Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/3138312e3232342e3137332e302f32342d3234203d3e20323633323338.roa
File:                     3138312e3232342e3137332e302f32342d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          CTPN3FVXeLVhPbOryau+QAerhMUjTvwtYb4xMLBNCnc=
Subject key identifier:   3A:BD:AC:2E:2B:E2:75:53:E6:F8:D7:04:7E:1E:40:22:C7:88:1B:50
Certificate issuer:       /CN=59733F5876DFD9F28DCAA69B8752B844D0C39173
Certificate serial:       59D348DF110FE67361FD3FC53BB629A92209F03A
Authority key identifier: 59:73:3F:58:76:DF:D9:F2:8D:CA:A6:9B:87:52:B8:44:D0:C3:91:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/3138312e3232342e3137332e302f32342d3234203d3e20323633323338.roa
Signing time:             Mon 10 Mar 2025 16:10:00 +0000
ROA not before:           Mon 10 Mar 2025 16:05:00 +0000
ROA not after:            Mon 09 Mar 2026 16:10:00 +0000
asID:                     263238
IP address blocks:        181.224.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d3:48:df:11:0f:e6:73:61:fd:3f:c5:3b:b6:29:a9:22:09:f0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59733F5876DFD9F28DCAA69B8752B844D0C39173
        Validity
            Not Before: Mar 10 16:05:00 2025 GMT
            Not After : Mar  9 16:10:00 2026 GMT
        Subject: CN=3ABDAC2E2BE27553E6F8D7047E1E4022C7881B50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:7c:39:55:20:23:24:1a:24:9b:89:d1:3c:
                    3a:09:f0:2f:7e:d3:35:32:21:06:1c:42:19:ee:8a:
                    bb:f9:77:27:ac:25:75:ae:b6:50:c0:06:a7:6b:0b:
                    26:eb:14:e7:69:f4:b4:9f:e7:92:93:d8:32:46:b1:
                    8c:45:58:1b:db:6c:6d:fe:50:6e:9f:d9:50:62:41:
                    c8:73:eb:81:d1:bb:be:67:f8:41:c0:aa:24:e3:08:
                    a1:9c:f4:20:dd:17:fe:d6:a2:7c:6c:77:1d:d0:b4:
                    96:4c:dd:ad:ce:08:7f:34:ed:52:51:85:74:e5:ae:
                    13:0a:fc:06:6b:7a:bd:fd:08:d6:a2:42:cc:fe:06:
                    af:fe:99:15:b0:f0:16:47:e2:7b:8d:e9:46:51:e9:
                    78:cb:c1:23:fb:f0:8e:12:b7:86:5b:4c:91:93:71:
                    26:a9:20:a6:35:76:50:57:fe:54:92:4f:ca:ad:18:
                    b6:d0:f1:81:86:14:53:90:1d:3f:bf:93:27:72:07:
                    cd:00:c7:14:d8:a9:fd:67:b5:87:bf:f4:79:3b:d4:
                    18:67:47:d8:22:b9:e5:b4:d0:38:91:2f:c2:71:67:
                    8c:66:d6:e4:1c:ce:f6:ef:7e:29:be:99:a9:5f:e3:
                    17:b6:a2:1e:8a:47:96:25:97:91:ba:51:c3:dd:53:
                    f7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BD:AC:2E:2B:E2:75:53:E6:F8:D7:04:7E:1E:40:22:C7:88:1B:50
            X509v3 Authority Key Identifier:
                keyid:59:73:3F:58:76:DF:D9:F2:8D:CA:A6:9B:87:52:B8:44:D0:C3:91:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/3138312e3232342e3137332e302f32342d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:42:70:08:33:a4:d3:ca:80:5d:78:39:87:e6:89:31:eb:ad:
         c8:3d:91:81:49:95:5f:bf:1a:43:fa:68:d5:2d:65:34:6a:6a:
         8c:21:28:61:62:4a:17:51:d5:6b:2d:2d:3f:fa:00:d0:f7:fe:
         bf:3c:7b:8f:ab:84:ca:c8:9e:5e:3e:41:f3:2e:c9:1e:7d:61:
         fe:74:59:6e:e9:a6:22:65:07:f3:52:cb:07:0d:40:97:71:87:
         a6:3a:e6:6a:aa:b3:a9:e0:0d:94:b8:2c:d1:31:07:2b:de:5e:
         20:56:17:fa:12:5b:2c:53:f7:6a:5b:65:c8:36:58:5b:ea:68:
         17:c5:8f:7f:7a:bd:ff:c1:ce:5e:8d:d0:07:1e:05:b9:93:8f:
         df:f0:fe:78:f0:24:7b:b9:4f:56:38:b9:19:a5:0f:b9:5a:0d:
         78:61:68:b1:47:62:3f:ed:60:96:1a:7e:15:19:fd:9e:b0:cb:
         0c:8d:ca:2b:58:a5:47:8a:d6:85:ea:6e:bc:9e:82:c4:9c:18:
         e2:fe:e7:3e:97:e4:bd:fd:ac:5d:aa:ce:91:6e:49:9c:62:9e:
         48:3a:00:11:ea:67:a3:50:5a:a0:1c:48:83:01:97:23:48:26:
         e2:bb:f3:44:71:17:13:9a:c0:30:cf:a4:09:6e:00:9c:ea:f1:
         5c:ca:9b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:37 2025 by rpki-client