Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234312e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3234312e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          KHvA7tYTRwbCaKVp9ydcPTZhyxKb6fEpPLvCTa9BvZU=
Subject key identifier:   D8:BE:AA:F1:32:64:34:4A:0C:1C:5F:04:DD:19:83:8E:FD:61:18:D0
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       18925B2D01D0DEA598A6702F47924BDDCD121A85
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234312e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 05 Mar 2024 18:03:44 +0000
ROA not before:           Tue 05 Mar 2024 17:58:44 +0000
ROA not after:            Tue 04 Mar 2025 18:03:44 +0000
asID:                     262253
IP address blocks:        181.224.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:92:5b:2d:01:d0:de:a5:98:a6:70:2f:47:92:4b:dd:cd:12:1a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Mar  5 17:58:44 2024 GMT
            Not After : Mar  4 18:03:44 2025 GMT
        Subject: CN=D8BEAAF13264344A0C1C5F04DD19838EFD6118D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:3d:f6:59:1a:30:db:99:4e:02:fd:8c:99:
                    a2:d7:da:1f:67:06:fa:a8:5f:db:71:84:11:29:d8:
                    00:22:f4:11:a2:36:45:05:7a:97:0c:0d:33:fd:be:
                    d5:4c:ea:94:f7:6a:34:b2:10:b3:2b:84:fc:4a:c1:
                    3b:50:6b:ec:ac:18:c5:d5:f2:ea:90:e0:b6:63:19:
                    0c:34:d4:70:0b:8c:9f:cf:8f:fa:a8:fd:05:ad:a1:
                    e0:3b:53:78:4c:4f:35:c1:46:13:4f:76:a4:7a:ad:
                    68:8c:61:23:65:1e:a9:b3:5a:1d:21:2c:0f:34:e2:
                    ce:08:0c:8a:e3:e7:69:e7:19:4a:84:d9:33:ec:47:
                    4d:1f:af:91:ec:5a:c1:fb:b6:e7:26:6b:ff:3e:81:
                    e3:7b:a1:27:71:2a:8e:aa:bc:c8:4f:ef:53:5e:b4:
                    6c:0e:fb:e1:cf:bb:b3:a2:ca:29:df:32:87:fe:e1:
                    b0:5f:16:b2:cd:1f:d8:13:e3:3a:2c:44:f5:ea:41:
                    fc:90:ed:b5:1c:8b:45:ad:1b:20:a3:a7:81:2f:ef:
                    68:3b:f0:3f:e9:c0:a5:f9:f3:4a:49:11:87:da:20:
                    51:22:50:d7:8c:6d:ed:b6:2f:59:01:ff:a8:cd:fb:
                    41:ae:7c:a7:8a:26:ae:2e:d1:12:cc:06:cb:93:33:
                    1b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BE:AA:F1:32:64:34:4A:0C:1C:5F:04:DD:19:83:8E:FD:61:18:D0
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234312e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:77:45:99:0f:8a:6f:cc:46:2d:38:02:eb:c7:28:a6:18:73:
         e0:4e:3f:27:44:a4:cc:dd:62:c0:8f:0d:66:9f:b3:52:6d:a3:
         19:26:fb:85:99:cd:11:5f:be:59:fb:98:a9:0c:2d:1b:1c:10:
         ed:58:ed:0a:40:09:de:a8:2d:d2:0c:8d:c8:4e:cf:eb:d3:b8:
         0b:c9:12:c2:01:d1:0b:40:c4:de:94:d3:b2:82:77:4a:52:dc:
         38:b0:ff:a5:83:6a:18:01:33:83:75:6f:af:39:40:b2:5e:0a:
         07:0d:0b:10:ce:11:bd:f1:33:19:f6:93:f5:5b:09:4a:c6:1c:
         89:ba:65:8e:cf:76:19:83:e8:7d:1d:d8:2b:d0:45:fc:a0:2f:
         09:62:ab:90:81:ea:a3:f5:57:de:57:6a:22:e3:bf:b8:a6:91:
         ad:04:a6:f7:26:2d:16:c9:05:66:a0:3f:cb:95:81:75:cc:df:
         59:4a:cc:de:e2:84:ac:76:36:8a:30:90:5c:5f:e0:a2:f4:fd:
         aa:6d:45:05:04:85:1a:75:e5:fe:15:6d:b6:e0:9a:b6:40:e7:
         9f:93:1d:96:b5:9d:86:70:3d:ff:da:d1:7d:f9:67:67:30:e3:
         0e:27:13:f1:fc:11:3f:1b:a1:e7:7b:07:0c:d7:b8:e1:be:fe:
         a6:32:d2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org