4=
Subject key identifier:   8A:2D:BE:1E:4C:7F:98:95:74:1D:A1:D8:A5:46:D2:19:B9:96:87:51
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       21FFD8EA2D2DD7809419B9A2DFC1443B6B390C71
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233352e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 05 Mar 2024 18:03:42 +0000
ROA not before:           Tue 05 Mar 2024 17:58:42 +0000
ROA not after:            Tue 04 Mar 2025 18:03:42 +0000
asID:                     262253
IP address blocks:        181.224.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ff:d8:ea:2d:2d:d7:80:94:19:b9:a2:df:c1:44:3b:6b:39:0c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Mar  5 17:58:42 2024 GMT
            Not After : Mar  4 18:03:42 2025 GMT
        Subject: CN=8A2DBE1E4C7F9895741DA1D8A546D219B9968751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f8:b4:fc:b8:a0:b8:ef:59:11:d8:f9:5a:8a:
                    12:cc:75:03:c7:4e:bb:4e:65:9a:d4:ab:95:4c:28:
                    c8:09:f8:59:7d:4a:2a:ea:b9:06:b0:8c:ad:de:8e:
                    f0:30:19:4b:8a:89:f7:46:d0:b1:7e:d0:6e:d7:a7:
                    c2:8c:c4:d1:80:8b:42:2b:e9:7e:00:38:2f:86:09:
                    80:d0:b8:5e:5f:e2:d6:65:8a:7b:23:43:ac:6a:2d:
                    55:53:2a:e0:62:29:8b:fc:7c:88:fa:0a:bf:e3:6c:
                    60:bd:bf:0f:3f:9f:5a:8a:4f:46:01:c4:f8:42:06:
                    fb:3d:1c:9b:ba:0d:7b:04:24:ca:61:91:ea:bc:99:
                    2c:4a:9d:ef:55:4c:64:b3:f6:92:1f:e3:a8:72:4b:
                    2c:0b:e7:0a:eb:71:23:87:57:21:ec:80:36:b0:d3:
                    35:59:f0:1e:e1:74:f4:85:c0:df:76:c0:ce:33:fb:
                    ee:23:44:89:ec:d2:d6:91:2f:55:a0:b1:ff:76:4c:
                    5b:30:80:25:ec:15:a9:e4:3f:95:99:94:53:43:6e:
                    b1:75:a9:84:27:b5:15:c7:d3:c2:be:49:96:43:47:
                    a7:0b:6f:09:22:3a:e6:ac:10:f9:d5:de:be:dc:0c:
                    e9:17:d1:bc:1f:93:af:d3:f2:af:81:c6:76:11:42:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2D:BE:1E:4C:7F:98:95:74:1D:A1:D8:A5:46:D2:19:B9:96:87:51
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233352e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:1e:11:4c:cf:c7:d6:5b:ed:1c:6b:73:0f:bf:c4:bf:4e:14:
         dc:01:f9:29:5c:ad:e4:67:4c:ba:8e:c0:73:6e:8a:c2:c2:a5:
         13:78:42:7b:e6:11:b7:4c:f1:4b:63:32:79:bc:ba:62:c1:92:
         c3:76:a7:1c:1f:d6:0b:c8:3d:0c:3e:dd:0a:b0:9c:85:00:c2:
         d5:3a:b2:5d:f1:d6:6a:f5:e6:eb:25:ec:19:83:c6:5b:cc:e5:
         3b:2f:3a:c9:2a:27:91:e1:ca:e7:dd:3a:e7:f5:99:02:5c:4a:
         cb:21:99:ab:66:9c:48:5b:9d:c4:59:bd:2f:26:d5:c4:08:21:
         00:77:56:10:b5:f1:52:50:ae:1d:ed:2a:53:f1:15:fc:be:72:
         1d:50:a8:42:55:be:3e:68:3e:64:68:5f:5f:43:4c:cd:98:fc:
         04:91:8a:22:9d:d0:ea:89:b6:37:b4:25:a8:0f:25:0a:c5:b6:
         db:89:f5:00:f8:a1:78:0e:16:28:16:3a:2f:c8:c5:cc:25:83:
         62:05:b0:16:86:e0:c5:14:35:f9:8a:4c:90:cb:5e:75:9e:71:
         5b:1f:ca:d3:d6:c5:61:c4:d7:74:5a:c1:3c:47:00:e2:9b:85:
         2d:10:a7:e6:9d:cb:f3:55:3a:15:ad:06:29:2f:0c:30:aa:cd:
         fc:3b:a1:08
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUIf/Y6i0t14CUGbmi38FEO2s5DHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDcyRjAxMTg3OTZCMDk3NURDRDFCODIwQjM0MzUyMzcz
RkMwOEY2NTAeFw0yNDAzMDUxNzU4NDJaFw0yNTAzMDQxODAzNDJaMDMxMTAvBgNV
BAMTKDhBMkRCRTFFNEM3Rjk4OTU3NDFEQTFEOEE1NDZEMjE5Qjk5Njg3NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+LT8uKC471kR2PlaihLMdQPH
TrtOZZrUq5VMKMgJ+Fl9SirquQawjK3ejvAwGUuKifdG0LF+0G7Xp8KMxNGAi0Ir
6X4AOC+GCYDQuF5f4tZlinsjQ6xqLVVTKuBiKYv8fIj6Cr/jbGC9vw8/n1qKT0YB
xPhCBvs9HJu6DXsEJMphkeq8mSxKne9VTGSz9pIf46hySywL5wrrcSOHVyHsgDaw
0zVZ8B7hdPSFwN92wM4z++4jRIns0taRL1Wgsf92TFswgCXsFankP5WZlFNDbrF1
qYQntRXH08K+SZZDR6cLbwkiOuasEPnV3r7cDOkX0bwfk6/T8q+BxnYRQnSLAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUii2+Hkx/mJV0HaHYpUbSGbmWh1EwHwYDVR0j
BBgwFoAUBy8BGHlrCXXc0bggs0NSNz/Aj2UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNTc5OEUyRTBBMDQxNTYyNzlCMkQ3NEJBODQwOTRBQTcy
MUY3OUFDOTA3QkQ0NzMwREREM0UwMjMxNUQ4Nzk0LzAvMDcyRjAxMTg3OTZCMDk3
NURDRDFCODIwQjM0MzUyMzczRkMwOEY2NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNzJGMDExODc5NkIwOTc1RENE
MUI4MjBCMzQzNTIzNzNGQzA4RjY1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTU3OThFMkUwQTA0MTU2Mjc5QjJENzRCQTg0MDk0QUE3MjFGNzlBQzkw
N0JENDczMERERDNFMDIzMTVEODc5NC8wLzMxMzgzMTJlMzIzMjM0MmUzMjMzMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjM1MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1
4OswDQYJKoZIhvcNAQELBQADggEBAGMeEUzPx9Zb7Rxrcw+/xL9OFNwB+SlcreRn
TLqOwHNuisLCpRN4QnvmEbdM8UtjMnm8umLBksN2pxwf1gvIPQw+3QqwnIUAwtU6
sl3x1mr15usl7BmDxlvM5TsvOskqJ5HhyufdOuf1mQJcSsshmatmnEhbncRZvS8m
1cQIIQB3VhC18VJQrh3tKlPxFfy+ch1QqEJVvj5oPmRoX19DTM2Y/ASRiiKd0OqJ
tje0JagPJQrFttuJ9QD4oXgOFigWOi/Ixcwlg2IFsBaG4MUUNfmKTJDLXnWecVsf
ytPWxWHE13RawTxHAOKbhS0Qp+ady/NVOhWtBikvDDCqzfw7oQg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org