Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3235312e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3235312e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          pGyu92yG40RGWzc65pliXVsPEf4XfGMYbDErKO1Um08=
Subject key identifier:   D0:E9:D2:52:74:C2:D1:9F:D4:7C:7E:F8:2C:CE:09:6F:A7:AF:09:47
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       59C46E24F2A3ACC704DA3E84B1FA1ED9D8554F5D
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3235312e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 04 Feb 2025 18:49:42 +0000
ROA not before:           Tue 04 Feb 2025 18:44:42 +0000
ROA not after:            Tue 03 Feb 2026 18:49:42 +0000
asID:                     262253
IP address blocks:        181.224.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c4:6e:24:f2:a3:ac:c7:04:da:3e:84:b1:fa:1e:d9:d8:55:4f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Feb  4 18:44:42 2025 GMT
            Not After : Feb  3 18:49:42 2026 GMT
        Subject: CN=D0E9D25274C2D19FD47C7EF82CCE096FA7AF0947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:6d:99:c7:aa:5b:42:8d:53:a6:1c:97:65:
                    e4:36:3c:5a:8d:49:39:f0:a8:8f:ed:3f:d7:fb:f4:
                    d7:30:6c:67:6b:7a:f5:dc:dd:6b:ec:b2:d8:5f:10:
                    07:cc:59:cb:e7:76:b5:06:3b:e6:df:22:2e:f8:37:
                    52:87:c4:ca:c8:98:ec:6a:8d:b8:65:c8:94:d9:7a:
                    46:07:2a:bb:1e:22:e4:ad:44:4c:a5:fe:84:d5:1e:
                    a5:fc:bd:af:14:4d:96:29:35:30:00:59:45:89:02:
                    d6:1f:0f:42:25:10:66:11:63:51:0f:ef:c6:e8:ba:
                    ea:1e:c9:51:5f:a2:30:87:80:7e:19:43:c0:9f:b0:
                    76:07:cc:35:84:41:aa:24:2a:01:d9:95:47:46:91:
                    3d:c9:da:85:a9:62:1a:09:80:19:39:a2:89:40:15:
                    d6:03:9f:09:13:e5:61:54:99:a0:52:ca:b8:f7:62:
                    ac:79:24:2d:a0:02:89:bb:98:76:26:73:45:8f:60:
                    03:ca:e8:62:9c:32:b8:61:47:77:f6:79:30:d7:a8:
                    55:c2:a4:44:7f:73:55:ab:e4:26:3e:01:36:8c:7a:
                    1d:9e:05:bc:49:c1:ed:90:ec:f8:b4:6f:32:8b:3e:
                    f5:9e:ed:16:bf:dd:80:98:28:7f:c4:83:39:39:8e:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E9:D2:52:74:C2:D1:9F:D4:7C:7E:F8:2C:CE:09:6F:A7:AF:09:47
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3235312e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:38:af:16:cb:e7:f7:cc:ce:32:b9:05:5a:f3:f6:90:41:62:
         be:1f:e0:92:94:2f:69:80:70:2f:47:f0:1e:ec:ac:db:32:17:
         2f:d8:bb:03:12:ef:76:12:b6:1b:bf:7c:0f:3e:00:7c:27:c9:
         15:cb:82:42:43:29:d6:9a:72:0e:cc:c2:79:36:5a:65:b4:78:
         09:e2:c3:c5:85:4b:5c:ba:ec:ee:44:4e:ea:33:c6:f2:85:63:
         bc:b2:6f:ca:98:aa:cc:62:96:1c:49:d9:6d:08:fb:66:85:80:
         a3:8a:f2:b3:ea:b9:f6:1f:4b:0a:ed:9b:9d:2b:d3:61:c2:65:
         8c:aa:2a:6a:29:1d:f1:9f:7b:63:65:25:e5:08:80:09:53:06:
         ae:31:2e:ca:7e:44:35:7d:ad:03:df:52:53:cc:b8:cb:38:b6:
         b9:80:97:a2:98:56:e6:5e:8f:69:36:d6:7d:41:90:5a:ef:93:
         10:3b:0d:8d:ed:a4:19:62:86:68:b6:52:a7:db:86:ed:ab:e6:
         74:95:10:e9:20:77:77:18:73:3a:54:aa:d2:b7:a4:50:ff:b2:
         7a:d0:10:bb:e2:1e:1b:c3:c0:9e:5d:e6:95:f0:ce:13:ae:0d:
         b8:fa:21:89:96:5f:ac:4e:c8:fb:77:cf:64:3a:da:e4:43:89:
         74:b8:00:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:02 2025 by rpki-client