Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/3139302e3131312e3132342e302f32322d3235203d3e203532323931.roa
File:                     3139302e3131312e3132342e302f32322d3235203d3e203532323931.roa (raw, json)
Hash identifier:          thEPwiArK3TsQ/dQnkYHJ4u9ceV03PLElIG9YtbZdKU=
Subject key identifier:   89:2C:2C:C4:22:31:D5:D6:B8:AC:AF:C3:4C:3A:E6:15:02:79:CA:FB
Certificate issuer:       /CN=409F816F9F6076FF99779C7733845FD803FA035A
Certificate serial:       7DBB3D4D69B08AC0381DA6916717591280D50987
Authority key identifier: 40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/3139302e3131312e3132342e302f32322d3235203d3e203532323931.roa
Signing time:             Fri 25 Apr 2025 12:15:00 +0000
ROA not before:           Fri 25 Apr 2025 12:10:00 +0000
ROA not after:            Fri 24 Apr 2026 12:15:00 +0000
asID:                     52291
IP address blocks:        190.111.124.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:bb:3d:4d:69:b0:8a:c0:38:1d:a6:91:67:17:59:12:80:d5:09:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409F816F9F6076FF99779C7733845FD803FA035A
        Validity
            Not Before: Apr 25 12:10:00 2025 GMT
            Not After : Apr 24 12:15:00 2026 GMT
        Subject: CN=892C2CC42231D5D6B8ACAFC34C3AE6150279CAFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:6d:ca:0a:e9:b3:84:73:06:6b:05:8d:03:
                    2b:46:8a:cd:b5:38:c1:67:80:85:c5:16:01:78:a3:
                    f8:cf:54:0f:e2:ac:a3:a0:e1:8c:34:b5:eb:35:28:
                    61:0a:e3:8c:03:95:c4:eb:ec:b5:9a:4f:ef:84:70:
                    71:02:70:8c:8e:c5:56:ce:1a:36:ab:b1:83:1d:87:
                    2d:b1:ce:a5:8d:5f:b6:06:9a:9a:50:b5:bd:a5:f1:
                    d8:4d:59:d0:32:61:f7:34:47:62:15:e9:84:a4:f8:
                    e0:24:b0:b8:59:f1:32:66:17:02:f4:bf:18:e6:16:
                    ad:b7:ad:85:2d:19:94:c6:32:17:35:57:4d:65:ef:
                    69:36:27:3e:15:26:43:51:c8:ca:8e:81:03:a1:94:
                    ce:95:ae:89:0f:72:c3:b8:f8:88:30:44:3d:d5:4f:
                    ee:3d:4c:0f:ba:08:f5:72:fd:5c:33:95:32:d4:4e:
                    71:f2:2a:db:7c:27:75:59:b3:53:cd:cb:78:00:10:
                    50:26:7a:8e:e9:6a:4c:08:04:e1:ce:78:c4:19:24:
                    a8:9f:32:60:f0:a5:ad:9c:07:35:93:7c:96:36:b9:
                    5a:d3:ed:56:e2:19:7f:e9:ad:b3:b8:db:b1:0b:b3:
                    de:2f:23:f4:85:c5:9b:2c:88:9e:1b:29:da:6d:25:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2C:2C:C4:22:31:D5:D6:B8:AC:AF:C3:4C:3A:E6:15:02:79:CA:FB
            X509v3 Authority Key Identifier:
                keyid:40:9F:81:6F:9F:60:76:FF:99:77:9C:77:33:84:5F:D8:03:FA:03:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/409F816F9F6076FF99779C7733845FD803FA035A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/409F816F9F6076FF99779C7733845FD803FA035A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70D661404135CBC4C9A26A7E0A41396D445E1D10397A15F537D8228C9A78EEC3/0/3139302e3131312e3132342e302f32322d3235203d3e203532323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:ab:c7:82:2c:68:cc:fd:5d:8b:43:61:95:79:9e:b0:d0:27:
         60:70:13:53:39:35:84:26:4e:12:83:88:a2:40:82:0d:44:ea:
         18:79:cc:51:46:0b:7a:1f:09:20:0b:92:34:73:4e:af:a1:dc:
         ed:13:70:69:6c:c7:bf:22:34:e8:c7:f6:a7:14:98:b2:84:bd:
         f9:a3:09:19:67:5c:5f:88:be:1c:cf:e2:dc:85:21:7d:51:a9:
         f9:87:00:43:a3:23:f7:91:9a:79:d2:db:ea:78:69:b7:7a:ba:
         07:5a:da:b7:96:93:89:df:28:7f:89:c2:52:39:0c:e4:6a:63:
         c9:fe:5d:5f:85:30:48:55:36:6e:54:5b:5a:df:2c:4e:9f:3f:
         18:98:17:d3:e3:e4:f3:fe:06:4c:20:1c:d1:84:b9:f8:49:12:
         94:12:37:b7:5b:31:f1:84:2d:d3:e4:3c:36:34:9a:40:cf:50:
         e7:8c:56:c7:7f:b0:cb:74:b0:bf:e3:6f:f9:08:56:0d:c4:c0:
         5e:7c:79:45:4c:3d:6d:8a:ce:ac:09:6c:c6:09:1b:bd:ba:40:
         45:28:00:2a:b7:2f:8f:fb:c6:44:6c:c0:08:6e:9d:aa:52:bb:
         cf:0a:76:58:4e:3b:74:a2:c7:f8:5d:af:c7:71:44:1a:f7:84:
         78:80:d8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:58 2025 by rpki-client on console.sobornost.net