Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230362e302f32342d3330203d3e203532343132.roa
File:                     3138312e3232342e3230362e302f32342d3330203d3e203532343132.roa (raw, json)
Hash identifier:          lZ9bZVLWrRtIZaucnOb3YwWx10MlmehSAziAtC0OH1M=
Subject key identifier:   40:74:8F:06:AA:D6:7F:AD:BD:98:C6:03:27:1C:B0:56:D9:DF:29:0F
Certificate issuer:       /CN=6243575DF1F667D5FC35E515D93014D37B684DA3
Certificate serial:       5D953DC8D92CADCA98EA8C288DC416097311B402
Authority key identifier: 62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230362e302f32342d3330203d3e203532343132.roa
Signing time:             Thu 05 Sep 2024 15:10:00 +0000
ROA not before:           Thu 05 Sep 2024 15:05:00 +0000
ROA not after:            Thu 04 Sep 2025 15:10:00 +0000
asID:                     52412
IP address blocks:        181.224.206.0/24 maxlen: 30

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:95:3d:c8:d9:2c:ad:ca:98:ea:8c:28:8d:c4:16:09:73:11:b4:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6243575DF1F667D5FC35E515D93014D37B684DA3
        Validity
            Not Before: Sep  5 15:05:00 2024 GMT
            Not After : Sep  4 15:10:00 2025 GMT
        Subject: CN=40748F06AAD67FADBD98C603271CB056D9DF290F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7d:f0:7d:da:0b:31:66:ce:2a:3f:86:80:8a:
                    7a:3f:64:e4:d2:f0:85:42:f1:a8:74:f4:de:af:82:
                    9a:91:37:75:d5:93:93:46:86:c5:c6:f8:cf:99:21:
                    d3:5a:06:05:5a:47:0a:89:72:31:1c:bd:27:40:90:
                    a8:ea:71:e0:d2:09:d1:65:a5:62:b6:14:a6:a4:3d:
                    a0:7d:f4:de:f0:f8:70:f8:1e:76:db:b1:08:62:fe:
                    68:b1:71:30:fb:07:da:f0:94:96:f3:50:cb:22:c6:
                    c8:4d:28:c7:39:f1:6f:15:d5:ca:ef:79:d8:0d:d6:
                    53:46:05:30:92:17:8a:be:66:f1:f6:41:4c:0e:a9:
                    64:fe:25:14:b6:f2:db:6a:3d:b2:86:99:d8:3c:41:
                    af:d4:55:13:01:aa:a3:b4:2a:74:ee:bc:52:15:a6:
                    66:0f:8f:fd:f3:d3:1a:8d:bc:95:ac:f8:4a:9e:4e:
                    db:fd:c8:89:20:27:d8:e9:f7:ad:ed:6d:c7:e8:e5:
                    3f:9a:5b:00:57:15:23:51:6c:05:df:c4:28:b9:aa:
                    a4:b2:18:19:5b:d2:73:f5:9f:02:3b:79:34:ae:9d:
                    c8:59:19:db:c5:6b:15:0f:2b:b8:1c:c8:5e:ff:52:
                    ac:3d:66:9e:6f:db:ff:de:b3:b7:88:a9:6e:b1:4b:
                    b4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:74:8F:06:AA:D6:7F:AD:BD:98:C6:03:27:1C:B0:56:D9:DF:29:0F
            X509v3 Authority Key Identifier:
                keyid:62:43:57:5D:F1:F6:67:D5:FC:35:E5:15:D9:30:14:D3:7B:68:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/6243575DF1F667D5FC35E515D93014D37B684DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6243575DF1F667D5FC35E515D93014D37B684DA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F3C72D9DD3806643B6E80F71BF49D409A4EF62688DC3DD641B0B5809FA57545/0/3138312e3232342e3230362e302f32342d3330203d3e203532343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:9b:d4:08:1e:2a:4b:a7:ff:0e:f8:67:d6:39:00:11:71:9b:
         98:d5:67:25:c4:7b:0d:bb:6b:e7:98:61:54:35:81:29:60:d5:
         9a:54:b2:e8:c9:c8:74:e3:a7:b8:9f:80:92:d8:e2:06:58:aa:
         d1:d3:88:7d:e8:74:15:c4:75:eb:3c:03:73:38:72:6d:8c:b9:
         10:00:c8:4e:08:d0:5c:e5:b7:b4:5c:20:2b:2e:f4:99:1e:b9:
         2a:42:4f:bb:a1:c7:f8:88:80:2c:de:6b:d0:12:47:ae:69:d2:
         4f:17:fc:3e:8f:83:80:11:34:c3:63:78:a3:80:9a:37:27:93:
         f9:a7:23:34:f1:10:c0:2f:03:75:b8:d8:e4:4f:55:aa:aa:03:
         23:29:d9:48:72:a9:7a:01:05:4d:ed:ff:09:8c:e8:c2:f8:db:
         4a:fc:0e:0b:77:80:03:68:86:42:6c:b7:28:44:0f:29:bc:e9:
         5f:a6:0e:fb:af:6f:ae:72:85:72:84:3c:b1:71:78:79:58:ea:
         d9:26:77:3c:09:3b:40:51:01:7c:b6:f1:bc:0c:91:d9:8e:a0:
         d1:0a:57:cf:5e:a9:d5:dc:41:cc:4e:b1:0c:02:59:61:d9:de:
         82:64:af:e0:ef:2c:03:67:8a:a9:92:9c:f4:a6:29:43:af:90:
         6e:aa:18:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org