Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3230312e3234372e3139322e302f32302d3230203d3e203134373534.roa
File:                     3230312e3234372e3139322e302f32302d3230203d3e203134373534.roa (raw, json)
Hash identifier:          p4/A2IsA2zrVCPTmkPsobda8B0SReE193gKr9HLhGfc=
Subject key identifier:   C1:DD:62:4B:25:0E:6F:B7:26:CC:69:52:FD:0E:F4:A3:BD:56:D1:85
Certificate issuer:       /CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
Certificate serial:       0F253B633DE9495A8C30205F1B22088B53F06166
Authority key identifier: 20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3230312e3234372e3139322e302f32302d3230203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:01:02 +0000
ROA not before:           Tue 04 Feb 2025 17:56:02 +0000
ROA not after:            Tue 03 Feb 2026 18:01:02 +0000
asID:                     14754
IP address blocks:        201.247.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl
                          rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:25:3b:63:3d:e9:49:5a:8c:30:20:5f:1b:22:08:8b:53:f0:61:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2015789E0A9B12EE1A82CB85A5945DD9B3185725
        Validity
            Not Before: Feb  4 17:56:02 2025 GMT
            Not After : Feb  3 18:01:02 2026 GMT
        Subject: CN=C1DD624B250E6FB726CC6952FD0EF4A3BD56D185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f0:b8:d5:3f:55:2f:1a:8f:14:e1:1d:96:d0:
                    50:07:2c:98:22:3c:8e:6d:73:dd:46:c7:4b:f9:e3:
                    0e:bb:06:66:a9:60:19:34:00:6d:37:8b:6a:f4:b0:
                    55:28:22:c0:1c:40:e5:ff:7c:ae:8a:0c:7a:7f:88:
                    8a:a9:5d:a1:a8:32:ab:36:65:13:78:9d:0e:0c:e8:
                    dd:63:42:f8:32:34:21:7f:72:0e:b0:2f:a0:37:ad:
                    85:12:31:64:fb:cd:38:6e:6c:31:f5:a5:3f:4d:70:
                    28:99:f0:cf:d1:e2:ef:83:cc:21:61:ed:8e:d3:ef:
                    16:f3:02:51:5a:c7:44:7b:66:f0:19:09:a9:bd:2f:
                    e2:17:b3:b7:01:87:b7:74:b7:c6:a4:99:23:26:b1:
                    a1:23:11:89:84:28:50:79:8e:8e:d9:2a:f2:cd:e0:
                    fc:ab:40:6f:2c:1e:4a:3d:71:5a:82:01:32:02:01:
                    44:ae:81:24:46:38:3e:25:3d:d9:19:e3:19:3e:31:
                    4e:ce:91:a7:9a:0c:c6:48:08:73:7b:7b:e1:eb:d2:
                    56:70:38:7e:14:ab:57:87:d4:04:1e:f9:7d:fd:f1:
                    97:9b:9d:1d:3c:3f:bc:1a:86:dc:65:78:da:4f:54:
                    8d:fd:7e:11:a5:b6:92:e4:ad:0f:4e:02:8e:d1:fb:
                    16:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DD:62:4B:25:0E:6F:B7:26:CC:69:52:FD:0E:F4:A3:BD:56:D1:85
            X509v3 Authority Key Identifier:
                keyid:20:15:78:9E:0A:9B:12:EE:1A:82:CB:85:A5:94:5D:D9:B3:18:57:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2015789E0A9B12EE1A82CB85A5945DD9B3185725.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/621058D179CA5C1C056C1BF7B82C927A5AFCB1B19091AD5CC7DE01A4D2BA33B5/0/3230312e3234372e3139322e302f32302d3230203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.247.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:39:21:c0:29:ce:6d:72:11:7d:58:18:54:62:bb:21:cd:c7:
         12:d9:cb:79:02:87:96:b0:24:ca:ed:84:90:8d:0d:a0:70:e5:
         a4:77:1b:de:a9:ce:09:c0:c4:88:ad:2f:e1:66:e5:b1:a8:35:
         7c:cb:38:fb:d9:7e:d3:98:5f:c9:6b:24:76:ba:3c:56:29:52:
         ba:4f:57:95:cb:72:d9:01:98:e2:30:bf:8d:43:9b:66:1a:a3:
         6e:62:74:b2:49:42:65:fe:6a:8d:0c:33:99:81:c4:fe:8d:2d:
         ce:cf:6c:40:95:17:37:18:b2:14:4e:ba:6d:f3:35:36:a2:11:
         31:f1:d8:b7:25:aa:72:a4:bf:71:37:ca:ce:30:9f:01:76:32:
         45:64:2b:1d:c0:33:ce:03:2b:e6:07:59:c6:ea:e0:09:37:e8:
         b4:73:e5:4b:01:92:e2:95:20:d6:5d:55:4d:65:c6:3f:26:e4:
         4a:d9:ad:ef:aa:69:d8:2e:c2:73:b6:7b:18:d4:d6:45:e6:48:
         e8:6b:f2:16:96:d8:2f:e0:bd:8e:b0:ea:9a:5a:22:9e:93:1e:
         13:5e:77:e9:2a:8b:73:52:6f:09:23:f2:45:b9:27:3c:a1:f8:
         c9:52:7e:6f:18:ff:31:1a:9e:8a:4b:3d:45:5e:5f:38:95:35:
         7c:0b:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:55 2025 by rpki-client on console.sobornost.net