Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34322e302f32342d3234203d3e203532333438.roa
File:                     3139302e31342e34322e302f32342d3234203d3e203532333438.roa (raw, json)
Hash identifier:          /qvdUJBSe33j3dWz9nc7752CC92qKyitoobhxE99MPc=
Subject key identifier:   81:12:5D:EA:AC:9F:B8:7C:FA:93:6F:6E:67:A6:0E:3B:0F:8E:80:A2
Certificate issuer:       /CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
Certificate serial:       6E634BB0EF58C89E0920977A71081D0886B24CC4
Authority key identifier: 0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34322e302f32342d3234203d3e203532333438.roa
Signing time:             Tue 04 Feb 2025 18:36:25 +0000
ROA not before:           Tue 04 Feb 2025 18:31:25 +0000
ROA not after:            Tue 03 Feb 2026 18:36:25 +0000
asID:                     52348
IP address blocks:        190.14.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:63:4b:b0:ef:58:c8:9e:09:20:97:7a:71:08:1d:08:86:b2:4c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13
        Validity
            Not Before: Feb  4 18:31:25 2025 GMT
            Not After : Feb  3 18:36:25 2026 GMT
        Subject: CN=81125DEAAC9FB87CFA936F6E67A60E3B0F8E80A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4e:48:9c:56:c6:60:b0:8d:bd:64:8a:9d:cf:
                    09:2f:17:19:34:65:6a:db:ea:97:66:22:93:5d:5b:
                    cf:74:9d:de:f8:ba:54:f6:36:01:11:07:9f:09:4d:
                    4b:4b:e4:e2:c2:4a:24:9d:2a:16:3d:e4:ab:68:f8:
                    fd:c1:0c:28:55:81:72:4f:a9:f0:a4:a1:33:b2:1d:
                    3c:67:70:3f:b4:1a:9e:97:fa:d2:c3:86:78:3a:ae:
                    46:12:81:12:2b:a0:9c:15:c8:a7:dc:3a:e6:60:99:
                    db:62:cd:5c:11:aa:31:17:3d:15:e5:42:bb:60:14:
                    24:ae:75:ae:f4:42:3b:16:9e:92:0d:49:2b:b2:ef:
                    8d:76:36:23:61:9c:bb:ae:d6:ac:48:a7:17:06:bf:
                    3d:de:d5:8e:46:a4:15:db:6d:8e:07:fe:bc:e9:96:
                    05:26:24:55:93:7d:bf:c1:f8:42:b1:02:80:5d:66:
                    b5:49:f0:b6:5a:b6:4e:e6:24:33:59:3b:d1:27:5c:
                    a3:ed:35:64:e9:b8:a6:3b:33:a9:6a:78:e8:60:31:
                    d6:97:c3:1c:c6:9d:96:ab:f6:97:77:d6:66:62:15:
                    d0:b0:29:cf:e5:90:e2:ca:0a:8b:5d:3b:67:97:ef:
                    e6:4a:37:02:81:fd:3b:5f:26:dc:89:0e:13:81:ee:
                    72:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:12:5D:EA:AC:9F:B8:7C:FA:93:6F:6E:67:A6:0E:3B:0F:8E:80:A2
            X509v3 Authority Key Identifier:
                keyid:0F:C3:C8:0E:69:A9:A2:F3:E7:BB:3F:33:64:40:B3:E8:7C:21:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0FC3C80E69A9A2F3E7BB3F336440B3E87C215F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1ABFF4AC22B0C55B28D05D7609B045D1B81439C709BC3FC881D29BCC8744E3/0/3139302e31342e34322e302f32342d3234203d3e203532333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:2b:27:02:69:90:25:00:15:54:dd:17:d2:a6:02:d5:b3:d0:
         90:02:ba:c2:2b:51:8a:a2:cc:9f:4e:01:03:77:39:43:ba:36:
         35:3a:2b:b1:96:84:38:69:1c:20:90:44:44:39:9a:72:84:20:
         4c:e1:f5:e3:2c:40:77:12:1a:fb:11:cd:ce:59:cf:cd:1c:aa:
         c7:06:9a:b2:f4:e8:7c:87:83:9f:73:06:64:ea:56:e3:0e:b3:
         2a:49:f7:c9:d2:8f:75:c3:40:97:6c:ca:be:75:1f:bf:39:b6:
         89:c4:cd:6e:9b:a6:b9:b4:a3:35:4d:1c:cf:8e:f3:81:ae:7e:
         95:a3:f5:e8:9f:e0:e4:85:6e:14:b4:93:61:dc:5c:df:68:d3:
         ca:ab:21:08:5e:48:0e:91:32:1a:a7:80:a6:71:ee:c8:b4:c0:
         a7:93:80:11:25:6b:2e:f1:04:ad:f8:17:48:bf:7b:31:f4:01:
         53:d4:0f:c2:18:74:08:ca:d0:99:0d:15:08:ff:a7:86:f0:bb:
         15:5b:f7:be:a1:5a:5a:ea:5d:53:05:e3:ed:f7:2b:66:be:6c:
         a3:aa:bb:9c:17:dc:98:d7:1f:df:78:f8:41:9d:23:90:9d:f6:
         f5:32:90:4f:11:89:e4:41:87:a7:f7:ea:5f:63:15:4d:26:42:
         c7:f2:ce:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:04 2025 by rpki-client on console.sobornost.net