Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/3138312e3232342e37322e302f32342d3234203d3e203131383330.roa
File:                     3138312e3232342e37322e302f32342d3234203d3e203131383330.roa (raw, json)
Hash identifier:          MT8KUgdzmMrW8hoIcOzjTPug4oKJn5TPoAhVnQFXr+k=
Subject key identifier:   41:B4:BE:43:EC:38:ED:BF:A2:99:F3:55:BA:E2:EC:E1:F8:F8:EC:A4
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       4565306FA4CFE48617A5F777A5A26E2BA4D4493F
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/3138312e3232342e37322e302f32342d3234203d3e203131383330.roa
Signing time:             Tue 05 Mar 2024 18:15:31 +0000
ROA not before:           Tue 05 Mar 2024 18:10:31 +0000
ROA not after:            Tue 04 Mar 2025 18:15:31 +0000
asID:                     11830
IP address blocks:        181.224.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:65:30:6f:a4:cf:e4:86:17:a5:f7:77:a5:a2:6e:2b:a4:d4:49:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:31 2024 GMT
            Not After : Mar  4 18:15:31 2025 GMT
        Subject: CN=41B4BE43EC38EDBFA299F355BAE2ECE1F8F8ECA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b1:37:d6:8d:ca:e1:0d:cd:30:8c:60:b4:d8:
                    20:8d:21:c4:68:63:74:92:e0:e4:1f:94:82:d2:25:
                    28:33:d3:92:e2:1a:e2:e9:42:3d:a8:1d:35:49:7f:
                    2c:c1:83:6b:ea:21:bd:a2:ab:f0:43:a6:58:66:c9:
                    ba:90:dd:3a:e5:2d:29:a8:13:56:4c:8d:66:44:1b:
                    03:cd:3b:17:a2:a0:f3:c4:b7:97:67:d3:63:fd:0f:
                    82:76:af:a9:4c:7d:b8:0a:a4:25:91:92:ca:c3:89:
                    2e:08:c5:62:6c:9a:e6:80:c6:26:3c:9b:dd:25:a7:
                    f0:aa:08:04:06:7c:cd:0b:68:fd:18:46:35:39:8f:
                    1b:02:62:e4:b3:98:77:b2:12:3c:31:4b:cf:1b:f0:
                    93:69:16:42:61:ec:92:e2:47:3a:3e:61:6a:3d:24:
                    78:b3:d8:e6:49:e5:b7:00:7b:02:35:68:53:82:82:
                    08:7a:a0:e2:83:b8:4a:b1:d2:b5:17:f5:f4:4c:91:
                    6e:8e:4f:8f:e5:66:a5:b3:e3:a8:47:4b:eb:7e:92:
                    21:5a:81:8e:a2:1a:6f:f0:5e:c8:64:5c:e6:2a:77:
                    05:22:9d:e1:89:a0:e5:99:ce:4b:eb:54:4f:1d:a4:
                    8b:c0:ad:79:92:a9:a4:61:99:fc:2c:7f:70:3d:50:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B4:BE:43:EC:38:ED:BF:A2:99:F3:55:BA:E2:EC:E1:F8:F8:EC:A4
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/3138312e3232342e37322e302f32342d3234203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:fd:16:b8:6f:72:f0:f6:29:2c:d5:55:51:c9:dc:a3:9b:27:
         17:eb:8e:b0:12:fe:d7:4b:69:32:a0:58:eb:e8:2b:67:b8:b5:
         e2:c5:d3:c5:3d:32:3d:52:50:4d:89:69:db:0e:51:de:67:97:
         28:0f:19:b4:b7:26:41:f3:14:b7:d7:2d:9a:84:a5:a6:1a:56:
         15:64:3c:f8:f0:49:22:5c:9b:2a:9a:d3:cb:74:48:01:1c:c2:
         86:eb:e9:6a:3e:23:5d:6e:aa:2d:6a:cf:c1:3e:4f:1d:04:33:
         5b:5c:64:02:e1:59:34:a5:13:5d:d6:64:48:35:c7:eb:a7:da:
         74:01:31:23:cf:ac:36:9c:be:45:03:be:bc:04:9f:27:40:85:
         d9:ee:c2:7a:7f:2c:be:e3:ec:5f:97:a7:93:6b:f9:24:3b:b4:
         70:dc:fa:34:ac:12:21:20:51:67:da:f4:4a:54:33:ef:a0:e9:
         50:f1:de:de:58:a8:13:4c:2d:a5:09:b8:42:07:9f:ab:f4:7a:
         5f:c2:b0:3b:ab:61:d9:6a:73:2e:13:36:ef:11:5f:34:dc:c2:
         77:99:d1:88:9a:1a:77:c0:a1:5a:48:4e:f6:85:12:a7:0b:2c:
         65:e6:44:ac:9a:c8:16:a0:e9:6d:47:16:c4:b7:bd:ab:5b:13:
         6c:14:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org