Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3232352e37332e302f32342d3234203d3e20323632353839.roa
File:                     3138312e3232352e37332e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          9F78CO0plHTbK2dni4MH5/2SHvLxADrG3v+aLbsXzY8=
Subject key identifier:   3C:35:2C:1C:18:92:D2:FF:C8:EA:95:DB:B8:F0:BC:28:75:8F:92:2A
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       73DD7E69520FC81F0785C604F86C8D98A92CADBD
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3232352e37332e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:02:35 +0000
ROA not before:           Tue 05 Mar 2024 17:57:35 +0000
ROA not after:            Tue 04 Mar 2025 18:02:35 +0000
asID:                     262589
IP address blocks:        181.225.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:dd:7e:69:52:0f:c8:1f:07:85:c6:04:f8:6c:8d:98:a9:2c:ad:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:35 2024 GMT
            Not After : Mar  4 18:02:35 2025 GMT
        Subject: CN=3C352C1C1892D2FFC8EA95DBB8F0BC28758F922A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:72:9f:b3:ee:36:86:c9:ae:3a:39:51:36:56:
                    7a:88:53:7d:6c:f4:50:b0:39:68:21:79:d3:00:6c:
                    4d:8c:7f:3a:b0:3a:e0:da:c5:76:95:cf:e2:d7:ca:
                    59:2c:69:0e:33:a2:56:77:92:b1:5a:d3:1e:10:20:
                    ec:ae:0b:34:a4:3c:c3:5b:9a:fc:d7:2c:67:7b:08:
                    39:b5:cb:95:eb:51:4c:63:26:0d:72:59:54:00:13:
                    d3:d0:50:18:45:66:42:8a:28:29:6f:34:1c:92:71:
                    8a:8c:e4:4d:db:85:4d:1d:8b:20:e4:d3:c3:6b:91:
                    ff:dc:1a:f2:f9:79:1f:0c:24:ab:ee:09:06:90:3a:
                    9a:aa:14:6e:a1:4f:f9:3a:4e:b1:9e:b0:48:01:88:
                    1c:b3:8b:14:7e:b6:fc:e5:12:c1:b6:47:58:9a:85:
                    76:02:c9:78:eb:e8:f9:3d:06:8f:25:26:c5:ef:86:
                    be:5b:ce:d0:82:75:b4:db:8c:51:10:09:ae:e2:fa:
                    e1:10:4f:06:be:0d:bf:9c:67:89:e2:c7:30:9d:31:
                    ab:d5:34:35:29:e0:51:32:aa:0b:59:df:6d:f2:52:
                    33:19:54:fa:ae:0e:5c:d8:e6:f5:60:e2:e7:07:f0:
                    19:29:4e:f6:ea:b2:1e:19:4a:62:70:92:d0:f6:ec:
                    fb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:35:2C:1C:18:92:D2:FF:C8:EA:95:DB:B8:F0:BC:28:75:8F:92:2A
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3232352e37332e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:a2:4f:6f:b1:56:ad:1e:c9:37:44:2d:40:3d:08:c5:64:75:
         13:14:d3:79:41:dc:5b:01:3d:2f:62:85:74:bd:64:4c:49:17:
         be:8c:77:0a:2b:76:2e:44:3a:67:7e:f6:4a:aa:1e:86:58:ce:
         32:92:cf:f0:d5:f6:37:7b:fc:4d:7c:49:b3:b5:65:5f:b6:27:
         66:92:34:f5:26:af:86:4f:f8:fd:e7:86:af:57:89:82:3d:32:
         80:a6:5d:e8:de:59:75:c3:88:08:2d:19:b5:aa:9b:11:fa:05:
         c3:8c:b9:bf:ef:76:6e:3a:ba:76:75:14:27:b1:b1:49:df:b0:
         67:5e:b6:d5:ed:c9:18:ff:62:62:5a:f3:c8:a0:34:ab:68:b1:
         c3:39:fb:7f:e5:f4:79:ef:08:c9:03:67:d2:fc:0b:8d:8d:25:
         05:00:ce:13:75:b9:06:3a:ab:5b:2b:9e:bf:d3:07:6e:22:22:
         ee:53:db:35:ad:56:67:88:c0:44:d0:98:59:32:60:c2:31:66:
         6f:8b:37:0f:69:a2:c6:05:e4:c1:55:90:0d:20:04:f3:20:76:
         d1:5a:8a:0f:81:7f:0f:9f:47:7d:54:4f:d3:36:60:8a:7b:eb:
         94:84:16:86:9e:83:24:5f:80:7b:3c:47:84:0b:6b:ef:bc:11:
         97:f9:85:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org