Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/3137372e3132382e3131322e302f32322d3234203d3e20323639393838.roa
File:                     3137372e3132382e3131322e302f32322d3234203d3e20323639393838.roa (raw, json)
Hash identifier:          lKDsGUdF6vU48E6/gLmEaNuf3NfC/ebqouJ+N09fKFs=
Subject key identifier:   FD:32:29:B1:5A:F2:73:82:20:5D:C8:8A:F3:71:35:CC:2E:E4:F2:F8
Certificate issuer:       /CN=33AE83F4491BEA105F85ED2DA938440613250424
Certificate serial:       4E742BF6B824B0C0487DB482040AF1767454A671
Authority key identifier: 33:AE:83:F4:49:1B:EA:10:5F:85:ED:2D:A9:38:44:06:13:25:04:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/3137372e3132382e3131322e302f32322d3234203d3e20323639393838.roa
Signing time:             Mon 28 Apr 2025 17:16:23 +0000
ROA not before:           Mon 28 Apr 2025 17:11:23 +0000
ROA not after:            Mon 27 Apr 2026 17:16:23 +0000
asID:                     269988
IP address blocks:        177.128.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:74:2b:f6:b8:24:b0:c0:48:7d:b4:82:04:0a:f1:76:74:54:a6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33AE83F4491BEA105F85ED2DA938440613250424
        Validity
            Not Before: Apr 28 17:11:23 2025 GMT
            Not After : Apr 27 17:16:23 2026 GMT
        Subject: CN=FD3229B15AF27382205DC88AF37135CC2EE4F2F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4d:99:4b:dd:84:6d:d6:81:48:56:46:91:0c:
                    7f:1e:ec:22:b7:89:ac:d0:72:f6:e8:7e:be:98:01:
                    a3:1a:e8:d9:32:90:a7:d0:d6:9a:47:b8:71:7d:2e:
                    dc:ea:28:6f:7a:53:64:60:88:41:57:34:6f:3e:1e:
                    b3:5f:a8:dc:df:e1:dc:91:4b:de:f5:37:47:d4:45:
                    7f:18:c0:e2:e5:60:d0:11:bd:15:34:3b:e6:08:0d:
                    bc:e4:17:ad:09:08:2f:e6:04:79:43:b5:67:3c:8a:
                    ba:7a:77:08:b6:0b:57:d3:70:15:23:c2:ee:60:e4:
                    e3:67:1f:10:d7:31:69:8b:ad:13:3c:57:0f:c5:b3:
                    92:1f:0b:75:78:89:7c:0b:1b:ef:30:8b:8e:56:c7:
                    e2:8b:b3:35:50:01:7f:cb:ca:8d:a0:5b:f9:40:b1:
                    dd:79:78:71:5e:fc:6c:05:1b:7e:61:3c:95:80:d9:
                    b1:2f:c4:ca:45:8f:c9:1b:de:6c:ce:bc:11:28:7a:
                    a9:6a:b9:dd:37:f6:2d:df:af:56:cd:6a:19:e5:f0:
                    6d:8e:75:57:1e:1f:ab:ed:93:cb:f4:7b:30:b3:c2:
                    91:a2:68:42:da:95:48:fd:ab:3a:5a:df:71:c3:7b:
                    42:ad:50:58:76:6d:d7:d1:f0:fd:d2:b3:67:a5:92:
                    53:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:32:29:B1:5A:F2:73:82:20:5D:C8:8A:F3:71:35:CC:2E:E4:F2:F8
            X509v3 Authority Key Identifier:
                keyid:33:AE:83:F4:49:1B:EA:10:5F:85:ED:2D:A9:38:44:06:13:25:04:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/33AE83F4491BEA105F85ED2DA938440613250424.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33AE83F4491BEA105F85ED2DA938440613250424.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBC116A832FA16607D675C75F67E3004970455413F3D5B6DFC6CE424C8164C8/0/3137372e3132382e3131322e302f32322d3234203d3e20323639393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:0f:44:82:96:89:33:a5:2b:fd:e6:71:0c:78:69:2b:73:7b:
         4a:ba:4b:ba:20:6b:ab:44:8c:8f:ec:07:40:0e:aa:53:9d:84:
         8e:4a:e3:9f:9d:32:de:c6:c0:83:c4:56:8d:30:db:c9:a4:6e:
         cf:8f:ba:33:8b:a5:97:0b:4d:b6:20:e3:c9:76:ca:1b:71:45:
         6b:10:30:43:b2:1f:1a:cf:82:e1:0c:0a:e1:0f:f6:a4:d7:c4:
         5c:a9:8c:e0:9d:ef:56:72:49:a2:cc:e4:35:d5:97:e4:2b:48:
         fb:77:b3:ac:da:c4:59:34:91:94:1a:1c:81:d2:6a:ed:45:b4:
         aa:d7:d8:93:e1:82:78:99:e6:c7:85:a2:46:4a:0d:55:7b:94:
         64:20:99:28:7e:e0:09:3c:7b:2a:99:36:8c:f2:c1:e2:39:b8:
         fa:43:e4:70:04:38:ec:a3:29:b7:95:0f:35:c4:99:26:d5:cc:
         d8:5b:29:4d:68:78:25:50:58:a5:0e:d4:a0:4a:64:f9:6c:55:
         b2:61:3f:ce:7c:42:e0:49:7e:99:40:53:6f:55:98:4c:53:48:
         69:71:70:3f:be:70:31:d8:bf:58:1f:da:ec:bb:92:43:e2:88:
         8e:33:5d:c9:8f:10:b0:3a:7b:28:db:2b:ed:d2:79:17:db:89:
         23:a7:3e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:30 2025 by rpki-client on console.sobornost.net