Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234382e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3234382e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          MifFgw09sFeEA/+/G3JpkkQvDOPWCrlGNXUTa1v1AYU=
Subject key identifier:   C7:31:12:C1:9C:92:DB:98:0B:6B:4C:22:68:7F:E9:73:E0:5C:9C:61
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       0375B0578D76BDD037DD622052C377DC7ECCBDDA
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234382e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 04 Feb 2025 18:49:42 +0000
ROA not before:           Tue 04 Feb 2025 18:44:42 +0000
ROA not after:            Tue 03 Feb 2026 18:49:42 +0000
asID:                     262253
IP address blocks:        181.224.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:75:b0:57:8d:76:bd:d0:37:dd:62:20:52:c3:77:dc:7e:cc:bd:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Feb  4 18:44:42 2025 GMT
            Not After : Feb  3 18:49:42 2026 GMT
        Subject: CN=C73112C19C92DB980B6B4C22687FE973E05C9C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:34:84:ab:9e:d4:17:9e:e7:1d:d2:b5:2a:
                    5c:25:a5:d9:48:0b:f0:b8:60:86:a8:32:bc:89:90:
                    b1:43:6a:c7:c2:14:34:c3:6b:5d:3b:15:f0:6a:10:
                    fd:98:ea:6a:aa:22:49:31:01:b6:19:5a:0a:65:79:
                    a2:9a:63:78:ab:35:23:e9:33:24:de:78:09:fc:08:
                    5c:5b:10:f0:82:86:aa:f0:d4:14:4c:f1:b3:d4:0b:
                    da:1a:e2:14:f7:54:94:be:9c:89:d7:b6:4a:e7:2d:
                    7e:a0:63:98:dd:a7:29:72:73:58:00:3a:dd:7c:ca:
                    c7:6e:08:c7:c2:94:fd:ff:e4:e3:82:f6:3f:3e:7b:
                    24:86:50:8d:ed:9b:a5:65:0f:82:3f:c2:2c:bc:34:
                    99:b8:4b:04:e6:94:87:eb:31:29:0a:ac:50:3f:40:
                    d0:30:9e:61:8d:99:49:e1:7e:d3:72:6b:2e:65:b2:
                    e1:bc:3c:59:e8:89:fd:0e:7b:d8:d6:59:bb:a0:46:
                    4d:56:a3:e9:f9:f6:6c:06:da:00:1e:a7:0f:5b:2b:
                    c5:23:2e:20:78:16:6c:2a:65:8b:a2:9b:84:a9:9b:
                    3a:d1:20:2d:bd:55:09:5d:f7:17:0d:73:41:81:cf:
                    e0:fe:1d:c6:a9:da:ff:19:c2:27:e6:a1:09:99:09:
                    26:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:31:12:C1:9C:92:DB:98:0B:6B:4C:22:68:7F:E9:73:E0:5C:9C:61
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234382e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:63:c5:e5:d8:c3:8c:7a:be:95:61:2a:01:09:77:ef:3e:78:
         2e:0c:63:f5:c5:e4:34:46:d3:9a:72:08:04:5c:7c:ed:fe:cb:
         26:e4:5f:20:b4:53:75:93:5b:f2:85:c6:58:48:fe:14:96:9c:
         c2:22:53:56:f7:74:af:d9:21:dd:a7:ee:e9:0f:ee:00:70:0e:
         1f:18:51:00:0d:a0:e2:f7:9a:1d:52:30:16:05:1c:e2:d0:17:
         28:b2:db:71:29:97:d8:5e:07:97:cd:2c:39:4d:53:a9:92:8e:
         2f:c0:52:ed:94:e9:58:5f:92:66:4d:53:69:de:18:fa:f2:36:
         9d:09:e8:92:5c:30:90:66:85:85:90:3e:89:d0:e4:a2:2a:98:
         c0:c4:14:74:bd:04:a6:1b:19:f5:81:d3:4c:d5:14:4d:69:77:
         0c:bc:f3:7b:39:2b:52:2e:99:c4:d7:bd:ef:57:cd:6e:51:9d:
         e9:4f:70:34:cd:8c:35:55:22:20:46:23:b4:8b:a1:b1:4a:49:
         f1:fb:c9:ce:85:ab:17:b2:e0:9e:3a:d2:60:14:6b:8c:26:39:
         44:20:f0:f6:08:4e:9c:5c:12:3f:21:a8:67:62:d9:ef:c6:24:
         83:df:21:ea:69:ef:63:93:96:70:35:4b:7c:d1:bc:da:0b:0e:
         0c:58:13:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:04:58 2025 by rpki-client