Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3230302e3132352e302e302f31382d3234203d3e2036303537.roa
File:                     3230302e3132352e302e302f31382d3234203d3e2036303537.roa (raw, json)
Hash identifier:          1zfTyac6w+tpG+06OS1nGvF2J7aLWRhQe7helalS2lc=
Subject key identifier:   70:8A:C2:28:61:E1:C6:DB:84:17:25:2B:3D:28:6B:31:8C:5A:BF:F5
Certificate issuer:       /CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
Certificate serial:       75436E9ADAB09FC7720DEA03FC7CFBAF619E0440
Authority key identifier: 72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3230302e3132352e302e302f31382d3234203d3e2036303537.roa
Signing time:             Tue 04 Feb 2025 20:07:18 +0000
ROA not before:           Tue 04 Feb 2025 20:02:18 +0000
ROA not after:            Tue 03 Feb 2026 20:07:18 +0000
asID:                     6057
IP address blocks:        200.125.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:43:6e:9a:da:b0:9f:c7:72:0d:ea:03:fc:7c:fb:af:61:9e:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727A13D5DBF23ADF158891806A414D12A2BC7ACD
        Validity
            Not Before: Feb  4 20:02:18 2025 GMT
            Not After : Feb  3 20:07:18 2026 GMT
        Subject: CN=708AC22861E1C6DB8417252B3D286B318C5ABFF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:72:50:de:83:73:1a:32:b0:03:63:73:e1:
                    45:29:f2:3a:1b:32:b4:4c:c3:e0:dd:48:7a:1e:2c:
                    33:9f:ac:04:0f:0f:ed:c6:67:27:f6:ae:59:ab:0b:
                    be:ab:40:2f:23:85:48:5b:2a:a4:4b:0d:d4:90:82:
                    7b:65:0f:3d:04:89:3c:45:45:0a:0c:85:6f:5d:40:
                    ef:45:2d:be:3f:f5:86:c2:50:08:34:30:43:7c:68:
                    aa:9d:a7:14:c6:11:42:cc:55:3b:32:a5:7c:b4:da:
                    a6:91:4d:61:45:a2:b3:f6:1f:d6:a8:bc:49:c3:58:
                    ba:2f:cf:92:e6:bb:38:d4:64:aa:ae:3e:5e:8e:05:
                    0b:45:8c:13:ca:46:29:35:5d:fe:61:ef:af:8e:b4:
                    84:36:51:6e:34:92:e8:33:a2:25:06:62:53:35:00:
                    84:98:36:1e:9d:8b:6e:32:75:ae:0f:ca:7a:36:79:
                    bb:08:3d:59:64:d4:f2:a6:0a:c0:5b:64:42:1c:9d:
                    6f:8b:3d:24:59:c3:c4:b7:cd:1b:cf:2d:86:28:45:
                    84:61:44:31:45:ea:91:27:98:62:42:ee:fc:5c:88:
                    f2:b6:a1:6c:bc:24:28:74:a7:dc:6b:c7:5c:f2:b2:
                    b6:a1:98:a2:d6:9b:92:23:79:b1:ac:05:44:f6:e4:
                    91:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8A:C2:28:61:E1:C6:DB:84:17:25:2B:3D:28:6B:31:8C:5A:BF:F5
            X509v3 Authority Key Identifier:
                keyid:72:7A:13:D5:DB:F2:3A:DF:15:88:91:80:6A:41:4D:12:A2:BC:7A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/727A13D5DBF23ADF158891806A414D12A2BC7ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93D52DE9D2A8A774AD4406BD56D41461395377DBEF3296A7579582C616B0648C/0/3230302e3132352e302e302f31382d3234203d3e2036303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5f:4f:fc:57:0a:df:af:93:31:ab:f2:ad:12:7b:ab:e2:d0:8b:
         69:17:95:e8:5f:2a:fd:18:63:4a:4e:ba:1c:bf:a6:1f:8f:29:
         37:8e:a9:42:fe:45:08:8d:85:a5:3e:94:bf:ad:d0:d5:f2:a2:
         0c:94:61:72:85:58:d1:af:fa:a8:65:dd:d2:94:bc:25:4e:41:
         4b:46:d6:51:0e:6d:2c:3d:a8:09:10:70:03:b1:bf:bc:f2:2c:
         45:c2:0d:15:09:d2:17:4f:00:26:0a:83:86:86:0b:31:41:ae:
         6b:95:78:8b:0f:2c:c9:ae:65:99:e3:80:df:a3:41:7d:3f:d9:
         fc:52:a7:7c:2b:8a:9f:9a:ce:36:b6:2e:33:64:47:de:02:11:
         2f:49:b7:2a:c6:88:e9:a9:f0:5e:29:e2:f6:64:cb:da:37:5c:
         27:1f:b4:7f:15:23:e5:0f:37:a5:f0:af:26:c3:80:59:e5:62:
         8a:49:51:5e:e6:98:55:af:4f:60:97:2a:81:af:13:ce:d9:5b:
         a7:f0:3b:e4:2c:fe:08:2a:6f:e5:82:77:2b:bc:95:13:89:22:
         5c:ce:4a:76:af:40:81:ba:61:97:a9:99:7d:12:9a:2b:da:eb:
         38:9d:f3:01:2e:28:ab:06:91:2b:d3:c2:08:fb:c0:49:cb:36:
         40:e5:9f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:06:56 2025 by rpki-client on console.sobornost.net