Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/3230312e3135302e32382e302f32322d3232203d3e203531333936.roa
File:                     3230312e3135302e32382e302f32322d3232203d3e203531333936.roa (raw, json)
Hash identifier:          QXvlqiAMINzKx/vKryYnieSy/84OmIFy0BP4+10J0XA=
Subject key identifier:   08:6A:99:1A:8C:A5:BC:49:EA:2C:FA:9D:89:5B:64:49:A8:F0:88:87
Certificate issuer:       /CN=70D5272A97CAC4E1A32EE2B577C0D5E969D6724A
Certificate serial:       06B0580D81E05921E7BE9852BA29CF869F219AA9
Authority key identifier: 70:D5:27:2A:97:CA:C4:E1:A3:2E:E2:B5:77:C0:D5:E9:69:D6:72:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70D5272A97CAC4E1A32EE2B577C0D5E969D6724A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/3230312e3135302e32382e302f32322d3232203d3e203531333936.roa
Signing time:             Tue 22 Apr 2025 14:00:00 +0000
ROA not before:           Tue 22 Apr 2025 13:55:00 +0000
ROA not after:            Tue 21 Apr 2026 14:00:00 +0000
asID:                     51396
IP address blocks:        201.150.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/70D5272A97CAC4E1A32EE2B577C0D5E969D6724A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/70D5272A97CAC4E1A32EE2B577C0D5E969D6724A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70D5272A97CAC4E1A32EE2B577C0D5E969D6724A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b0:58:0d:81:e0:59:21:e7:be:98:52:ba:29:cf:86:9f:21:9a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D5272A97CAC4E1A32EE2B577C0D5E969D6724A
        Validity
            Not Before: Apr 22 13:55:00 2025 GMT
            Not After : Apr 21 14:00:00 2026 GMT
        Subject: CN=086A991A8CA5BC49EA2CFA9D895B6449A8F08887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d7:c7:da:47:6d:a3:91:4d:dd:eb:89:22:5e:
                    57:1d:e6:02:df:9f:98:d3:95:47:5d:ef:09:bf:32:
                    47:94:d2:42:56:a8:6d:6c:25:76:10:76:2c:14:f5:
                    68:3f:0b:44:42:46:02:d7:1a:c4:28:65:fc:5a:75:
                    de:5e:03:19:63:9d:e5:0c:97:e1:88:56:fa:3b:b5:
                    2b:d3:75:b0:93:c5:27:80:d5:83:87:4d:42:cb:be:
                    10:17:3f:82:0c:36:e0:9b:0e:b2:ba:3e:f9:ae:9e:
                    27:7a:89:fe:2e:33:88:85:5d:26:e9:62:7b:ea:6b:
                    b0:f5:7b:b9:2b:bf:df:e1:d3:c0:65:5d:27:fe:b4:
                    ae:ef:ef:e8:bb:70:fe:a1:ed:31:07:a1:75:69:07:
                    9c:95:dd:c3:1e:4d:38:26:4c:0e:6b:ab:8f:f4:1f:
                    e9:5a:0b:ed:98:32:34:12:e4:60:7f:35:cd:a3:6c:
                    5a:11:d3:c6:1d:e5:49:b7:41:33:f4:d6:13:e5:56:
                    f8:a2:7c:f6:04:5e:a8:9b:7a:67:75:54:43:65:fd:
                    45:06:50:c9:b7:21:61:29:38:17:06:7f:d7:7c:e2:
                    3b:82:f9:33:4b:e5:aa:77:4b:94:56:74:b2:c1:c3:
                    93:20:c7:73:33:6d:fe:52:05:9d:54:3e:ec:78:bf:
                    d3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6A:99:1A:8C:A5:BC:49:EA:2C:FA:9D:89:5B:64:49:A8:F0:88:87
            X509v3 Authority Key Identifier:
                keyid:70:D5:27:2A:97:CA:C4:E1:A3:2E:E2:B5:77:C0:D5:E9:69:D6:72:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/70D5272A97CAC4E1A32EE2B577C0D5E969D6724A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70D5272A97CAC4E1A32EE2B577C0D5E969D6724A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8BFB3407966ED0F87C23F67BAE10670D51BE118F22FBADB9AAAD079A706E8B8F/0/3230312e3135302e32382e302f32322d3232203d3e203531333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:54:ac:63:7b:fc:aa:49:62:27:6c:4a:5f:bd:bd:aa:54:e2:
         4e:47:0f:78:c2:30:5e:4d:dc:b9:1c:b2:90:f8:5e:7e:89:cd:
         d4:e7:8b:4d:85:65:36:8e:93:3e:0e:26:0a:e4:06:a9:54:f2:
         66:c0:36:ee:e0:d9:5b:13:ce:e1:e4:35:ce:f6:37:eb:69:eb:
         04:46:41:ab:82:61:11:69:c8:6d:b7:b8:2e:73:09:32:19:0c:
         94:f7:39:fe:e7:00:94:7f:56:4a:64:76:95:2b:15:fb:b9:b9:
         f0:2e:45:f3:4e:ab:48:87:9b:04:5b:4c:d7:95:6c:d0:04:35:
         60:6f:0c:0b:a7:79:02:f4:ad:33:92:7b:f7:63:21:a8:cf:0c:
         fe:f2:e3:8f:37:12:d8:0c:07:4e:e9:a6:9b:b6:f7:93:12:41:
         95:f8:0f:2d:aa:ba:ff:ab:e4:2d:1f:8c:ea:42:c0:4c:d5:c0:
         32:70:24:ec:c9:90:e1:c9:78:36:a0:c8:eb:d7:c2:71:f3:ca:
         d6:e8:68:3a:b7:b9:f0:bf:6d:9e:a5:f3:00:6d:5e:11:7c:40:
         d1:87:90:f0:a6:93:91:19:83:7d:ca:90:c9:62:4b:ca:d6:ab:
         1b:16:62:c2:55:a8:90:dc:06:86:3e:27:9a:8f:09:e9:0c:c6:
         72:16:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:59:58 2025 by rpki-client on console.sobornost.net