Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33362e302f32342d3234203d3e203532343333.roa
File:                     3139302e39332e33362e302f32342d3234203d3e203532343333.roa (raw, json)
Hash identifier:          Hd4tiLdhTr19rOa+0WYoNRnZvxqx4/Rpt7n+JeuMPlc=
Subject key identifier:   38:2C:99:85:3C:15:2F:4F:3C:F2:E9:2F:34:BF:27:93:00:34:9D:CF
Certificate issuer:       /CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
Certificate serial:       3F8D7B49F9B65789CDC3F8ACA0F6235257DCBC27
Authority key identifier: 54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33362e302f32342d3234203d3e203532343333.roa
Signing time:             Thu 24 Apr 2025 15:15:56 +0000
ROA not before:           Thu 24 Apr 2025 15:10:56 +0000
ROA not after:            Thu 23 Apr 2026 15:15:56 +0000
asID:                     52433
IP address blocks:        190.93.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 04:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:8d:7b:49:f9:b6:57:89:cd:c3:f8:ac:a0:f6:23:52:57:dc:bc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5408B30DE5B83D183566781EE9CE33FDF27A8870
        Validity
            Not Before: Apr 24 15:10:56 2025 GMT
            Not After : Apr 23 15:15:56 2026 GMT
        Subject: CN=382C99853C152F4F3CF2E92F34BF279300349DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fd:70:69:17:63:12:5c:25:1f:d3:4a:9e:4c:
                    b2:9f:5e:51:be:96:1d:b9:a1:7b:ac:aa:04:81:64:
                    b6:64:9c:e2:bb:69:cf:43:c4:b8:54:a2:a0:ef:d1:
                    9b:80:1d:06:38:a7:09:d4:80:ec:74:33:24:d9:ea:
                    bd:d4:d4:f2:0c:e1:99:f8:47:19:b4:6d:cc:09:0e:
                    e8:23:8a:8c:09:1b:38:77:52:31:19:27:8a:9a:e9:
                    1d:03:7a:72:4d:ae:06:ec:44:a4:92:27:06:fb:a0:
                    06:28:ca:f0:da:7d:57:93:e2:b8:78:66:a1:91:36:
                    11:bb:b0:8a:10:83:e3:ca:be:9d:8f:20:2f:61:43:
                    f4:1d:a4:a1:de:88:09:5a:d5:05:f5:5f:27:04:4f:
                    e1:ad:61:2a:3f:6f:56:13:a3:e0:52:03:b0:24:44:
                    7b:94:b4:16:28:09:6d:37:04:b5:0f:99:88:ee:49:
                    ff:26:de:22:6d:6f:f6:0a:62:54:0d:bd:f1:bc:6b:
                    3b:b9:70:6a:09:e4:5f:0c:6a:f8:4d:c9:95:3d:10:
                    44:6f:cb:1b:aa:83:a5:6d:ab:3f:31:84:21:f9:c4:
                    b7:f7:c0:89:cf:f2:bd:f0:b7:48:22:6f:72:da:17:
                    ee:c8:8a:68:a5:d9:16:12:8d:60:c9:a9:13:33:5e:
                    28:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2C:99:85:3C:15:2F:4F:3C:F2:E9:2F:34:BF:27:93:00:34:9D:CF
            X509v3 Authority Key Identifier:
                keyid:54:08:B3:0D:E5:B8:3D:18:35:66:78:1E:E9:CE:33:FD:F2:7A:88:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5408B30DE5B83D183566781EE9CE33FDF27A8870.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A2D6D80BB3773B1F555A8C9B8F8D21CFEB652F6BF04435B1F88AEEFB6AC19C0/0/3139302e39332e33362e302f32342d3234203d3e203532343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:9b:44:0e:cd:f7:83:33:43:1c:10:99:37:3e:1f:b1:ba:32:
         a0:54:a5:1a:40:e2:51:21:b2:85:de:b9:a1:e3:95:27:f4:9c:
         d9:ba:38:c1:d3:b3:4c:1c:d5:a9:10:32:87:d1:c0:2f:a3:dc:
         e2:e1:7f:ee:c8:12:9c:f5:76:b5:ae:6a:fb:37:1a:ff:fe:73:
         b6:b2:12:41:4d:6a:7d:71:a5:78:e0:17:4b:dc:80:11:1b:e6:
         f5:a5:99:c9:87:8e:ce:7a:62:8c:a2:3a:2a:ae:3e:72:77:72:
         a2:86:bd:0a:8a:90:24:f1:ce:b4:51:0e:ef:3c:e8:65:36:b3:
         50:24:26:f1:00:64:4a:e5:bd:90:27:48:bc:af:c7:1b:3d:ce:
         2e:89:eb:d8:28:b1:8e:d2:c4:79:73:ab:ac:e0:ce:aa:cc:7e:
         a9:3a:df:d4:97:37:87:6d:0c:83:49:81:fe:5c:01:aa:f3:6c:
         b7:aa:7e:f6:81:1f:df:1c:4d:88:6e:7c:94:15:57:06:1d:93:
         fa:42:eb:77:f2:fd:ab:79:bc:08:97:d4:6c:65:71:0c:dd:b8:
         11:f6:27:04:f1:90:9c:1b:e0:34:69:87:03:6c:65:c1:20:6c:
         65:6c:05:ac:d2:46:64:eb:2b:49:65:8d:9f:23:bf:dc:ee:86:
         1c:1f:0f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:09 2025 by rpki-client on console.sobornost.net