Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/3136382e3139372e34372e3234302f32392d3239203d3e203631353231.roa
File:                     3136382e3139372e34372e3234302f32392d3239203d3e203631353231.roa (raw, json)
Hash identifier:          zg/e4+NG7ZC7GXTeFrHw0GZvLG2iU8khaTuf5oE01/w=
Subject key identifier:   F1:32:3F:4F:4B:23:CF:B8:3B:4A:A5:FA:D2:78:6C:C7:57:BB:66:D4
Certificate issuer:       /CN=0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB
Certificate serial:       407390E5FDD0AC1BAEDF9A4517990D03B2BF29CD
Authority key identifier: 0C:3F:5B:DC:0C:ED:77:CC:FF:2B:A4:40:19:D1:D9:EE:70:39:B9:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/3136382e3139372e34372e3234302f32392d3239203d3e203631353231.roa
Signing time:             Thu 24 Apr 2025 14:15:54 +0000
ROA not before:           Thu 24 Apr 2025 14:10:54 +0000
ROA not after:            Thu 23 Apr 2026 14:15:54 +0000
asID:                     61521
IP address blocks:        168.197.47.240/29 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:73:90:e5:fd:d0:ac:1b:ae:df:9a:45:17:99:0d:03:b2:bf:29:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB
        Validity
            Not Before: Apr 24 14:10:54 2025 GMT
            Not After : Apr 23 14:15:54 2026 GMT
        Subject: CN=F1323F4F4B23CFB83B4AA5FAD2786CC757BB66D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8d:88:4c:82:c7:f6:2f:53:0f:cc:e3:54:af:
                    8c:a6:93:37:11:83:84:af:84:52:2a:8b:6e:a2:c3:
                    2a:d7:be:ae:27:22:56:fa:66:57:07:58:1d:13:2c:
                    e1:1f:b7:22:b9:2c:2a:08:d5:d0:0d:8a:6a:98:44:
                    43:66:d1:3b:dc:ba:8e:c8:3a:a1:c6:2d:8a:da:3d:
                    b6:89:da:11:7e:61:d3:57:db:0d:03:86:32:38:63:
                    d5:d9:70:e5:7a:40:58:e3:f0:32:83:53:98:95:e8:
                    ac:74:42:94:7d:83:f2:58:e8:7d:c3:9f:7d:66:00:
                    2f:8f:10:c9:4f:be:be:92:e2:5f:03:8c:e9:93:e4:
                    74:d6:d0:1c:ce:40:e7:64:7e:46:92:a6:35:24:05:
                    14:23:54:e6:8d:a2:6b:46:72:9f:cd:d0:22:cf:8b:
                    64:19:bd:08:d2:8e:0a:5f:c5:e0:bc:69:ae:7e:7e:
                    99:12:5c:cc:5d:c1:b4:7e:38:05:ca:97:76:99:d8:
                    77:18:b8:05:22:ac:2f:11:91:67:84:7d:ff:12:3c:
                    c5:b8:f6:eb:6d:e2:35:b5:e6:2b:9f:25:37:a1:bc:
                    b8:72:04:18:ba:d9:75:4b:ea:d3:44:42:0b:e4:b2:
                    73:95:8a:5b:28:42:46:30:62:08:66:3f:c3:a7:56:
                    6d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:32:3F:4F:4B:23:CF:B8:3B:4A:A5:FA:D2:78:6C:C7:57:BB:66:D4
            X509v3 Authority Key Identifier:
                keyid:0C:3F:5B:DC:0C:ED:77:CC:FF:2B:A4:40:19:D1:D9:EE:70:39:B9:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/3136382e3139372e34372e3234302f32392d3239203d3e203631353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.47.240/29

    Signature Algorithm: sha256WithRSAEncryption
         01:e8:c3:dc:2f:3f:a4:db:1c:49:ac:3b:0b:86:d3:2a:cf:ce:
         07:d6:c0:fb:e7:13:47:54:73:98:1b:57:e1:e3:a4:bd:2f:3c:
         11:62:00:c2:0a:40:5c:bd:c0:44:55:32:f9:da:8b:5d:37:85:
         3a:95:1e:03:08:83:dd:bd:47:6d:68:28:0c:e5:e2:37:34:7c:
         72:89:5e:9f:f6:e1:a2:7f:9a:33:a5:0b:91:f6:92:f0:67:af:
         be:d3:6a:69:9d:0f:30:d4:c6:31:5d:5c:66:f9:0f:46:00:c0:
         24:c2:39:bf:d6:99:72:fb:71:d3:aa:45:ee:1a:42:a6:6c:d1:
         5a:97:c3:ca:78:93:62:d5:e8:b1:7b:97:a9:51:c4:c2:fe:0e:
         77:ff:78:f2:de:b8:49:82:02:b0:7f:5e:4b:53:c9:27:80:9e:
         a3:be:2b:90:a6:e0:97:e6:21:d2:9f:18:00:5b:12:dd:a6:31:
         c0:2b:17:96:c2:27:65:80:59:5b:99:cc:54:92:89:b7:0b:18:
         97:05:5e:25:11:b4:68:2e:e4:5d:50:dd:e5:a4:76:0b:d5:86:
         0a:bd:d8:bc:3a:c3:ff:2e:d7:a2:97:d1:63:14:9f:02:9c:0e:
         4d:18:fb:5a:3f:e4:25:ef:cf:58:36:f3:c1:18:01:49:8a:18:
         dd:91:31:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:15 2025 by rpki-client on console.sobornost.net