Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/3138312e3232342e37342e302f32342d3234203d3e2033373930.roa
File:                     3138312e3232342e37342e302f32342d3234203d3e2033373930.roa (raw, json)
Hash identifier:          E6R8TJlY4v23ChuDof9cMajT61BJQWXU4SfOaaAgcHA=
Subject key identifier:   17:96:19:A0:C9:0D:1E:5D:4B:28:4A:67:09:BC:95:8D:06:BE:A7:0E
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       300B049B6D739EBBD38E97A84E43BBC9D9F51D19
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/3138312e3232342e37342e302f32342d3234203d3e2033373930.roa
Signing time:             Tue 04 Feb 2025 18:44:57 +0000
ROA not before:           Tue 04 Feb 2025 18:39:57 +0000
ROA not after:            Tue 03 Feb 2026 18:44:57 +0000
asID:                     3790
IP address blocks:        181.224.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0b:04:9b:6d:73:9e:bb:d3:8e:97:a8:4e:43:bb:c9:d9:f5:1d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:39:57 2025 GMT
            Not After : Feb  3 18:44:57 2026 GMT
        Subject: CN=179619A0C90D1E5D4B284A6709BC958D06BEA70E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:e7:dc:52:52:5d:f1:f1:8d:ec:5c:0d:e4:
                    4d:6f:6a:19:f6:f9:77:b8:7e:50:21:03:ea:54:45:
                    e1:dd:7f:e9:ff:dc:a1:c5:ec:ea:51:ba:fb:31:63:
                    08:9a:4a:a5:3d:f9:d9:fa:1f:5c:51:52:3d:95:42:
                    ed:c4:6e:52:28:75:ea:89:0f:7a:92:c5:ee:b8:2f:
                    16:69:ab:fa:68:25:62:11:81:5a:96:bd:fe:6d:8b:
                    83:67:55:8b:ae:49:59:1b:0e:6d:c0:0b:51:74:03:
                    f6:c8:20:2a:f8:a4:06:6f:bf:17:40:50:e5:c9:6c:
                    90:35:ce:30:8b:91:8d:2b:2a:7c:88:74:2c:5a:c0:
                    f4:0e:a4:ef:64:5b:f4:9b:02:e9:50:ea:b2:ab:23:
                    56:59:79:0d:b0:f4:2b:f4:25:34:82:df:cc:d0:13:
                    1b:18:35:5b:c2:ad:03:73:ca:d5:78:ca:f3:9c:06:
                    fd:4b:ec:1e:7e:3a:89:9c:43:ca:0f:33:a6:01:88:
                    ae:16:83:4c:05:c5:82:6c:36:cd:78:c5:4b:80:ba:
                    4a:b5:d7:a0:60:84:2f:03:23:92:94:ce:82:ee:45:
                    6a:a3:7d:73:cc:da:ff:36:9e:a1:a5:eb:33:8c:95:
                    2a:b5:1d:09:8a:f2:ff:e7:a9:97:62:66:14:80:99:
                    c2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:96:19:A0:C9:0D:1E:5D:4B:28:4A:67:09:BC:95:8D:06:BE:A7:0E
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/3138312e3232342e37342e302f32342d3234203d3e2033373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:44:75:42:ad:07:3d:5c:17:a1:93:38:79:89:82:a4:47:54:
         f9:60:47:c5:b7:0e:db:6b:bc:e5:17:1b:72:43:f6:a4:5f:ed:
         4c:0c:45:99:a7:38:89:a2:f3:60:60:a0:95:b1:25:8f:a4:42:
         10:04:26:76:4a:4d:21:69:28:ab:a3:0f:57:f2:53:fb:6e:ce:
         8a:b1:06:88:b9:c0:86:af:40:49:f8:b1:fa:60:11:88:e7:0a:
         9d:a7:3f:32:a0:9f:91:2e:a0:45:1c:89:7a:31:68:ed:7d:8f:
         5c:03:70:f5:9e:c0:8f:c4:15:1a:31:8e:ad:cb:f1:85:6b:56:
         ac:3f:14:73:02:58:8b:f7:6d:98:b7:7b:14:a0:15:52:cb:59:
         da:70:91:89:af:f4:dd:36:2b:2a:59:16:c2:ea:6f:45:a4:99:
         7f:65:a5:36:95:66:bc:9d:c3:a8:69:c6:4b:c8:8a:4b:49:88:
         68:51:4a:a2:8e:3c:96:2d:18:af:3d:d2:e3:7f:c5:c8:33:8a:
         df:cf:fa:a5:f0:ce:f2:48:df:e0:52:47:85:17:07:da:5c:15:
         47:bd:be:18:ea:8b:72:ef:35:16:03:2e:e9:c8:8b:05:dd:fe:
         94:bf:62:ca:07:5b:3f:d6:c6:6a:e4:45:13:b1:22:04:16:60:
         8e:45:b0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:29:20 2025 by rpki-client