Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233372e302f32342d3234203d3e203238333937.roa
File:                     3133312e302e3233372e302f32342d3234203d3e203238333937.roa (raw, json)
Hash identifier:          hca/ef5+bia4V1Vy+7Lv2wSubfhLtkC6kDn+9TN+570=
Subject key identifier:   DC:4E:EA:1A:8E:0B:D0:05:80:BC:B9:A6:7C:C0:44:6A:11:81:C3:51
Certificate issuer:       /CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
Certificate serial:       4301FC9E71A884C421904D2E80E8C59178E2D764
Authority key identifier: 9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233372e302f32342d3234203d3e203238333937.roa
Signing time:             Mon 21 Apr 2025 22:45:01 +0000
ROA not before:           Mon 21 Apr 2025 22:40:01 +0000
ROA not after:            Mon 20 Apr 2026 22:45:01 +0000
asID:                     28397
IP address blocks:        131.0.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:01:fc:9e:71:a8:84:c4:21:90:4d:2e:80:e8:c5:91:78:e2:d7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
        Validity
            Not Before: Apr 21 22:40:01 2025 GMT
            Not After : Apr 20 22:45:01 2026 GMT
        Subject: CN=DC4EEA1A8E0BD00580BCB9A67CC0446A1181C351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d3:2a:47:b7:0f:bd:d8:ef:c7:51:ca:75:b1:
                    87:20:5c:33:29:88:e4:de:da:39:c6:9e:e9:79:94:
                    60:2c:de:dd:c7:1b:6b:5d:7d:47:c6:55:8d:c8:dd:
                    f4:9d:94:52:b9:b2:34:ad:44:ce:c6:34:cc:2b:2b:
                    da:20:83:ec:27:e8:0e:bd:57:61:33:38:2b:4e:ae:
                    05:ab:20:51:06:16:ab:07:4c:89:4e:f8:51:b4:50:
                    72:da:54:cf:c1:e9:08:f6:e3:43:7f:2e:88:4f:63:
                    b1:c1:55:f3:a7:38:a9:44:00:b2:8c:59:eb:2a:d1:
                    bb:6b:95:0b:80:92:ec:be:3a:7a:72:c8:d6:c9:8f:
                    95:0f:08:5c:33:91:a9:87:99:b5:ef:29:48:32:74:
                    1d:5c:d1:1d:32:5b:5c:1d:c7:84:ef:4c:e5:18:32:
                    b0:64:2a:b7:2f:0a:3a:bf:8a:c0:72:12:07:e9:38:
                    14:7e:56:4b:dc:5a:41:00:8e:ec:5c:3c:ba:20:87:
                    e6:ad:2c:1d:af:cb:8b:2c:fb:5d:97:27:44:0f:61:
                    ed:db:c2:bf:b2:22:44:52:7d:1a:63:e9:2f:2d:07:
                    6c:a8:d9:48:cf:fc:88:ae:c6:36:ed:fd:4f:06:e6:
                    8e:85:c0:64:5e:a3:7f:35:db:5b:d3:f2:fb:27:6e:
                    db:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4E:EA:1A:8E:0B:D0:05:80:BC:B9:A6:7C:C0:44:6A:11:81:C3:51
            X509v3 Authority Key Identifier:
                keyid:9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233372e302f32342d3234203d3e203238333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:e8:2a:7e:f0:0a:80:92:66:1a:00:af:1d:b2:a9:51:63:05:
         6e:1c:40:8a:1b:5d:91:42:fe:ed:07:8e:85:85:21:91:90:c3:
         d8:67:fd:40:6f:51:72:5e:ba:7a:b2:87:d5:da:38:76:65:d3:
         14:12:48:9b:1b:85:de:0a:98:21:82:ac:c6:f4:9f:09:1c:0f:
         09:af:fd:44:0e:90:4c:bc:bd:eb:87:1a:b9:ad:af:83:db:d9:
         72:34:d2:67:49:2b:15:ea:be:f7:0d:36:67:b8:4a:d8:35:e1:
         de:cf:65:b3:e1:6f:f8:fa:5a:32:56:f6:54:e6:a6:82:21:6f:
         cd:4e:d8:4d:e1:e5:3d:27:77:af:ea:1a:59:74:47:5f:c9:1b:
         ba:37:f3:56:96:d9:a7:8f:f8:70:e6:dc:af:37:4f:6a:22:6f:
         96:79:c1:2c:2a:05:ac:4a:e0:46:d4:4d:24:7c:f4:2f:28:f0:
         05:4a:87:e3:2e:a4:9c:70:85:ea:5d:18:25:a7:c5:5c:a0:b6:
         2e:13:de:5a:d2:f6:32:0b:77:6f:ab:95:49:34:a0:bd:c5:b0:
         b6:04:b2:56:fa:d9:23:52:06:b7:5a:19:fb:70:d5:80:4f:aa:
         8d:fa:e6:ec:91:dc:4a:b1:56:9e:d3:48:7e:e0:63:e0:15:1d:
         c6:c7:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:14 2025 by rpki-client on console.sobornost.net