Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3235302e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3235302e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          7jLgq+3CyMkpZ1ToKJLTCAmJ0TD+hxvijb36OSuP7N4=
Subject key identifier:   3A:EF:80:F5:B7:79:36:79:A3:47:FD:B1:D9:C4:3E:91:20:08:C6:03
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       3266EF9AFC7D79A3E8A00E1353CB2443E74B5421
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3235302e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 05 Mar 2024 18:03:41 +0000
ROA not before:           Tue 05 Mar 2024 17:58:41 +0000
ROA not after:            Tue 04 Mar 2025 18:03:41 +0000
asID:                     262253
IP address blocks:        181.224.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:66:ef:9a:fc:7d:79:a3:e8:a0:0e:13:53:cb:24:43:e7:4b:54:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Mar  5 17:58:41 2024 GMT
            Not After : Mar  4 18:03:41 2025 GMT
        Subject: CN=3AEF80F5B7793679A347FDB1D9C43E912008C603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:26:a9:d0:f8:92:28:07:e4:9c:ad:49:4a:
                    52:5c:f9:b2:89:10:8b:03:4c:80:61:48:fc:6b:63:
                    8c:3b:d2:2f:65:1f:e8:c9:f4:ef:63:db:f4:f3:36:
                    a9:b7:a7:ee:46:83:80:8f:12:6b:65:0e:52:2b:11:
                    39:5e:37:8e:8a:bb:5c:88:c3:5e:14:3e:76:24:b1:
                    95:88:c2:50:a9:43:29:77:16:d8:a8:b5:80:78:d7:
                    23:da:55:28:02:f1:c1:36:23:42:b3:c4:1f:4c:9c:
                    ea:79:cb:cd:52:d0:7a:12:01:49:4f:10:aa:de:dc:
                    03:9a:71:9d:f4:f1:3b:41:66:da:bc:eb:8d:34:07:
                    7c:40:10:fa:0d:14:15:2e:35:16:9c:94:0b:62:2a:
                    44:7f:9a:57:d6:bf:8a:82:70:e5:96:b1:27:4a:12:
                    8d:36:d5:61:e0:56:27:3b:9e:1a:e6:85:20:d1:eb:
                    4d:7a:14:f4:c0:87:83:53:9c:a0:6a:d0:5d:41:7a:
                    b9:75:7a:62:1f:33:ca:a9:fe:b0:67:89:79:50:23:
                    81:d4:03:54:c9:15:c2:d7:08:fb:94:63:f9:b4:1e:
                    1c:76:db:29:12:1f:e4:44:77:ac:dd:30:9e:85:3d:
                    e3:fa:12:67:4e:32:ee:cd:8c:39:8b:eb:a1:57:73:
                    14:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EF:80:F5:B7:79:36:79:A3:47:FD:B1:D9:C4:3E:91:20:08:C6:03
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3235302e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:ef:1f:3c:81:ff:90:7b:d9:8f:b0:95:e3:26:a2:df:f7:67:
         a8:61:61:f1:bf:4c:bb:35:8d:78:8b:85:ee:d2:8d:0f:30:b9:
         0a:e1:e9:1d:5a:7a:1e:a2:d5:6c:66:9d:ab:a8:03:d5:ff:88:
         7e:9f:85:e9:c2:9c:43:8d:1a:8e:c6:78:fa:13:3e:31:87:e4:
         08:f6:f3:07:76:29:8f:c2:b0:40:31:25:03:9e:15:71:fb:c3:
         b0:75:65:27:2c:ac:ac:2c:e5:fe:7d:25:de:3f:f1:ba:f4:26:
         47:35:ac:fd:35:cd:6f:2e:3f:d6:e2:e0:7b:6a:a5:3b:5f:8b:
         e8:89:79:52:df:8a:a0:bf:13:1d:4a:96:c2:c6:06:38:48:f6:
         40:a1:e7:5f:d1:b4:8f:20:b5:3f:4d:ce:b7:6e:60:58:3e:2a:
         ca:b6:d1:97:4d:e4:c9:92:da:5d:1c:fb:6d:e5:d5:4b:39:f9:
         48:ef:a5:7a:3a:43:56:f5:f3:b7:ac:25:57:97:97:6b:80:e4:
         af:b2:a0:41:7a:b6:a1:4b:ea:57:64:9b:2a:0a:a0:4a:19:bd:
         d9:10:b9:99:01:0f:19:a7:85:3d:f9:92:d1:80:a8:eb:7c:f3:
         07:bb:0f:82:51:3a:8f:c5:0a:bb:51:f5:b9:1e:dd:cd:66:34:
         74:04:05:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org