Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS22724.roa
File:                     AS22724.roa (raw, json)
Hash identifier:          FXMlUqLG9CiUILIm/ggVoF4qEnzkGo+UrjT2VMurTyA=
Subject key identifier:   BB:CC:7B:7B:B3:86:9A:28:3C:EC:36:BE:A9:77:6D:B1:19:B6:F6:60
Certificate issuer:       /CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
Certificate serial:       0B685E802F127B69BEF2F1BC3356D23D8659ABAB
Authority key identifier: B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS22724.roa
Signing time:             Tue 04 Feb 2025 18:44:13 +0000
ROA not before:           Tue 04 Feb 2025 18:39:13 +0000
ROA not after:            Tue 03 Feb 2026 18:44:13 +0000
asID:                     22724
IP address blocks:        181.113.69.0/24 maxlen: 24
                          186.178.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Mar 2025 02:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:68:5e:80:2f:12:7b:69:be:f2:f1:bc:33:56:d2:3d:86:59:ab:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F8E7D0BF951583E0959B2A92A8920330CEBE59
        Validity
            Not Before: Feb  4 18:39:13 2025 GMT
            Not After : Feb  3 18:44:13 2026 GMT
        Subject: CN=BBCC7B7BB3869A283CEC36BEA9776DB119B6F660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:ae:e9:54:b7:36:55:af:0e:90:79:be:c8:
                    3e:cc:05:13:a1:b3:7d:32:4c:77:55:74:ac:33:b4:
                    10:d7:28:a4:4c:80:c7:66:77:ad:9b:6b:26:42:fb:
                    77:57:20:96:97:53:5d:f6:7b:f5:ab:72:fe:dd:3e:
                    69:ae:fa:68:9c:7d:f9:b8:ae:f3:8f:65:f0:01:83:
                    8c:72:30:78:0a:4c:16:38:54:e5:25:fa:a0:13:eb:
                    de:4a:d1:ba:20:e4:a4:51:25:37:41:bb:c2:d5:39:
                    83:23:a0:99:b9:61:07:c9:6e:94:34:02:ee:eb:d3:
                    41:eb:e4:69:18:83:d8:e9:f0:9d:6c:a4:83:70:d2:
                    1e:f8:70:5a:ec:bd:dd:41:14:bc:99:33:d8:8f:39:
                    7b:74:27:a4:9e:60:a2:9f:fb:c0:89:8c:0b:c9:1e:
                    f0:95:61:1a:21:23:11:e8:93:d5:d7:ae:f6:e4:54:
                    97:d3:fe:5f:9a:f6:0a:57:c5:37:10:71:aa:90:8d:
                    d9:43:aa:35:26:d5:80:c9:ab:f5:ce:aa:1f:7d:fc:
                    b5:de:e2:72:7c:4d:ed:85:c6:bb:78:db:94:d6:bb:
                    10:44:ff:24:78:43:77:bf:95:91:89:9b:70:96:c8:
                    19:b5:f6:c5:a5:9e:ec:b8:d2:a3:b6:0c:d1:7d:e3:
                    19:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CC:7B:7B:B3:86:9A:28:3C:EC:36:BE:A9:77:6D:B1:19:B6:F6:60
            X509v3 Authority Key Identifier:
                keyid:B6:F8:E7:D0:BF:95:15:83:E0:95:9B:2A:92:A8:92:03:30:CE:BE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6F8E7D0BF951583E0959B2A92A8920330CEBE59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73B6868E56B12C35C63B0AB763023F2508123C311CD7EF4F5161EF6D0A55299E/0/AS22724.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.113.69.0/24
                  186.178.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:a1:ee:5f:3b:e9:f0:cf:f4:e8:1f:5e:05:db:36:0e:0b:90:
         e2:cf:b6:76:e7:b6:02:96:27:de:6a:f2:34:cb:02:66:66:e0:
         59:20:89:ca:ff:88:5e:ad:6e:b1:27:b9:e4:e5:01:72:71:45:
         89:1d:75:5b:b3:6b:a5:1e:2d:f2:99:33:ca:a7:96:19:90:13:
         9a:d7:cc:aa:08:f9:9e:5a:76:52:8e:06:ee:c9:ef:b4:8e:5b:
         da:ea:b3:f3:5a:08:30:3a:72:eb:5b:bd:30:36:c1:63:c4:c1:
         36:34:a9:47:ec:3b:cc:67:af:d4:ea:19:5f:bd:b7:95:8a:14:
         71:ca:69:5d:d5:93:bd:1b:13:72:4f:8b:3a:00:86:73:27:4c:
         d6:29:8d:dc:f1:32:e7:60:98:fa:15:87:14:7e:52:cd:2a:87:
         b4:3e:67:d1:2f:25:84:59:67:87:1e:84:00:f1:80:78:ba:45:
         28:21:33:7e:b6:ea:37:78:b0:dd:4a:5d:c8:c1:ec:55:18:45:
         bf:03:79:20:a4:b1:37:57:d7:33:e6:a7:6e:d8:f9:12:2b:0e:
         87:80:93:62:ea:2c:bf:ee:3e:49:52:c6:13:b3:2e:36:77:51:
         53:73:ed:e2:ee:be:bd:56:e6:c2:4f:40:7f:67:b6:db:32:26:
         cd:78:d2:b1
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgIUC2hegC8Se2m+8vG8M1bSPYZZq6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGOEU3RDBCRjk1MTU4M0UwOTU5QjJBOTJBODkyMDMz
MENFQkU1OTAeFw0yNTAyMDQxODM5MTNaFw0yNjAyMDMxODQ0MTNaMDMxMTAvBgNV
BAMTKEJCQ0M3QjdCQjM4NjlBMjgzQ0VDMzZCRUE5Nzc2REIxMTlCNkY2NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVa7pVLc2Va8OkHm+yD7MBROh
s30yTHdVdKwztBDXKKRMgMdmd62bayZC+3dXIJaXU132e/Wrcv7dPmmu+micffm4
rvOPZfABg4xyMHgKTBY4VOUl+qAT695K0bog5KRRJTdBu8LVOYMjoJm5YQfJbpQ0
Au7r00Hr5GkYg9jp8J1spINw0h74cFrsvd1BFLyZM9iPOXt0J6SeYKKf+8CJjAvJ
HvCVYRohIxHok9XXrvbkVJfT/l+a9gpXxTcQcaqQjdlDqjUm1YDJq/XOqh99/LXe
4nJ8Te2Fxrt425TWuxBE/yR4Q3e/lZGJm3CWyBm19sWlnuy40qO2DNF94xnnAgMB
AAGjggKeMIICmjAdBgNVHQ4EFgQUu8x7e7OGmig87Da+qXdtsRm29mAwHwYDVR0j
BBgwFoAUtvjn0L+VFYPglZsqkqiSAzDOvlkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83M0I2ODY4RTU2QjEyQzM1QzYzQjBBQjc2MzAyM0YyNTA4
MTIzQzMxMUNEN0VGNEY1MTYxRUY2RDBBNTUyOTlFLzAvQjZGOEU3RDBCRjk1MTU4
M0UwOTU5QjJBOTJBODkyMDMzMENFQkU1OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNkY4RTdEMEJGOTUxNTgzRTA5
NTlCMkE5MkE4OTIwMzMwQ0VCRTU5LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy83M0I2ODY4RTU2QjEyQzM1QzYzQjBBQjc2MzAyM0YyNTA4MTIzQzMxMUNE
N0VGNEY1MTYxRUY2RDBBNTUyOTlFLzAvQVMyMjcyNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALVxRQME
ALqygDANBgkqhkiG9w0BAQsFAAOCAQEAIaHuXzvp8M/06B9eBds2DguQ4s+2due2
ApYn3mryNMsCZmbgWSCJyv+IXq1usSe55OUBcnFFiR11W7NrpR4t8pkzyqeWGZAT
mtfMqgj5nlp2Uo4G7snvtI5b2uqz81oIMDpy61u9MDbBY8TBNjSpR+w7zGev1OoZ
X723lYoUccppXdWTvRsTck+LOgCGcydM1imN3PEy52CY+hWHFH5SzSqHtD5n0S8l
hFlnhx6EAPGAeLpFKCEzfrbqN3iw3UpdyMHsVRhFvwN5IKSxN1fXM+anbtj5EisO
h4CTYuosv+4+SVLGE7MuNndRU3Pt4u6+vVbmwk9Af2e22zImzXjSsQ==
-----END CERTIFICATE-----
Generated at Mon Mar 24 20:32:18 2025 by rpki-client