Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234322e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3234322e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          fwhPMg5RnWmMaJVio4qGMQhWA3lmX2cTUpB93Jcw7/g=
Subject key identifier:   96:2D:20:7A:F1:DD:FE:A6:5D:60:B4:D8:BF:84:1C:32:48:1F:00:A8
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       63724E64E6AF99365CB33E42E63C69D5A2250424
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234322e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 05 Mar 2024 18:03:36 +0000
ROA not before:           Tue 05 Mar 2024 17:58:36 +0000
ROA not after:            Tue 04 Mar 2025 18:03:36 +0000
asID:                     262253
IP address blocks:        181.224.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:72:4e:64:e6:af:99:36:5c:b3:3e:42:e6:3c:69:d5:a2:25:04:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Mar  5 17:58:36 2024 GMT
            Not After : Mar  4 18:03:36 2025 GMT
        Subject: CN=962D207AF1DDFEA65D60B4D8BF841C32481F00A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c0:ea:6c:9d:a7:9e:d8:fd:58:68:78:0c:ca:
                    88:a3:9d:05:1a:ea:78:81:b7:b6:2f:a6:07:75:a8:
                    ea:0d:2e:f0:86:17:a8:cb:b2:dd:2d:29:73:62:52:
                    9a:af:ba:c5:49:77:5a:e4:ae:a9:f2:2a:5d:e1:83:
                    1f:de:b3:b3:ce:72:2a:5c:2e:4a:ac:2c:7d:83:7e:
                    f5:e8:f9:b8:52:08:6d:71:c2:e6:23:d8:5b:0c:1e:
                    11:4e:bc:8d:7e:5d:ae:81:b6:63:2f:19:f0:0c:36:
                    6f:e8:ff:49:be:00:9b:45:51:da:a9:92:55:dd:78:
                    67:3f:8e:75:ec:8e:34:63:df:5b:05:01:6e:0e:47:
                    e7:68:8b:ab:4e:67:a4:71:06:76:3f:78:d1:3e:92:
                    78:1c:65:fd:b0:ad:c7:62:0e:03:79:a5:c2:cb:49:
                    94:e9:c1:47:08:8a:4d:d1:f8:61:65:02:db:36:b0:
                    4d:96:2e:80:40:07:3d:b4:ba:4b:a5:d6:a6:38:3f:
                    ba:18:55:db:4f:d8:9a:37:57:0d:2f:4e:ac:13:9d:
                    ea:40:06:04:96:a2:f6:01:04:1a:46:6b:57:02:28:
                    27:06:02:e8:ef:fb:1f:57:ba:30:df:46:93:4a:f7:
                    d3:03:45:27:f3:f2:07:ae:1a:fe:89:4e:ac:3b:fe:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2D:20:7A:F1:DD:FE:A6:5D:60:B4:D8:BF:84:1C:32:48:1F:00:A8
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234322e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:b9:25:f8:44:74:d7:95:1b:02:2e:01:69:a5:c5:5e:b7:1d:
         9b:b7:5a:5c:77:25:aa:dc:7d:e4:f1:e7:a6:65:62:a6:db:e9:
         f1:7c:17:70:12:d5:ad:bf:21:84:2a:fb:f9:53:a3:c9:1e:b1:
         cf:20:96:72:a7:34:c1:67:dc:de:49:35:98:08:1c:97:85:c3:
         67:5e:74:e0:69:b1:e3:17:71:51:74:ef:5c:24:e8:8b:fc:82:
         18:f6:bb:53:e9:49:d0:92:e5:85:2c:f4:ea:43:c2:2e:f5:3c:
         bf:78:57:9f:be:e0:e6:d1:7e:65:a5:7f:b7:3e:1a:49:dd:8c:
         4c:92:37:8b:67:a9:41:c9:4a:b0:d3:8c:8a:8c:0d:82:20:67:
         55:ed:a3:f6:76:fd:ab:c9:c0:ed:42:a8:81:75:80:c0:33:5b:
         93:b3:27:b2:17:f1:87:47:00:9b:d1:14:ea:b8:52:b0:e0:ca:
         0f:47:47:c6:4b:4b:e4:b8:2a:61:98:e2:fd:04:f0:43:46:4c:
         f9:92:2a:f2:3d:07:24:c3:01:c2:72:e3:cd:6f:ce:31:ad:1e:
         1d:6d:5f:1d:ae:7d:29:89:68:ea:8c:d9:46:7b:8b:98:9d:c2:
         c8:48:d9:b5:b1:ac:eb:f6:78:84:b9:73:01:7d:64:a8:54:1c:
         d7:7d:94:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org