Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233382e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3233382e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          vYPrvF2vSgbtUfd1ipxOONVRu6YnbuGXYiaPIO5dcYw=
Subject key identifier:   30:DE:F4:2E:5F:E4:2B:1D:3C:3D:ED:C1:AE:65:88:1A:E0:15:FE:7A
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       34083718B884EBDAB8BC6181716A7B586BA5B029
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233382e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 04 Feb 2025 18:49:42 +0000
ROA not before:           Tue 04 Feb 2025 18:44:42 +0000
ROA not after:            Tue 03 Feb 2026 18:49:42 +0000
asID:                     262253
IP address blocks:        181.224.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:08:37:18:b8:84:eb:da:b8:bc:61:81:71:6a:7b:58:6b:a5:b0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Feb  4 18:44:42 2025 GMT
            Not After : Feb  3 18:49:42 2026 GMT
        Subject: CN=30DEF42E5FE42B1D3C3DEDC1AE65881AE015FE7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:c0:4b:76:47:9e:8c:1e:49:c0:a6:75:dd:
                    bb:7e:ca:fa:51:07:e7:8f:01:02:51:6e:b0:91:9a:
                    ed:c8:48:3f:d4:02:dd:d7:b7:70:a7:e6:a1:a1:39:
                    b0:c6:01:80:f6:43:8b:76:20:1f:40:4c:00:f9:f5:
                    1c:86:7e:c8:7b:81:8a:5f:dc:a5:d0:bb:1a:e3:36:
                    8d:85:7e:06:b8:21:b5:41:81:d9:44:d8:fc:11:b8:
                    4f:c7:f7:6e:eb:d3:73:7a:1d:fc:a5:41:7e:87:44:
                    36:9d:8b:9b:22:78:15:54:64:2f:47:20:44:8a:06:
                    a0:02:e4:bc:23:50:2c:03:dd:73:c7:0a:98:38:17:
                    3e:92:86:b0:39:23:0b:43:59:40:05:88:80:21:10:
                    86:3d:ce:6a:ce:9d:b3:52:b8:d3:64:24:af:76:0c:
                    40:a7:88:e2:7e:e5:cb:be:89:fa:64:96:0d:b1:c6:
                    1d:80:8a:26:17:77:15:51:69:ce:9c:ac:4a:b8:12:
                    73:5f:50:87:81:f3:8e:0d:17:7f:5c:fa:d1:7e:cd:
                    9a:2e:e4:18:13:e1:24:05:ec:f5:6f:fe:9b:09:c5:
                    97:78:2d:af:77:5b:1f:57:39:d2:50:59:8d:33:19:
                    a4:2a:ba:2f:bf:a2:1a:3a:07:71:6e:94:de:75:2f:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DE:F4:2E:5F:E4:2B:1D:3C:3D:ED:C1:AE:65:88:1A:E0:15:FE:7A
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3233382e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:6c:99:3e:68:02:fd:c6:eb:a6:9b:c1:79:52:e0:2a:92:d8:
         55:8b:15:56:48:4e:ca:84:d5:42:7c:6c:6d:3f:26:06:f5:d8:
         2f:ce:8c:5b:d1:b9:c0:94:12:69:46:25:8f:ec:42:60:a2:34:
         c3:d8:45:5f:a6:5d:7e:de:cf:71:cd:b3:1b:ab:e4:40:4c:95:
         b9:6b:2f:12:85:97:f7:27:66:23:aa:53:c5:1d:39:5c:52:ad:
         99:52:55:08:04:2a:83:0b:c7:9c:ce:9f:b9:f5:f1:96:48:dd:
         7c:f6:8b:2b:c2:0a:fa:bd:e3:b6:60:a6:b4:2c:78:02:1f:7e:
         66:f1:7a:b3:ed:25:8e:be:d6:0e:12:7b:4d:d3:3f:0d:c1:51:
         38:c6:12:3a:24:54:55:53:b2:6e:f5:86:6a:5a:64:a3:c4:80:
         17:e7:27:46:f1:d4:a7:64:0d:c3:97:b1:b3:7f:53:09:3e:8d:
         9c:65:0b:bf:1b:95:b0:02:03:4b:bb:86:0f:bd:37:11:25:96:
         21:96:f2:8f:d0:0b:bb:60:8d:a4:69:1d:2c:7d:ef:a8:9e:30:
         97:41:01:99:44:14:76:b6:de:40:8e:76:20:21:d4:16:bb:d6:
         31:b8:f7:1c:ec:e6:07:b2:de:b7:50:06:26:80:05:6c:70:0c:
         90:53:23:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:04:59 2025 by rpki-client