Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234322e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3234322e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          qNDPbeHKhbFdjmGaNdrdq+i2aMSx1QNodWssdRXHfZk=
Subject key identifier:   D9:24:04:92:E1:57:0A:F1:66:FF:85:97:49:5C:11:0C:EE:35:4D:38
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       20D918C27440C4673AF41F871D196032F6718B99
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234322e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 04 Feb 2025 18:49:35 +0000
ROA not before:           Tue 04 Feb 2025 18:44:35 +0000
ROA not after:            Tue 03 Feb 2026 18:49:35 +0000
asID:                     262253
IP address blocks:        181.224.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d9:18:c2:74:40:c4:67:3a:f4:1f:87:1d:19:60:32:f6:71:8b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Feb  4 18:44:35 2025 GMT
            Not After : Feb  3 18:49:35 2026 GMT
        Subject: CN=D9240492E1570AF166FF8597495C110CEE354D38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:39:b8:48:ed:af:de:50:45:b9:19:74:64:
                    a9:cf:8b:55:f3:f1:92:5f:b5:bb:82:ad:51:ef:5e:
                    66:99:d6:99:92:3a:66:b4:56:99:14:fd:95:c6:66:
                    23:13:64:8e:c1:d4:01:41:07:f6:72:81:8e:f3:4e:
                    5c:70:5d:34:29:23:d3:2a:f7:6c:77:58:81:83:cf:
                    e1:77:c7:35:2f:50:c4:d4:b2:1c:ef:b9:15:3d:25:
                    b7:dc:c8:60:7c:49:20:1c:2c:27:a9:27:d2:e7:d3:
                    0b:02:4d:46:3f:65:ae:9c:e0:26:97:c5:14:09:2f:
                    b3:65:47:8b:22:c7:a1:58:e6:1f:92:77:2f:e1:6d:
                    5c:dd:ef:c5:30:d7:31:85:70:19:94:51:2d:ff:8d:
                    21:b5:03:40:08:61:3a:3c:ac:a0:ea:54:3d:ad:ae:
                    d1:e7:6e:50:1d:5e:8e:50:ec:95:51:81:dd:44:bc:
                    cc:a8:82:95:f4:08:09:4b:2d:7f:27:f3:31:79:98:
                    72:7f:b8:39:e4:54:b8:ab:bb:1c:49:df:18:75:e4:
                    66:1e:52:32:7d:64:45:24:fb:bb:a8:2b:f6:2c:e6:
                    19:15:25:4a:54:9b:1e:65:9a:42:b2:f8:15:33:ac:
                    f3:a8:74:e5:c2:95:43:71:ff:b3:02:39:8a:95:64:
                    54:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:24:04:92:E1:57:0A:F1:66:FF:85:97:49:5C:11:0C:EE:35:4D:38
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234322e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:17:3a:d0:59:1f:59:5e:88:dd:c5:3c:e3:62:bd:6e:9c:d8:
         d8:3a:44:bc:93:29:16:44:43:a0:bb:ee:b0:35:02:6f:5f:ef:
         80:e9:15:cc:ef:00:9d:a2:9e:c9:c8:35:ce:d7:68:7d:79:a6:
         39:7b:b1:40:77:25:67:66:fb:02:33:e1:47:29:f3:9e:ae:d1:
         e6:62:40:d9:2d:6f:54:f2:45:f5:4b:8c:29:eb:6d:cc:db:78:
         26:0a:c5:11:1e:76:a8:5a:8e:86:ca:c2:9f:5d:67:da:f7:9f:
         f6:54:50:dc:a1:cb:ab:7f:74:ac:58:98:46:74:7d:84:61:04:
         37:12:64:6b:09:aa:6e:24:d1:30:5c:ee:ca:97:f5:fe:2d:b4:
         29:9e:0a:25:22:ca:cf:80:04:96:ec:c6:b4:fd:09:2a:78:8d:
         f2:d1:c4:41:b7:ae:21:82:d9:2a:cd:c6:ee:1f:f1:2b:e6:a2:
         59:8f:37:2b:35:31:17:5a:9f:74:ee:ed:6a:dc:99:04:2e:31:
         e8:d6:27:6c:fd:e3:48:b4:54:67:5b:7a:cf:3e:5e:e6:59:d1:
         55:3c:7f:06:e6:42:0f:25:4b:f8:e5:04:bb:2b:d3:d5:c5:11:
         3e:ef:5f:ed:20:e8:06:dc:d4:31:09:ea:4c:7d:97:2d:60:eb:
         7e:eb:8b:a7
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUINkYwnRAxGc69B+HHRlgMvZxi5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDcyRjAxMTg3OTZCMDk3NURDRDFCODIwQjM0MzUyMzcz
RkMwOEY2NTAeFw0yNTAyMDQxODQ0MzVaFw0yNjAyMDMxODQ5MzVaMDMxMTAvBgNV
BAMTKEQ5MjQwNDkyRTE1NzBBRjE2NkZGODU5NzQ5NUMxMTBDRUUzNTREMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Yjm4SO2v3lBFuRl0ZKnPi1Xz
8ZJftbuCrVHvXmaZ1pmSOma0VpkU/ZXGZiMTZI7B1AFBB/ZygY7zTlxwXTQpI9Mq
92x3WIGDz+F3xzUvUMTUshzvuRU9JbfcyGB8SSAcLCepJ9Ln0wsCTUY/Za6c4CaX
xRQJL7NlR4six6FY5h+Sdy/hbVzd78Uw1zGFcBmUUS3/jSG1A0AIYTo8rKDqVD2t
rtHnblAdXo5Q7JVRgd1EvMyogpX0CAlLLX8n8zF5mHJ/uDnkVLiruxxJ3xh15GYe
UjJ9ZEUk+7uoK/Ys5hkVJUpUmx5lmkKy+BUzrPOodOXClUNx/7MCOYqVZFQ7AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU2SQEkuFXCvFm/4WXSVwRDO41TTgwHwYDVR0j
BBgwFoAUBy8BGHlrCXXc0bggs0NSNz/Aj2UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNTc5OEUyRTBBMDQxNTYyNzlCMkQ3NEJBODQwOTRBQTcy
MUY3OUFDOTA3QkQ0NzMwREREM0UwMjMxNUQ4Nzk0LzAvMDcyRjAxMTg3OTZCMDk3
NURDRDFCODIwQjM0MzUyMzczRkMwOEY2NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNzJGMDExODc5NkIwOTc1RENE
MUI4MjBCMzQzNTIzNzNGQzA4RjY1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTU3OThFMkUwQTA0MTU2Mjc5QjJENzRCQTg0MDk0QUE3MjFGNzlBQzkw
N0JENDczMERERDNFMDIzMTVEODc5NC8wLzMxMzgzMTJlMzIzMjM0MmUzMjM0MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjM1MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1
4PIwDQYJKoZIhvcNAQELBQADggEBAGUXOtBZH1leiN3FPONivW6c2Ng6RLyTKRZE
Q6C77rA1Am9f74DpFczvAJ2insnINc7XaH15pjl7sUB3JWdm+wIz4Ucp856u0eZi
QNktb1TyRfVLjCnrbczbeCYKxREedqhajobKwp9dZ9r3n/ZUUNyhy6t/dKxYmEZ0
fYRhBDcSZGsJqm4k0TBc7sqX9f4ttCmeCiUiys+ABJbsxrT9CSp4jfLRxEG3riGC
2SrNxu4f8SvmolmPNys1MRdan3Tu7WrcmQQuMejWJ2z940i0VGdbes8+XuZZ0VU8
fwbmQg8lS/jlBLsr09XFET7vX+0g6Abc1DEJ6kx9ly1g637ri6c=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:03 2025 by rpki-client