Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39372e302f32342d3234203d3e20323634373633.roa
File:                     3136382e3139372e39372e302f32342d3234203d3e20323634373633.roa (raw, json)
Hash identifier:          hR1VLQpIoY+GmlRILXZu1s1xjVPsUW/jgZKTgnfUO2w=
Subject key identifier:   78:99:C4:CD:35:A6:93:52:38:65:45:69:F0:8C:36:85:C5:C0:A3:D1
Certificate issuer:       /CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
Certificate serial:       3F4A9AE131915D9D3BBF2685DCA36B0EB6069858
Authority key identifier: 04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39372e302f32342d3234203d3e20323634373633.roa
Signing time:             Tue 04 Feb 2025 18:54:31 +0000
ROA not before:           Tue 04 Feb 2025 18:49:31 +0000
ROA not after:            Tue 03 Feb 2026 18:54:31 +0000
asID:                     264763
IP address blocks:        168.197.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4a:9a:e1:31:91:5d:9d:3b:bf:26:85:dc:a3:6b:0e:b6:06:98:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
        Validity
            Not Before: Feb  4 18:49:31 2025 GMT
            Not After : Feb  3 18:54:31 2026 GMT
        Subject: CN=7899C4CD35A6935238654569F08C3685C5C0A3D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fe:fb:33:fd:e3:35:66:9e:47:b4:66:48:8b:
                    bb:99:7b:e8:a6:91:f4:02:36:18:5d:b0:0c:07:ef:
                    99:62:bd:43:e6:9f:50:9a:66:d6:61:90:1b:eb:0f:
                    43:fc:e4:b8:ca:b8:7d:ff:1a:6f:73:0e:77:06:e0:
                    93:45:f7:c8:d0:ff:fe:fe:43:4c:2b:14:bb:95:de:
                    2d:21:21:3d:f3:06:0a:f2:c0:25:07:17:a8:a1:b9:
                    0d:bc:5f:04:c0:5f:f8:78:74:3a:b7:1d:c1:0c:eb:
                    1b:03:d2:70:35:89:8a:e4:38:aa:08:26:7e:6c:1e:
                    37:de:99:ad:a2:7b:55:f6:87:87:90:f7:8d:91:a0:
                    3f:a9:74:f2:19:5d:0d:bc:c5:f7:25:8b:11:5e:42:
                    be:4c:36:7f:91:c4:16:30:08:92:8d:bb:fb:c4:82:
                    f2:76:08:3b:d3:c4:8c:ef:5f:09:85:50:49:8d:b4:
                    df:89:ab:c7:5e:3d:bd:16:0d:0f:00:25:9d:f0:94:
                    6c:9a:0c:cf:47:1e:b3:f9:55:63:bc:2b:5d:b5:73:
                    04:55:d7:8e:69:4a:0f:05:6e:eb:f9:70:10:31:94:
                    9f:a7:e5:4f:a5:04:a9:dd:ce:3c:03:35:64:32:c2:
                    c5:54:08:b8:e4:a0:7e:6c:f0:95:06:61:d4:d8:98:
                    71:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:99:C4:CD:35:A6:93:52:38:65:45:69:F0:8C:36:85:C5:C0:A3:D1
            X509v3 Authority Key Identifier:
                keyid:04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39372e302f32342d3234203d3e20323634373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:0c:71:49:b0:f5:d0:d4:5b:1b:93:5a:77:70:c4:a3:5a:44:
         04:33:45:c9:a1:b1:21:23:7d:e8:1c:73:4a:c1:ab:2e:4f:9b:
         15:05:a2:b7:6b:92:d9:19:a5:19:44:dc:0a:e7:b0:97:8e:24:
         ca:3c:b9:4d:df:0f:67:6e:69:f1:6d:bf:dc:c6:ef:61:64:e3:
         d1:2d:b6:bb:1a:5c:85:69:cf:9d:14:e2:87:0a:6e:09:77:cc:
         e3:24:ee:e8:82:96:f3:b9:3a:77:83:17:b9:bc:1f:f0:b3:48:
         fe:d1:66:54:70:bd:f7:d7:dc:96:d9:f7:46:04:61:2d:6e:84:
         12:f4:b1:06:e3:5c:1d:ed:2e:a5:92:35:c7:63:a2:f8:57:e8:
         02:d7:ae:ea:09:f3:4e:63:bd:3d:65:40:9b:18:ed:52:07:18:
         ec:33:32:b3:59:2c:54:d7:da:85:82:10:f7:87:e2:a9:12:5e:
         95:83:31:57:d1:49:46:48:79:40:b8:0e:77:54:9c:65:44:3c:
         10:0d:d9:e0:50:e2:09:e0:ae:77:46:fe:1c:f1:e8:1b:16:e6:
         1c:26:0c:22:d4:e8:ec:4c:9a:5f:1c:24:e0:91:cb:ca:cf:21:
         4a:40:bb:29:51:7e:9f:5b:7c:85:06:c1:78:88:56:50:df:9d:
         7c:b5:fc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:09 2025 by rpki-client on console.sobornost.net