Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233372e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3233372e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          CPg/E24w9bED2dbgvOY5X3Juy4uO9C2tVcIEPlpI9rY=
Subject key identifier:   71:12:90:56:C3:80:D4:9C:48:D6:1A:AD:2D:1C:A2:75:33:63:CD:DE
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       4AB0BFF4FB155426263B3967E7CCE92A1A9FB864
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233372e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 05 Mar 2024 18:03:44 +0000
ROA not before:           Tue 05 Mar 2024 17:58:44 +0000
ROA not after:            Tue 04 Mar 2025 18:03:44 +0000
asID:                     262253
IP address blocks:        181.224.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b0:bf:f4:fb:15:54:26:26:3b:39:67:e7:cc:e9:2a:1a:9f:b8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Mar  5 17:58:44 2024 GMT
            Not After : Mar  4 18:03:44 2025 GMT
        Subject: CN=71129056C380D49C48D61AAD2D1CA2753363CDDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b3:c7:ad:40:6c:6f:7c:a5:de:bb:55:a0:c0:
                    3d:10:32:0c:e0:15:42:21:0b:fb:d7:f4:e1:98:c2:
                    9a:63:e5:41:f8:0e:26:a0:ab:69:09:0c:b5:53:da:
                    d4:5c:71:49:3d:89:d2:2d:ad:1f:51:3b:82:d4:de:
                    45:d9:22:56:04:23:af:7e:59:68:99:74:50:8d:a6:
                    9e:7f:b1:d5:fd:d7:09:91:c8:73:53:bb:29:f3:92:
                    17:f5:3c:ff:78:67:b3:45:0f:7a:df:25:e9:b3:97:
                    27:50:49:25:f7:40:69:85:db:af:3f:c7:9b:cf:1f:
                    26:e5:24:9c:53:11:c8:b9:30:e5:7b:e8:7a:f0:09:
                    94:69:d4:56:fb:c1:cf:5d:4d:a6:20:24:06:44:54:
                    bf:e0:5a:28:35:22:bb:3c:a0:af:50:c7:9d:d0:1a:
                    56:ad:a2:e1:e4:e4:fe:7d:f0:19:f0:66:b5:58:fb:
                    72:c0:7c:83:ba:0a:92:26:a5:5f:41:7b:c0:a0:1a:
                    af:36:7b:97:83:4e:35:d5:6c:1f:cd:7f:1d:9e:04:
                    37:67:bc:d1:e0:a4:d2:74:f9:d6:cb:0e:a1:fa:5e:
                    d6:90:b1:81:0e:11:f6:4a:77:0c:c3:72:03:97:c3:
                    12:8a:01:2a:98:38:0c:fa:2d:18:6b:a2:dc:62:d6:
                    4e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:12:90:56:C3:80:D4:9C:48:D6:1A:AD:2D:1C:A2:75:33:63:CD:DE
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233372e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:86:ec:93:d0:cd:83:8d:36:fd:8a:59:be:37:e0:87:99:2b:
         97:30:6f:e6:dd:94:b8:39:b8:75:78:a8:e8:8e:73:2d:73:d1:
         40:cc:84:08:d5:61:d4:5a:6a:67:79:63:6f:c0:c5:d8:b9:57:
         ac:f1:d2:a2:84:ca:12:f5:0b:56:cd:37:a9:c9:eb:ae:e6:4f:
         a5:26:79:08:e7:24:b7:e9:29:c4:c8:b1:f1:6e:32:2e:79:6e:
         71:14:36:15:fa:c7:2d:19:72:b6:79:c0:8a:63:3a:a1:9f:a6:
         5f:98:da:f4:6b:1a:47:76:30:aa:46:c4:d6:89:0c:97:fa:c1:
         74:fc:d6:d2:b0:f7:cb:be:0a:b7:9a:cd:e7:bf:ee:c6:7a:b3:
         76:a3:ca:b3:b0:60:89:54:88:44:a3:18:eb:84:6f:a3:bd:f4:
         c9:01:be:23:71:2b:fb:8d:39:21:74:8e:ff:0e:96:ff:ac:10:
         d0:4f:52:03:b6:b3:27:a9:14:4a:0e:58:8c:a4:4c:49:b9:3b:
         48:41:11:8d:2a:95:f8:78:28:19:b7:80:e9:3c:fa:71:31:86:
         05:0c:3d:65:f2:cc:26:be:12:78:b6:f0:a9:68:b5:25:55:38:
         c6:a0:26:40:c4:81:b1:95:90:78:8c:eb:5a:29:e2:85:59:2a:
         ea:ae:f2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org