Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS272094.roa
File:                     AS272094.roa (raw, json)
Hash identifier:          en4680OzYUhnk4/XB5XoRRdEp2LLeA5ydPBAJo8c7bQ=
Subject key identifier:   5C:84:73:78:78:72:D1:65:91:12:43:CF:B3:20:F0:AA:48:6C:3F:AC
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       47CAEFD9F41F9BBDEEF4AA43F6B3E7334FFBC522
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS272094.roa
Signing time:             Tue 30 Jul 2024 14:15:00 +0000
ROA not before:           Tue 30 Jul 2024 14:10:00 +0000
ROA not after:            Tue 29 Jul 2025 14:15:00 +0000
asID:                     272094
IP address blocks:        181.188.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ca:ef:d9:f4:1f:9b:bd:ee:f4:aa:43:f6:b3:e7:33:4f:fb:c5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Jul 30 14:10:00 2024 GMT
            Not After : Jul 29 14:15:00 2025 GMT
        Subject: CN=5C8473787872D165911243CFB320F0AA486C3FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:ac:fb:1b:64:ab:9b:83:5a:f6:6a:eb:83:
                    02:d9:ae:92:a2:25:8f:bb:ac:ec:a1:23:88:81:34:
                    27:63:54:5d:e9:57:e5:3d:76:5d:a6:8f:d2:2a:39:
                    52:cd:29:ad:dd:8a:ca:01:ff:ea:b6:72:db:35:01:
                    2d:b0:17:f8:16:ef:e8:af:81:ce:8d:58:6e:fd:d5:
                    a4:44:4f:94:b0:f7:36:ec:33:2e:f2:3a:f1:ca:75:
                    60:84:fc:93:3a:b1:84:1d:3c:d6:ea:ba:66:85:ed:
                    36:eb:36:ec:0e:a6:0f:23:d4:92:5e:fa:90:57:13:
                    55:70:df:09:e8:19:2d:2f:d2:a4:45:a3:0e:2f:b1:
                    bb:d3:3e:04:fe:41:18:dc:7e:63:18:d4:7c:5c:ed:
                    d4:d8:8f:27:04:a1:4c:70:c3:3c:97:1c:11:60:a9:
                    01:1b:75:d8:c6:6c:5e:d0:b5:67:6a:83:51:39:79:
                    e5:fb:54:e4:dd:82:af:34:75:d2:97:34:f9:b5:e0:
                    14:d2:d6:8f:dc:ba:9a:b8:d8:65:21:9f:42:6b:ea:
                    1f:8d:83:18:18:e3:23:f2:39:18:2f:7e:42:70:59:
                    11:ee:38:a2:51:fa:cf:22:9c:67:80:35:eb:fe:47:
                    a7:6d:fc:84:af:78:72:66:f0:23:17:32:b7:9b:f4:
                    7b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:84:73:78:78:72:D1:65:91:12:43:CF:B3:20:F0:AA:48:6C:3F:AC
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS272094.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:98:e7:e0:0c:73:25:db:ba:89:1b:a8:ce:f1:2d:c0:0d:b7:
         f4:93:6e:d2:2b:b7:54:c4:58:45:81:02:22:60:a9:eb:15:8c:
         b6:4e:74:ca:ea:5a:96:8b:77:cf:61:2a:90:85:96:ac:73:e9:
         24:ba:5d:16:31:2d:8e:83:7e:fd:7c:c3:a8:2c:8f:ff:d4:5c:
         b2:02:98:28:91:9c:86:84:19:01:ae:71:c0:a5:ad:3a:2c:bf:
         8c:89:7f:b0:27:33:de:33:0e:36:62:a9:8f:5f:0d:31:48:c1:
         00:d9:a3:35:36:7a:ee:56:1a:33:ff:5d:a2:ae:23:4c:8f:eb:
         b3:00:bc:27:9d:b0:50:fa:48:b4:ec:23:11:5d:d2:e0:35:cd:
         aa:64:64:01:6f:0d:2c:ae:6c:88:95:da:de:0f:11:25:b9:a1:
         23:a8:ab:9d:cf:64:ae:98:16:16:fd:9c:69:2b:11:cf:c3:7c:
         33:c5:19:3a:11:9b:00:3b:1b:a1:b7:4d:5f:7a:b9:ed:c4:11:
         07:e8:dd:75:9b:cc:07:da:0b:bc:1a:78:ce:af:5d:89:50:d5:
         41:30:49:7a:61:52:8f:f1:e3:20:c1:19:99:3d:5a:73:d7:3d:
         2d:39:a7:17:bb:89:cc:62:97:8b:d1:9d:f9:a4:38:fb:fe:d3:
         ba:77:5b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org