Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/3230312e3133312e3230302e302f32322d3235203d3e203238333837.roa
File:                     3230312e3133312e3230302e302f32322d3235203d3e203238333837.roa (raw, json)
Hash identifier:          8EI93BEooZ/+BwvSTrjZmZfno/KwJTaER2SI7SuvOaw=
Subject key identifier:   B6:9B:09:F7:60:79:57:C2:8B:BC:84:C0:24:E3:DD:3F:03:8E:8A:0B
Certificate issuer:       /CN=F120FD76709C67C88845B1BB9132720E6262A870
Certificate serial:       6D7A7DB1ED73C0B3A6A8DC6977975AF16F36572A
Authority key identifier: F1:20:FD:76:70:9C:67:C8:88:45:B1:BB:91:32:72:0E:62:62:A8:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F120FD76709C67C88845B1BB9132720E6262A870.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/3230312e3133312e3230302e302f32322d3235203d3e203238333837.roa
Signing time:             Mon 07 Apr 2025 15:14:07 +0000
ROA not before:           Mon 07 Apr 2025 15:09:07 +0000
ROA not after:            Mon 06 Apr 2026 15:14:07 +0000
asID:                     28387
IP address blocks:        201.131.200.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/F120FD76709C67C88845B1BB9132720E6262A870.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/F120FD76709C67C88845B1BB9132720E6262A870.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F120FD76709C67C88845B1BB9132720E6262A870.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7a:7d:b1:ed:73:c0:b3:a6:a8:dc:69:77:97:5a:f1:6f:36:57:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F120FD76709C67C88845B1BB9132720E6262A870
        Validity
            Not Before: Apr  7 15:09:07 2025 GMT
            Not After : Apr  6 15:14:07 2026 GMT
        Subject: CN=B69B09F7607957C28BBC84C024E3DD3F038E8A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:60:2c:98:b3:50:90:47:e1:54:5f:54:32:0a:
                    b6:a5:6e:a4:a3:81:d8:b1:0a:77:78:84:8e:f8:12:
                    fa:cf:08:71:b9:3c:b2:1e:03:f4:73:63:04:fc:16:
                    b4:08:1f:ea:2c:13:24:b0:e1:a6:ec:62:a0:07:c4:
                    dd:60:76:30:77:26:8e:5c:36:19:9a:d1:c9:01:5c:
                    77:68:fd:e1:06:4d:5a:be:2b:9d:aa:da:80:d3:54:
                    92:1e:ae:ef:60:1f:81:74:ad:00:32:0e:28:c8:a9:
                    92:f4:8b:66:0b:f8:81:5d:18:c1:db:64:0f:4f:8d:
                    d3:e5:95:25:ac:f9:38:40:66:c2:89:bc:d9:30:81:
                    13:04:a2:35:c6:aa:11:57:1e:7d:f2:b9:2f:6b:14:
                    92:cc:5f:14:01:ad:e8:f9:00:97:30:fb:bf:1d:1e:
                    f7:34:df:e0:4b:47:2c:be:f1:13:e6:be:41:05:66:
                    26:2a:2b:61:d1:e6:7f:ca:4f:f3:e5:50:e5:98:15:
                    79:fc:d9:6c:d3:bc:3a:01:f0:72:e7:80:ed:2f:65:
                    b5:0b:03:bd:ce:a0:7d:07:b0:eb:33:64:f7:b2:f2:
                    07:5f:ce:dc:5e:f6:7c:bd:34:9f:97:15:1a:92:4e:
                    e8:7d:75:f3:ab:e0:58:50:fb:d7:88:94:8f:57:2c:
                    67:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9B:09:F7:60:79:57:C2:8B:BC:84:C0:24:E3:DD:3F:03:8E:8A:0B
            X509v3 Authority Key Identifier:
                keyid:F1:20:FD:76:70:9C:67:C8:88:45:B1:BB:91:32:72:0E:62:62:A8:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/F120FD76709C67C88845B1BB9132720E6262A870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F120FD76709C67C88845B1BB9132720E6262A870.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/3230312e3133312e3230302e302f32322d3235203d3e203238333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:10:91:b0:44:0d:3a:f6:a2:0e:6b:db:9c:00:b4:ac:86:b7:
         7a:fe:e9:5b:f2:51:1f:cd:86:ee:07:0b:df:7a:4b:17:15:eb:
         20:98:14:6e:50:b8:e8:9e:97:f8:92:e2:51:51:92:67:92:4e:
         02:5f:48:7f:f3:2b:cf:e6:be:89:0e:fa:58:fd:07:67:fc:ad:
         93:95:7f:cc:d6:71:aa:8d:76:e1:f5:f6:f4:64:c4:6c:2c:8d:
         37:27:bd:40:29:07:c0:7b:80:71:45:12:20:ab:1a:f1:fc:19:
         5c:14:ca:06:33:9e:77:03:6d:59:27:42:4c:6a:45:27:d9:40:
         e9:5b:a0:18:6c:e1:36:3c:c6:21:df:7e:f4:a6:ea:31:86:ab:
         04:94:1e:5d:4c:4c:99:9e:c1:4d:33:f9:a1:b3:1d:41:f8:11:
         52:5d:8c:c5:57:41:64:9d:fd:f2:62:8b:b6:80:d9:9f:43:01:
         b7:f6:56:fd:a6:3b:04:59:33:07:4c:24:25:7c:0e:46:63:cf:
         4d:d6:44:29:88:cd:9e:37:6f:f4:3a:96:71:29:77:33:05:ca:
         da:80:d2:4c:48:dd:14:fe:f4:31:39:60:cc:e0:62:e4:b8:be:
         ab:dd:48:3a:ed:1d:f5:6b:a6:59:ce:8b:c3:b9:b7:fb:9e:82:
         18:5f:67:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:13 2025 by rpki-client on console.sobornost.net