Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32322d3234203d3e20323639393138.roa
File:                     3133312e37322e3136382e302f32322d3234203d3e20323639393138.roa (raw, json)
Hash identifier:          TtO8OEFCRXrc9HJKx3YpygJnrLJTp91muS4sd68nFzY=
Subject key identifier:   A8:DC:FB:00:92:A1:F2:B4:6C:65:74:24:42:DF:11:5C:56:E7:57:25
Certificate issuer:       /CN=D439ACC51BC8AE7294E3E68A83FB67E034B93F54
Certificate serial:       4C0042C77D7256D9C8BE1A6222C10E12DB74E48E
Authority key identifier: D4:39:AC:C5:1B:C8:AE:72:94:E3:E6:8A:83:FB:67:E0:34:B9:3F:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32322d3234203d3e20323639393138.roa
Signing time:             Thu 24 Apr 2025 14:55:00 +0000
ROA not before:           Thu 24 Apr 2025 14:50:00 +0000
ROA not after:            Thu 23 Apr 2026 14:55:00 +0000
asID:                     269918
IP address blocks:        131.72.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:00:42:c7:7d:72:56:d9:c8:be:1a:62:22:c1:0e:12:db:74:e4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D439ACC51BC8AE7294E3E68A83FB67E034B93F54
        Validity
            Not Before: Apr 24 14:50:00 2025 GMT
            Not After : Apr 23 14:55:00 2026 GMT
        Subject: CN=A8DCFB0092A1F2B46C65742442DF115C56E75725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ff:0e:5c:9a:28:e9:24:35:fb:2a:c4:f5:9b:
                    a8:9e:01:07:2b:cf:11:61:65:95:f5:1a:35:fc:ce:
                    63:e5:1c:7e:ce:60:94:5c:02:ba:79:b7:d9:a8:ed:
                    6d:83:7d:a1:38:6a:4b:98:a7:b5:99:46:51:39:bc:
                    b5:ea:57:20:a5:7e:a4:3d:12:ad:b7:5f:da:8c:3c:
                    ed:67:b5:8d:d4:69:7a:48:a5:87:59:ba:d6:27:9d:
                    b1:be:36:ba:d3:b0:56:75:8b:77:da:0e:2d:2e:6d:
                    38:86:83:a8:e7:78:19:16:6d:8c:96:4b:f5:ef:3a:
                    c4:c1:92:59:90:d7:29:ba:b1:9e:2d:a0:de:48:55:
                    d0:85:db:d4:7d:7b:ec:38:be:72:95:b6:e5:ba:b4:
                    46:3e:f0:8d:31:e6:39:53:32:36:13:c0:ad:bf:f3:
                    1f:d8:32:44:04:f5:33:ec:9e:f4:d4:fd:e9:c7:33:
                    54:9d:1a:1d:70:ef:c6:b2:cf:ad:55:ae:80:47:2f:
                    0d:0d:69:17:e7:78:d5:d5:cc:a0:0b:89:fb:9f:22:
                    61:91:da:3e:a9:71:76:ab:ca:53:16:57:62:85:0b:
                    bf:37:47:22:0b:4b:97:94:d3:92:13:c6:2c:94:10:
                    39:38:e9:67:74:2c:38:70:3f:45:03:bc:a9:01:de:
                    c2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DC:FB:00:92:A1:F2:B4:6C:65:74:24:42:DF:11:5C:56:E7:57:25
            X509v3 Authority Key Identifier:
                keyid:D4:39:AC:C5:1B:C8:AE:72:94:E3:E6:8A:83:FB:67:E0:34:B9:3F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32322d3234203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:a5:2c:db:f9:77:9f:5a:9b:d8:51:2c:5d:8e:1d:94:f6:b1:
         eb:ae:18:e4:b7:2a:f3:0f:b6:b2:2e:ec:65:22:77:3b:36:49:
         a9:5e:6a:c2:29:f6:47:ef:fb:97:d5:8f:03:84:34:d7:c0:e0:
         f7:d7:e0:35:8d:ed:c3:54:2d:54:e1:2a:fe:e6:38:86:23:11:
         66:24:75:d8:7e:63:92:9b:04:64:d1:9c:41:56:ef:2e:91:b5:
         cb:36:1a:aa:1a:1d:05:d6:4b:d6:84:93:87:fa:b8:81:9b:42:
         c9:bf:5b:11:88:f1:fc:bc:79:e8:05:d4:8c:24:7e:c2:3f:9a:
         4e:8f:32:09:30:3b:71:3a:72:76:30:f0:57:09:63:d6:f1:73:
         40:95:5e:92:d2:fc:fc:82:55:7f:04:8f:b7:e0:94:d2:47:7b:
         16:0d:e3:5f:6a:8c:67:40:bd:75:76:b9:02:9c:ef:88:14:34:
         02:32:7f:52:69:0c:20:3d:fb:27:f3:2b:22:90:f5:1b:9e:b9:
         1d:6e:79:fb:ba:f8:31:c1:5a:39:83:c0:8b:2e:88:01:2c:2c:
         b4:c7:1e:3f:11:99:d5:11:39:00:93:2a:84:d3:7f:f3:1c:59:
         7e:97:79:28:8a:b3:7a:17:21:64:36:7d:7f:5a:51:d4:25:1f:
         ba:d1:2e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:59:55 2025 by rpki-client on console.sobornost.net