Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234362e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3234362e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          TtaqX40arV0kl9dob6wwd/926yOVqHW/d9YoCLkHgAE=
Subject key identifier:   BE:96:55:76:9B:73:C1:D5:66:A1:54:3F:9A:38:3C:C7:B6:9C:85:F2
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       7C9DCAE5C47BB0ED659D80BF232E90B7C9DF708C
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234362e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 05 Mar 2024 18:03:42 +0000
ROA not before:           Tue 05 Mar 2024 17:58:42 +0000
ROA not after:            Tue 04 Mar 2025 18:03:42 +0000
asID:                     262253
IP address blocks:        181.224.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9d:ca:e5:c4:7b:b0:ed:65:9d:80:bf:23:2e:90:b7:c9:df:70:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Mar  5 17:58:42 2024 GMT
            Not After : Mar  4 18:03:42 2025 GMT
        Subject: CN=BE9655769B73C1D566A1543F9A383CC7B69C85F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d3:66:d6:67:51:14:21:dd:d4:92:8b:4e:dc:
                    d8:8b:28:61:05:9e:ec:88:54:46:5e:5c:5f:88:f6:
                    5d:9e:51:d8:c9:66:d7:3a:70:09:e8:96:29:f1:0a:
                    d6:74:d0:8d:69:f0:32:29:e3:49:1f:44:a7:2e:49:
                    5a:f9:e7:9f:97:e7:4d:5c:6a:b1:c3:d0:52:dc:c9:
                    2e:46:d2:a6:f2:10:5b:9a:2a:4d:59:c9:92:62:57:
                    bb:a8:b5:7c:70:c7:33:da:e8:1b:ca:ef:4d:9d:3b:
                    05:36:d4:35:e1:f9:ad:fa:5e:67:09:4a:25:f4:37:
                    cc:c0:db:fd:13:ac:77:ea:f7:d7:d0:71:31:84:3c:
                    ea:84:01:92:d5:90:a2:b2:ff:a3:b7:aa:c4:02:d1:
                    0f:ec:6a:5c:e7:d0:73:6c:4c:10:1a:4b:f0:9f:55:
                    de:af:ee:6c:c9:e1:07:96:29:5d:f6:32:e4:e9:fd:
                    59:5f:26:a5:79:eb:0d:bb:aa:13:26:7e:e7:99:98:
                    5d:2f:9b:cc:10:94:07:da:7e:03:95:ce:c5:02:55:
                    69:c9:f0:93:a2:da:4b:ec:03:a0:10:20:dd:20:bf:
                    04:75:cb:7f:e8:64:a7:54:79:fa:a9:6c:75:47:28:
                    a8:37:26:a8:af:da:36:2a:55:f8:c2:00:69:d5:5a:
                    f7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:96:55:76:9B:73:C1:D5:66:A1:54:3F:9A:38:3C:C7:B6:9C:85:F2
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234362e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:9e:fe:70:fd:24:96:58:32:e7:d9:f8:de:ed:93:d9:07:45:
         8d:54:1b:de:2e:72:aa:55:84:1a:b1:f7:63:e3:62:96:85:cc:
         e5:f0:b9:d1:76:04:e4:9a:23:7a:9d:93:d5:f3:4b:44:af:a1:
         12:e4:f3:d9:df:32:4c:5f:16:05:f3:69:30:f3:77:27:1f:06:
         fc:40:44:59:84:80:a1:15:cd:89:8b:62:2b:ce:8c:c0:9c:ca:
         37:2b:2b:a2:0f:91:6c:db:ee:c0:67:fa:bb:9a:62:f5:26:d1:
         af:4f:34:af:f1:7c:fd:e3:de:65:30:55:3f:25:d6:21:7c:73:
         55:ee:bf:c0:94:d4:b3:9b:57:96:d2:3e:44:d1:fa:cc:13:01:
         ec:dc:fd:1f:67:ea:4e:1f:8a:73:58:bc:51:2c:17:97:f1:b2:
         1e:3e:31:27:78:be:b1:2c:0d:6a:15:08:99:10:02:0f:f1:73:
         c9:36:da:cc:b6:89:2e:04:21:7d:3f:e7:15:cd:6a:1f:db:d2:
         db:7d:fe:f9:df:61:f4:d8:c3:be:96:f5:eb:05:92:22:3d:1a:
         e7:1c:91:f3:ab:71:73:ec:ea:a2:a7:f6:f4:48:90:01:4a:30:
         2a:f7:a3:af:d9:eb:b8:1d:0b:a9:15:f2:e6:1b:d4:8a:ef:ae:
         86:19:60:09
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUfJ3K5cR7sO1lnYC/Iy6Qt8nfcIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDcyRjAxMTg3OTZCMDk3NURDRDFCODIwQjM0MzUyMzcz
RkMwOEY2NTAeFw0yNDAzMDUxNzU4NDJaFw0yNTAzMDQxODAzNDJaMDMxMTAvBgNV
BAMTKEJFOTY1NTc2OUI3M0MxRDU2NkExNTQzRjlBMzgzQ0M3QjY5Qzg1RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd02bWZ1EUId3UkotO3NiLKGEF
nuyIVEZeXF+I9l2eUdjJZtc6cAnolinxCtZ00I1p8DIp40kfRKcuSVr555+X501c
arHD0FLcyS5G0qbyEFuaKk1ZyZJiV7uotXxwxzPa6BvK702dOwU21DXh+a36XmcJ
SiX0N8zA2/0TrHfq99fQcTGEPOqEAZLVkKKy/6O3qsQC0Q/salzn0HNsTBAaS/Cf
Vd6v7mzJ4QeWKV32MuTp/VlfJqV56w27qhMmfueZmF0vm8wQlAfafgOVzsUCVWnJ
8JOi2kvsA6AQIN0gvwR1y3/oZKdUefqpbHVHKKg3Jqiv2jYqVfjCAGnVWvc5AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUvpZVdptzwdVmoVQ/mjg8x7achfIwHwYDVR0j
BBgwFoAUBy8BGHlrCXXc0bggs0NSNz/Aj2UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNTc5OEUyRTBBMDQxNTYyNzlCMkQ3NEJBODQwOTRBQTcy
MUY3OUFDOTA3QkQ0NzMwREREM0UwMjMxNUQ4Nzk0LzAvMDcyRjAxMTg3OTZCMDk3
NURDRDFCODIwQjM0MzUyMzczRkMwOEY2NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNzJGMDExODc5NkIwOTc1RENE
MUI4MjBCMzQzNTIzNzNGQzA4RjY1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTU3OThFMkUwQTA0MTU2Mjc5QjJENzRCQTg0MDk0QUE3MjFGNzlBQzkw
N0JENDczMERERDNFMDIzMTVEODc5NC8wLzMxMzgzMTJlMzIzMjM0MmUzMjM0MzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjM1MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1
4PYwDQYJKoZIhvcNAQELBQADggEBAD2e/nD9JJZYMufZ+N7tk9kHRY1UG94ucqpV
hBqx92PjYpaFzOXwudF2BOSaI3qdk9XzS0SvoRLk89nfMkxfFgXzaTDzdycfBvxA
RFmEgKEVzYmLYivOjMCcyjcrK6IPkWzb7sBn+ruaYvUm0a9PNK/xfP3j3mUwVT8l
1iF8c1Xuv8CU1LObV5bSPkTR+swTAezc/R9n6k4finNYvFEsF5fxsh4+MSd4vrEs
DWoVCJkQAg/xc8k22sy2iS4EIX0/5xXNah/b0tt9/vnfYfTYw76W9esFkiI9Gucc
kfOrcXPs6qKn9vRIkAFKMCr3o6/Z67gdC6kV8uYb1IrvroYZYAk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:47 2024 by rpki-client on console-ams.rpki-client.org