Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234372e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3234372e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          bm1oj1YmKGXCStJH9uW0idt/UxyWHcl+THFnucHutqQ=
Subject key identifier:   9A:28:E6:46:7A:47:21:06:BB:B4:33:4F:46:C4:64:35:FF:FD:A2:AD
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       77E6C5E33A6AA14B0944344170413B962E238B47
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234372e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 05 Mar 2024 18:03:40 +0000
ROA not before:           Tue 05 Mar 2024 17:58:40 +0000
ROA not after:            Tue 04 Mar 2025 18:03:40 +0000
asID:                     262253
IP address blocks:        181.224.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e6:c5:e3:3a:6a:a1:4b:09:44:34:41:70:41:3b:96:2e:23:8b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Mar  5 17:58:40 2024 GMT
            Not After : Mar  4 18:03:40 2025 GMT
        Subject: CN=9A28E6467A472106BBB4334F46C46435FFFDA2AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:aa:10:9e:b8:d0:14:cb:bc:11:76:34:eb:52:
                    da:4c:e2:90:1f:e6:f7:0f:c9:61:65:6c:24:03:d7:
                    9a:3e:ee:1d:4d:0c:8d:c0:cd:79:75:82:ab:c1:3d:
                    68:45:14:bc:4e:3e:ec:ef:fe:bc:15:c9:cf:ac:54:
                    aa:3a:84:9a:6f:05:e6:64:77:7c:15:8b:de:f1:f9:
                    42:83:ba:50:e2:53:e7:13:02:78:aa:35:12:89:c2:
                    93:28:c3:f7:84:aa:5d:21:62:89:6e:7b:80:62:91:
                    4c:ca:d0:b1:fa:75:44:cd:13:04:23:48:6c:1b:ab:
                    fa:99:55:ff:4e:ba:08:d0:1e:79:61:14:41:ac:e8:
                    9e:6f:04:fe:79:43:27:67:89:a0:10:c1:61:73:48:
                    f1:9d:c2:a1:43:1d:d8:d8:32:08:37:61:19:d9:5d:
                    96:61:bd:bb:c7:e1:b7:7d:d4:04:5a:76:53:56:90:
                    be:1e:e2:45:6c:2a:f5:56:2f:55:f7:1a:36:d8:9c:
                    6b:c6:d4:c2:79:7d:04:2a:25:3d:10:47:a2:0c:39:
                    d5:f9:22:ac:72:13:ba:e4:2c:5c:38:9f:30:f8:22:
                    c9:68:51:77:c7:56:3c:72:3a:58:b6:4b:e3:7e:1e:
                    68:ff:60:da:91:49:f6:7f:a2:ba:25:fb:53:b1:4d:
                    76:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:28:E6:46:7A:47:21:06:BB:B4:33:4F:46:C4:64:35:FF:FD:A2:AD
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234372e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:c9:10:90:5c:6f:ae:20:31:7b:fb:33:85:14:12:95:11:5c:
         3e:20:aa:86:20:9f:cb:d7:98:56:66:8d:35:d6:86:ce:68:b4:
         11:86:31:15:c5:c3:a0:96:11:31:7e:7f:72:1b:69:50:c9:2c:
         5d:12:a1:80:c5:3d:10:46:16:ed:29:3d:21:67:99:93:38:be:
         18:58:c1:44:46:10:94:2a:dd:a2:52:a9:7f:60:ed:e3:cf:17:
         f2:dd:65:16:c6:74:6b:b8:6a:b5:11:34:b3:c1:8b:38:b5:06:
         e4:fa:3b:c5:33:ed:88:1d:de:3f:78:40:9a:fb:3b:fa:1f:ad:
         53:59:58:88:d6:91:a7:03:c2:76:ba:a9:fc:40:94:0f:d4:d4:
         1b:e9:a2:0e:d3:90:ee:06:a6:c0:a1:94:cd:e4:85:13:c4:2b:
         58:67:e9:0b:05:5c:6c:ef:26:2b:62:d8:8c:7c:43:81:c5:10:
         6a:ed:c1:73:b3:ce:d5:77:fb:9b:e7:41:9c:5c:f1:2d:53:bf:
         e1:aa:1a:62:3c:a8:92:a0:e9:bd:f5:c5:1e:80:16:a8:be:41:
         9c:4a:f6:40:60:2e:df:a0:42:c6:df:6d:d0:dd:fe:99:b2:5d:
         26:57:72:35:27:9e:93:ac:63:2d:71:0e:54:d8:8d:35:4a:2e:
         ad:77:ab:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org