Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234392e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3234392e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          Bak1Bz7v2m8V53c6lpo8amHe0rN9x4m/axyMwQ4tpP0=
Subject key identifier:   69:58:9D:53:13:BF:76:75:3F:53:FD:A8:FD:59:77:17:86:00:21:AB
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       302749CD227FC15E8DFB2DE305F8EC7CD67DF1F7
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234392e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 04 Feb 2025 18:49:36 +0000
ROA not before:           Tue 04 Feb 2025 18:44:36 +0000
ROA not after:            Tue 03 Feb 2026 18:49:36 +0000
asID:                     262253
IP address blocks:        181.224.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:27:49:cd:22:7f:c1:5e:8d:fb:2d:e3:05:f8:ec:7c:d6:7d:f1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Feb  4 18:44:36 2025 GMT
            Not After : Feb  3 18:49:36 2026 GMT
        Subject: CN=69589D5313BF76753F53FDA8FD597717860021AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e9:5c:a6:8e:27:01:63:f2:27:9b:32:b8:76:
                    4a:d4:17:32:19:4f:27:24:90:0f:4a:bb:03:7d:15:
                    28:b5:cd:6c:fb:49:67:e5:fb:f9:94:d1:4d:df:6f:
                    52:f8:28:12:09:c9:7f:97:fa:bd:55:9a:29:52:b2:
                    85:de:b2:a5:f3:a7:a3:74:6f:ec:20:2c:9e:41:9c:
                    1f:24:af:d4:14:f1:c5:5a:54:9b:48:c5:7c:27:00:
                    a5:4b:9c:b1:93:db:22:2f:89:25:d5:dc:a5:4e:ca:
                    00:d7:f0:15:b3:7a:a9:d7:91:af:c2:da:4c:11:06:
                    12:33:d7:27:0f:c3:77:3c:ae:b1:e7:84:61:a8:73:
                    70:ff:9f:15:92:0b:ca:7d:8b:81:35:90:87:3e:62:
                    7f:65:e0:12:fc:65:9d:55:c5:60:13:5c:06:b2:d8:
                    e8:0f:c7:5c:48:15:c5:e1:b9:ff:63:f8:e4:27:30:
                    56:61:21:80:39:ef:68:ea:31:88:ee:8a:b1:94:be:
                    56:a3:e2:e2:1a:ba:3c:dd:79:a0:2c:d3:99:88:a5:
                    b9:f7:1a:fc:a9:1d:2e:ff:db:0a:e3:71:09:1e:c0:
                    1b:f0:3d:08:24:21:ad:76:30:40:1a:95:f2:35:cc:
                    03:ef:88:d0:a5:df:17:df:20:a9:f2:30:25:29:43:
                    f2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:58:9D:53:13:BF:76:75:3F:53:FD:A8:FD:59:77:17:86:00:21:AB
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234392e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:3b:c0:52:da:45:22:92:3a:f1:1c:e4:f1:4a:50:d6:67:97:
         7c:68:4e:54:ca:fa:41:35:d4:50:b2:d9:cb:6c:be:08:2b:48:
         bc:95:1d:16:ac:d8:d8:ce:ed:87:7e:41:9d:4c:4c:da:c4:a3:
         d7:b8:ac:8c:89:e4:1e:08:71:82:33:45:3c:12:c5:96:bc:d7:
         5e:2a:11:55:7b:36:4c:56:84:ad:5e:2d:6a:38:e9:ab:28:82:
         67:64:df:ee:1e:21:82:9e:2d:f2:a0:32:8b:58:d8:96:f3:9c:
         eb:d4:16:a8:6c:d2:49:2e:df:49:e6:c3:73:0b:d5:bf:76:15:
         02:c1:6a:b4:63:7f:91:35:77:72:95:80:a5:18:8f:37:74:d3:
         b2:d0:50:0d:f8:56:82:b1:57:e1:86:bc:ed:22:99:09:5f:e9:
         53:ad:3b:b9:01:0e:b6:84:cc:d5:3e:04:6f:5e:71:7e:ae:06:
         32:5b:cd:11:0e:a7:55:3c:0d:c5:31:33:57:d7:ea:5c:a8:7f:
         f3:ed:5e:d6:f5:0f:6f:32:ca:35:0e:df:e1:0c:34:82:5e:7a:
         87:7b:30:b7:1a:5a:ec:68:8c:80:e2:5a:34:af:d6:04:a8:1a:
         fa:15:e1:4f:cd:2d:6a:af:ad:7b:62:81:05:b5:43:e0:14:be:
         9f:54:6f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:04:58 2025 by rpki-client