Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3232352e37382e302f32342d3234203d3e20323632353839.roa
File:                     3138312e3232352e37382e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          9NwLysaP0+Yyv3Ynp/C3FNG5wTJ+gcFk+Rt4/0iIyq0=
Subject key identifier:   24:4D:71:E8:0E:19:96:F0:63:67:06:4D:6E:50:3A:74:F9:F2:4D:8D
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       4B89C9768D5D8BE7F04B49617CAF8BE49762F46C
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3232352e37382e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:02:47 +0000
ROA not before:           Tue 05 Mar 2024 17:57:47 +0000
ROA not after:            Tue 04 Mar 2025 18:02:47 +0000
asID:                     262589
IP address blocks:        181.225.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:89:c9:76:8d:5d:8b:e7:f0:4b:49:61:7c:af:8b:e4:97:62:f4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Mar  5 17:57:47 2024 GMT
            Not After : Mar  4 18:02:47 2025 GMT
        Subject: CN=244D71E80E1996F06367064D6E503A74F9F24D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:91:62:5c:cb:6e:b0:cf:19:57:8f:f5:b3:ea:
                    71:77:81:a6:da:5f:e9:b9:0e:30:53:c8:ac:21:ff:
                    62:58:aa:fe:8c:ad:57:d7:ef:f7:c1:92:e9:ec:c5:
                    0f:cc:13:12:06:76:2e:29:15:05:4e:54:01:84:bc:
                    27:c0:f9:88:7e:62:70:4e:c9:ae:2e:fd:cf:fb:ab:
                    6d:83:ab:a0:93:a0:0a:91:06:12:0d:25:e7:09:64:
                    33:23:1a:ba:44:14:31:b2:06:15:ae:5a:30:cc:6f:
                    6e:0a:58:e3:f9:91:9d:3c:eb:9b:1c:63:93:69:64:
                    47:ce:66:c3:54:7d:ce:92:8d:6c:01:9f:78:d6:1c:
                    c5:ff:cb:d3:5e:4c:db:27:34:10:8d:1c:ff:8e:52:
                    00:24:e9:88:ce:47:62:56:7f:dc:60:80:a9:94:36:
                    8c:1a:51:7a:40:d0:78:9b:76:9e:38:e6:a0:cd:a6:
                    02:12:04:02:09:29:51:ea:d0:96:4e:17:ef:29:55:
                    a0:ef:cd:ce:e7:ad:8d:e4:83:ed:6f:68:2b:39:eb:
                    bc:b8:6b:cd:8c:da:df:ed:da:e3:25:60:08:ec:35:
                    c2:11:af:d1:f9:54:2b:38:85:ee:89:b4:9b:61:49:
                    d0:2a:b9:bf:80:1b:24:6e:da:2f:6d:b8:37:29:8d:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4D:71:E8:0E:19:96:F0:63:67:06:4D:6E:50:3A:74:F9:F2:4D:8D
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3232352e37382e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:dc:bc:8e:c5:2b:2c:12:2d:49:10:e6:17:5e:07:c8:01:70:
         a5:25:77:a1:17:0a:bf:c2:c3:76:63:a9:02:c6:47:85:1f:34:
         03:c9:4f:48:a3:fd:c8:07:28:d8:67:b7:85:ea:ac:7e:ff:1c:
         0f:0c:cb:56:d7:a8:6a:de:ec:53:1c:b8:44:11:97:c6:63:cf:
         fb:0e:4a:f9:da:55:cc:ce:28:74:0f:f8:92:47:05:cb:e2:20:
         08:3e:42:97:48:4e:9d:eb:ff:22:a8:1d:4f:77:84:21:d1:01:
         1f:6b:cf:9b:9f:51:1c:8b:4c:43:6c:06:78:cb:e1:c2:78:07:
         63:db:22:a6:63:5c:87:f1:f8:07:31:c2:e4:da:9c:11:22:b9:
         04:a4:dd:f9:4c:61:04:e9:2a:50:6b:af:22:a4:27:e6:b5:61:
         77:e0:49:8d:38:25:0a:17:37:60:a5:3a:63:40:22:d1:11:a6:
         b2:e6:6c:13:20:58:43:3d:fe:d6:3e:43:1e:25:3f:f6:55:63:
         03:1b:e4:a3:b4:f7:a6:b5:ab:49:1f:94:4f:20:56:24:cd:fb:
         24:5d:01:52:95:ae:f2:27:f0:e6:cb:09:98:f4:08:e5:56:64:
         58:8f:0c:fb:75:b6:70:3c:d3:00:b2:93:92:c2:a2:1d:ff:9b:
         14:1d:98:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org