Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/3139322e3134312e39382e302f32332d3233203d3e20323733383832.roa
File:                     3139322e3134312e39382e302f32332d3233203d3e20323733383832.roa (raw, json)
Hash identifier:          dakEO12WtMzeOA8U5NHkCAw3R9D7L4VirmoNXd4Y/hM=
Subject key identifier:   79:86:59:33:1B:1A:B9:E4:DD:B7:81:02:E8:3A:6D:19:3A:C0:5D:EF
Certificate issuer:       /CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
Certificate serial:       62A0D5D2213B36682B32AE44311772581C314FAA
Authority key identifier: 2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/3139322e3134312e39382e302f32332d3233203d3e20323733383832.roa
Signing time:             Fri 11 Apr 2025 17:45:00 +0000
ROA not before:           Fri 11 Apr 2025 17:40:00 +0000
ROA not after:            Fri 10 Apr 2026 17:45:00 +0000
asID:                     273882
IP address blocks:        192.141.98.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a0:d5:d2:21:3b:36:68:2b:32:ae:44:31:17:72:58:1c:31:4f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB
        Validity
            Not Before: Apr 11 17:40:00 2025 GMT
            Not After : Apr 10 17:45:00 2026 GMT
        Subject: CN=798659331B1AB9E4DDB78102E83A6D193AC05DEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4b:4a:57:8a:8b:cd:e1:b1:30:f6:f1:39:06:
                    b1:40:bd:9f:e6:9b:36:65:b5:fd:bd:3f:36:76:eb:
                    e6:23:be:42:e1:f4:69:ac:d8:79:82:8a:6c:b8:61:
                    4c:cd:a9:cd:7d:a1:bf:78:0c:d9:fd:0f:9d:c0:bd:
                    8e:12:fa:bd:7d:ba:17:87:d0:03:ad:35:1d:ac:96:
                    a3:4c:3e:c8:62:f2:50:6a:db:1a:85:3d:47:71:54:
                    0c:af:d4:b5:d4:67:fe:40:73:0e:c4:3f:d6:ab:4f:
                    02:06:c2:92:c6:ee:bc:72:a9:5e:75:09:5c:9e:07:
                    b5:8b:f0:ff:c7:59:de:79:e2:03:0e:e8:7c:50:ac:
                    4c:24:c8:da:96:e2:78:80:43:ec:d4:41:d2:15:c5:
                    89:4d:1f:0d:d7:5b:09:2d:92:77:63:e2:69:2f:3a:
                    8b:47:e6:7a:9b:0b:15:3f:6b:b6:7e:fc:6a:2b:de:
                    04:96:b2:f6:26:1b:81:e0:6e:7c:26:68:09:f7:b7:
                    24:f5:80:ba:e9:9c:2f:cd:75:2c:e8:89:2c:52:12:
                    3f:77:8d:11:95:46:fa:9a:03:a6:2c:e6:ad:49:3f:
                    d0:5e:36:ae:f9:6d:64:d0:8c:24:9b:85:95:50:da:
                    37:e1:1c:90:66:74:e1:e4:65:76:01:2a:01:10:cd:
                    dd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:86:59:33:1B:1A:B9:E4:DD:B7:81:02:E8:3A:6D:19:3A:C0:5D:EF
            X509v3 Authority Key Identifier:
                keyid:2F:56:44:DF:53:CD:B6:08:9B:78:57:CD:E5:20:1B:06:D3:F6:B1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F5644DF53CDB6089B7857CDE5201B06D3F6B1DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57A0438DD0EA5F533777A9D831694D73B86837F0F5C852770002250B038CDDED/0/3139322e3134312e39382e302f32332d3233203d3e20323733383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:71:9b:39:8c:0b:fb:56:aa:63:b1:3e:63:ca:5d:8d:e8:87:
         e2:41:20:fa:7d:c0:d8:86:25:8f:35:4a:94:f7:f0:52:f3:82:
         02:e9:0a:6e:06:de:7f:dd:9d:50:2c:40:63:9d:65:1f:02:71:
         4b:b2:d3:82:0b:84:41:ad:cd:f8:92:a4:80:1f:04:36:af:dc:
         bc:9f:45:30:32:42:41:77:85:37:dc:5f:cc:fa:41:a5:f5:03:
         3a:db:35:d8:c5:17:b7:97:ed:15:9c:8d:01:5c:55:8b:7f:01:
         f8:04:c7:fd:73:d1:f3:1a:8e:15:e6:7e:5f:f8:5b:0b:be:5b:
         5c:c9:9b:f0:80:f2:a3:8c:c3:e0:48:ab:0a:5f:48:88:1f:20:
         a2:b3:a5:7c:c4:2a:83:b6:e2:d5:13:03:f9:d2:90:05:bb:bb:
         cb:cc:73:be:ef:a8:66:40:c4:05:e7:4f:eb:c7:e6:50:0c:53:
         a9:44:a8:c7:bf:36:4c:40:b9:4b:6b:9b:75:63:4b:27:dd:c0:
         db:d1:91:15:5c:b0:e7:be:70:2d:ee:ed:01:02:38:ca:e1:18:
         2e:a1:10:9c:b3:84:68:f2:13:66:84:b9:c5:4f:c0:17:c9:29:
         fa:a3:bf:37:20:08:c2:7f:48:dd:b9:25:6f:49:33:de:67:39:
         0e:bb:38:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:36 2025 by rpki-client on console.sobornost.net