Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/3138312e3139322e3130302e302f32322d3234203d3e20323639393937.roa
File:                     3138312e3139322e3130302e302f32322d3234203d3e20323639393937.roa (raw, json)
Hash identifier:          6kC7WpbjPGcm5ztzwP2Ag6bWkEywtAU2Zqq7LRFrFX4=
Subject key identifier:   95:14:FE:D3:91:64:FE:0C:AA:33:9B:31:68:FE:FA:3A:9D:B5:7E:73
Certificate issuer:       /CN=7660EB285CC219C2AD66E7F125B7DA367148E14B
Certificate serial:       50E63E4E60A6A35987651311C5208AC0A92A0D30
Authority key identifier: 76:60:EB:28:5C:C2:19:C2:AD:66:E7:F1:25:B7:DA:36:71:48:E1:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/3138312e3139322e3130302e302f32322d3234203d3e20323639393937.roa
Signing time:             Tue 04 Feb 2025 18:28:32 +0000
ROA not before:           Tue 04 Feb 2025 18:23:32 +0000
ROA not after:            Tue 03 Feb 2026 18:28:32 +0000
asID:                     269997
IP address blocks:        181.192.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e6:3e:4e:60:a6:a3:59:87:65:13:11:c5:20:8a:c0:a9:2a:0d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7660EB285CC219C2AD66E7F125B7DA367148E14B
        Validity
            Not Before: Feb  4 18:23:32 2025 GMT
            Not After : Feb  3 18:28:32 2026 GMT
        Subject: CN=9514FED39164FE0CAA339B3168FEFA3A9DB57E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:54:4f:29:b4:14:9c:b8:b3:16:f3:f5:43:
                    48:c1:8f:c4:30:b1:12:12:bc:ee:1a:fb:59:a5:39:
                    f9:6f:02:15:f5:67:55:70:a1:7e:d9:51:92:0c:87:
                    0f:29:79:b8:eb:e6:41:73:6c:b3:4e:df:c6:d8:53:
                    d5:0f:25:52:0b:bc:f5:df:ee:e6:0e:87:cb:57:97:
                    5d:47:e7:ff:5f:96:88:88:22:59:00:6b:a5:27:61:
                    41:c9:97:23:6d:7a:ab:35:e4:bd:46:6b:29:37:dd:
                    43:06:2b:0b:ea:c0:78:32:42:92:be:58:7f:69:2b:
                    6b:b0:db:01:ad:c9:67:b2:1a:65:1e:ee:8b:25:c5:
                    bd:b5:5e:31:72:cd:97:35:49:58:8f:c0:26:c4:cd:
                    d3:a9:a3:68:1d:68:53:2f:b8:d5:14:39:fe:60:4d:
                    96:6a:bd:3d:ae:80:90:9d:6e:d3:7d:1c:05:2f:f3:
                    d6:ff:f7:d7:1f:06:e6:d8:35:b3:e7:34:ae:09:77:
                    b3:20:e6:cb:09:81:72:45:72:13:26:67:c3:ff:1a:
                    63:3b:d0:95:c8:7b:30:f8:ad:84:d8:dc:1f:0a:af:
                    9a:63:19:6e:88:e9:2f:88:0b:25:05:97:54:d2:bc:
                    00:dc:24:cf:ec:23:1c:6d:f7:0f:79:d1:ef:61:15:
                    64:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:14:FE:D3:91:64:FE:0C:AA:33:9B:31:68:FE:FA:3A:9D:B5:7E:73
            X509v3 Authority Key Identifier:
                keyid:76:60:EB:28:5C:C2:19:C2:AD:66:E7:F1:25:B7:DA:36:71:48:E1:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7660EB285CC219C2AD66E7F125B7DA367148E14B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07A973CB861D33007BC2590F5ED5E8D0979F0385597CBE7510E0CE48E07B9668/0/3138312e3139322e3130302e302f32322d3234203d3e20323639393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:7e:cd:4c:63:59:6b:3e:e3:40:04:f8:e8:dd:50:a4:a3:e5:
         3a:1a:9c:55:34:de:2f:ed:7b:44:99:f9:24:96:95:49:ba:0f:
         e4:40:12:12:9a:57:14:89:73:8b:78:09:9e:4b:22:10:0e:1b:
         dd:4e:ad:e2:60:ef:2b:23:d5:dc:b0:81:ac:6f:bc:2d:9f:c8:
         80:3c:88:89:c9:be:a5:84:db:3a:10:26:1f:ba:7d:2b:23:6f:
         ef:2a:c8:10:e3:75:42:81:0e:ba:c7:06:9b:9d:d6:37:0f:08:
         b6:75:88:4d:bf:b8:1a:5f:6c:34:8a:a0:45:bf:91:e6:d6:d1:
         2f:9d:d0:75:fc:3a:fb:e7:ac:23:3f:ce:eb:a8:01:70:0b:a5:
         21:dd:71:78:ca:ba:c3:50:15:82:63:93:98:82:9e:75:6c:29:
         b4:60:9b:bf:5e:ca:f0:f5:a7:32:bf:b3:b3:05:4f:05:51:bb:
         03:67:c5:c0:db:43:62:5d:c5:fd:30:32:ae:87:27:b6:aa:18:
         3e:56:9e:07:ec:45:86:8b:a2:6a:63:00:1b:7c:f5:60:64:84:
         9d:af:25:37:c9:9d:7c:3f:ca:bc:e5:dc:ed:b1:90:2f:bb:8d:
         44:71:3a:3d:39:bb:73:b2:76:8f:52:6e:7f:96:4d:f6:77:ed:
         b7:5f:41:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:47 2025 by rpki-client on console.sobornost.net