Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3235342e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3235342e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          hWoYQTrGss6ZxoFk3b1C4sfpky2HC5/PpaXGwoNO2AY=
Subject key identifier:   89:12:47:15:B4:DD:22:BB:74:83:92:1D:58:FF:13:82:81:55:68:CB
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       42543B945C9A7AC84D521A2C755914B0F4AB14AB
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3235342e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 04 Feb 2025 18:49:43 +0000
ROA not before:           Tue 04 Feb 2025 18:44:43 +0000
ROA not after:            Tue 03 Feb 2026 18:49:43 +0000
asID:                     262253
IP address blocks:        181.224.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:54:3b:94:5c:9a:7a:c8:4d:52:1a:2c:75:59:14:b0:f4:ab:14:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Feb  4 18:44:43 2025 GMT
            Not After : Feb  3 18:49:43 2026 GMT
        Subject: CN=89124715B4DD22BB7483921D58FF1382815568CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c1:be:60:6f:54:4d:ea:c2:f0:4f:13:dc:40:
                    4c:22:24:14:4c:67:c7:ca:14:84:a8:e2:d0:2d:13:
                    0b:3e:5c:f7:78:55:32:51:4a:10:5e:e4:89:29:2f:
                    47:9b:71:a6:54:eb:c2:ab:83:28:19:9b:31:4b:3c:
                    63:c5:25:b4:ac:a1:be:c7:f6:78:af:6f:1a:9f:34:
                    95:6e:23:23:9c:e6:5d:cf:55:bf:77:4d:dc:22:e9:
                    cc:64:b2:a6:eb:ac:9a:c2:f6:b1:dc:6c:1f:87:09:
                    6b:da:ea:86:83:5d:a5:cd:67:06:e5:da:53:f1:86:
                    11:5f:54:43:01:c3:8e:cb:85:d3:13:80:64:f1:89:
                    0d:d3:64:df:27:30:9f:16:d4:3b:23:be:f5:e3:67:
                    83:5d:50:08:6c:87:ad:b1:48:56:ca:7c:34:e1:ce:
                    fa:2e:a2:97:26:6d:bc:73:ef:e7:83:60:7c:45:69:
                    78:bc:d4:47:1b:2d:01:5e:4a:94:76:00:db:1f:3a:
                    a1:f0:2a:e9:a0:21:d8:9d:12:65:e5:9e:ca:9f:33:
                    ea:fb:99:46:d2:df:2e:22:ac:62:a9:00:c5:e1:7b:
                    b0:dc:37:cf:68:bb:ad:58:9c:69:c9:39:b6:e4:af:
                    56:36:a7:c6:fc:e8:ec:0d:ba:93:42:16:2b:ae:8c:
                    59:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:12:47:15:B4:DD:22:BB:74:83:92:1D:58:FF:13:82:81:55:68:CB
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3235342e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:ac:e0:35:a5:2b:76:e2:92:29:1a:c8:6e:e9:9f:ad:73:8c:
         9a:21:3a:85:46:f4:d1:bc:d5:ca:7a:0d:37:1e:d2:c4:28:8e:
         0c:49:80:fc:07:0c:38:f9:1f:ab:e6:2f:a4:7d:99:4d:89:7e:
         26:f1:63:76:6a:18:18:d6:4e:02:b3:f3:a8:37:d6:d9:d4:44:
         ac:26:08:1a:73:34:4b:f6:15:28:8e:a0:9c:15:fd:b0:a6:b0:
         5e:a0:1f:b9:d3:b1:ed:05:4f:2a:4a:08:8d:57:f0:33:97:fd:
         6e:d5:00:88:67:da:22:dd:16:7f:4a:21:ac:94:0d:ce:c1:78:
         84:30:99:50:5f:e1:36:2d:c1:a2:6f:e4:e9:8c:1d:93:2c:20:
         28:71:e1:54:af:0d:b3:9d:cc:6a:7f:89:87:a0:c0:8a:4c:73:
         3e:f1:f5:c8:4e:46:bd:05:82:2d:1a:3f:31:b5:de:fb:92:8c:
         e4:ed:a0:6c:9b:12:37:7c:d3:bd:c2:10:12:05:f9:cc:4b:ec:
         c0:02:c1:d5:ef:cb:18:ce:d0:c5:bb:4c:d0:49:98:c7:b7:2a:
         0a:a3:b7:4b:81:f5:3b:50:07:1a:8a:48:c3:7f:5a:e2:4e:19:
         66:e4:b6:09:ec:f3:46:ea:66:e5:02:18:b7:d5:48:01:a6:9f:
         30:55:87:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:03 2025 by rpki-client