Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230342e302f32342d3330203d3e203532343132.roa
File:                     3138312e3232342e3230342e302f32342d3330203d3e203532343132.roa (raw, json)
Hash identifier:          ljpjijSxVXCnyrjYN8NCXvRaVBaWI5DL7ncoI0SxbHo=
Subject key identifier:   5D:B9:88:23:A8:45:35:44:65:02:46:2E:A2:6A:E7:FE:46:C2:27:90
Certificate issuer:       /CN=6243575DF1F667D5FC35E515D93014D37B684DA3
Certificate serial:       23EFAC0348D36D561A8E2FCF9993B326A9AFD46E
Authority key identifier: 62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230342e302f32342d3330203d3e203532343132.roa
Signing time:             Thu 05 Sep 2024 14:30:00 +0000
ROA not before:           Thu 05 Sep 2024 14:25:00 +0000
ROA not after:            Thu 04 Sep 2025 14:30:00 +0000
asID:                     52412
IP address blocks:        181.224.204.0/24 maxlen: 30

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ef:ac:03:48:d3:6d:56:1a:8e:2f:cf:99:93:b3:26:a9:af:d4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6243575DF1F667D5FC35E515D93014D37B684DA3
        Validity
            Not Before: Sep  5 14:25:00 2024 GMT
            Not After : Sep  4 14:30:00 2025 GMT
        Subject: CN=5DB98823A84535446502462EA26AE7FE46C22790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:c4:87:3d:55:90:f9:87:25:ff:9a:38:54:
                    37:cb:ff:ca:e0:88:46:6c:ec:8b:11:8e:87:de:3e:
                    96:69:86:93:6d:78:35:b9:7c:30:af:81:2b:57:88:
                    f0:d7:63:5f:f4:d5:e0:11:cd:4f:19:74:1c:ea:ea:
                    fe:55:f5:f9:3a:da:34:f9:41:e6:c5:31:3f:70:d9:
                    26:f5:2e:49:08:a8:52:89:4a:02:00:47:89:ad:7f:
                    5b:41:61:a3:45:21:ee:c2:51:44:a2:47:14:d8:57:
                    23:d0:22:d5:04:44:4c:39:22:57:0c:2b:81:43:12:
                    f1:5b:a3:5e:7f:6d:b0:65:5c:39:1b:ec:a0:cf:84:
                    02:97:d8:8d:d0:b4:f3:d8:f7:db:7c:51:ea:4a:79:
                    b1:cd:7f:5c:64:09:ce:3b:f9:f0:65:72:9b:e8:42:
                    da:11:a4:6f:65:e2:78:e9:92:4f:55:c1:62:03:7d:
                    2b:4a:10:e9:ac:b2:e6:b4:7b:35:3b:fb:f6:f7:57:
                    fa:52:ea:7e:ba:f4:a0:2a:b2:d1:43:58:ec:39:cd:
                    42:f3:5b:33:24:3c:1b:bb:9d:08:44:d7:c5:b3:c4:
                    77:31:6c:be:db:b1:5a:cd:2e:ec:b4:f4:1e:2b:30:
                    72:21:3b:62:ed:51:a6:bc:40:be:fa:76:20:c4:14:
                    61:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B9:88:23:A8:45:35:44:65:02:46:2E:A2:6A:E7:FE:46:C2:27:90
            X509v3 Authority Key Identifier:
                keyid:62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230342e302f32342d3330203d3e203532343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:39:74:9b:ae:6d:71:53:16:2b:68:2e:b8:35:14:7c:32:ba:
         10:ed:27:63:dd:ae:ff:0a:0a:4e:82:a3:dc:34:16:f9:5a:db:
         5c:f7:5a:04:59:ec:71:be:5b:56:dc:e0:57:e9:59:7a:b8:8b:
         3c:bb:07:6c:eb:58:06:d3:dd:5a:5f:ca:5d:91:29:66:5e:86:
         3b:e4:fe:29:df:e0:1f:60:5b:a8:fb:51:c8:14:07:e0:33:3a:
         c6:8e:de:57:9e:29:39:eb:53:3a:0e:ba:7f:49:f0:6f:d3:a6:
         f2:53:21:41:3a:1e:e8:7b:2a:ab:0e:73:c7:80:58:1d:d3:a2:
         32:93:1e:1f:52:42:a6:8e:90:78:4b:6a:9e:3a:ac:6f:91:78:
         68:e2:70:cb:4e:8f:6a:e8:75:cf:f4:00:90:a1:46:84:44:3a:
         64:c1:ab:8b:9a:c4:33:4c:ec:9c:64:e7:8d:bf:a9:49:f8:ac:
         1a:ce:b8:f3:88:0d:5a:7c:b4:c8:99:07:70:06:11:8a:24:61:
         22:d3:23:5a:77:a6:b8:64:88:c4:94:bb:c9:85:15:ef:3c:59:
         08:3e:82:b1:34:8a:c7:bd:1a:e3:98:46:2e:6f:be:0f:f7:53:
         fe:00:33:1b:72:d8:f5:67:55:12:86:38:95:a9:db:e2:20:20:
         e7:c3:82:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org