Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233392e302f32342d3234203d3e203238333937.roa
File:                     3133312e302e3233392e302f32342d3234203d3e203238333937.roa (raw, json)
Hash identifier:          fCQeh2xMJ5d4fJKEj+bKdxX5UdmUy3zprcvgLIHcer4=
Subject key identifier:   71:15:D6:5E:EF:25:D1:9C:8F:4A:52:DA:2A:8A:73:F0:CF:FF:F0:9F
Certificate issuer:       /CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
Certificate serial:       4878166D17631CE623C2C2EC3C65CD7096D76710
Authority key identifier: 9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233392e302f32342d3234203d3e203238333937.roa
Signing time:             Mon 21 Apr 2025 22:45:00 +0000
ROA not before:           Mon 21 Apr 2025 22:40:00 +0000
ROA not after:            Mon 20 Apr 2026 22:45:00 +0000
asID:                     28397
IP address blocks:        131.0.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:78:16:6d:17:63:1c:e6:23:c2:c2:ec:3c:65:cd:70:96:d7:67:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9052722E12F3155FAC4A9EBDE7D487355CF0BE
        Validity
            Not Before: Apr 21 22:40:00 2025 GMT
            Not After : Apr 20 22:45:00 2026 GMT
        Subject: CN=7115D65EEF25D19C8F4A52DA2A8A73F0CFFFF09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:da:be:c6:55:47:3a:d7:04:b1:7b:d4:7a:d9:
                    b3:22:70:03:33:5d:70:97:c7:1d:18:02:f8:b8:1c:
                    7e:09:71:6f:67:6b:68:f8:2d:01:de:8c:a1:f7:9f:
                    f0:ab:17:b5:ef:24:91:c6:cc:7c:00:9e:92:21:df:
                    0d:0a:d3:ca:14:19:1f:9f:7d:f5:dc:11:01:1a:66:
                    fc:d2:f2:2f:22:71:03:20:35:8e:f4:6b:9d:0c:71:
                    5c:8a:79:b3:03:83:36:86:bf:6f:f9:af:95:50:69:
                    5b:d3:37:5b:36:22:39:f5:6e:23:5f:e0:0d:50:69:
                    3c:b8:e0:f9:1b:5a:42:a0:d4:fd:d4:68:ad:2e:8c:
                    b0:38:11:c8:a4:03:22:f5:cb:9a:c9:eb:44:00:a7:
                    f8:92:9c:ba:af:fb:5f:28:ab:b5:42:7a:97:ad:d8:
                    39:47:da:24:5c:bb:7b:ed:48:98:5a:18:a2:82:c3:
                    fc:4f:94:8b:07:cf:a7:70:e3:98:c3:54:53:b8:b5:
                    2f:7d:38:33:26:71:6e:b9:6b:4c:2d:f7:c9:2d:36:
                    38:48:f5:6a:39:b2:d2:3d:5d:38:bb:31:29:32:21:
                    95:cc:e5:8b:e8:a2:b3:16:80:16:24:db:2a:59:30:
                    21:d4:83:d8:9c:7d:fb:6b:d4:67:a3:49:7f:9e:42:
                    4f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:15:D6:5E:EF:25:D1:9C:8F:4A:52:DA:2A:8A:73:F0:CF:FF:F0:9F
            X509v3 Authority Key Identifier:
                keyid:9D:90:52:72:2E:12:F3:15:5F:AC:4A:9E:BD:E7:D4:87:35:5C:F0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D9052722E12F3155FAC4A9EBDE7D487355CF0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B63CFFCB69ED716B1D7E62CB568B976D6459E8AED489C5B237F111083A422005/0/3133312e302e3233392e302f32342d3234203d3e203238333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:0d:fe:47:f7:be:87:b1:8f:d2:98:43:d4:de:b3:af:2a:d2:
         70:55:73:f0:0f:d5:e1:17:41:cd:30:49:73:b0:65:fa:fa:f4:
         ba:59:9f:8d:3c:29:b9:67:23:0b:a9:6f:8a:38:a5:be:d6:03:
         dd:c8:2e:50:c1:b8:79:93:dd:02:64:e2:80:68:32:fb:32:8b:
         6a:84:bc:7c:bb:bc:48:08:50:90:a0:b9:d2:77:1a:8c:4d:24:
         1b:7e:4e:d9:2e:f6:d1:20:36:53:b4:6c:ee:0d:44:6a:3c:71:
         53:2a:6b:f9:d0:a0:aa:19:1a:ac:ae:09:af:e1:10:c3:6f:54:
         bc:2f:04:f0:02:cc:75:02:72:3e:5d:db:7c:18:cc:6f:f7:58:
         a3:a1:1a:45:af:8b:88:8e:5e:d2:ca:2c:83:62:89:b6:b0:16:
         e2:9f:62:b8:db:95:ce:6e:8f:63:49:e6:86:71:bb:aa:2c:52:
         e8:b3:88:f7:f5:95:12:0d:8c:ec:1a:bf:aa:e2:79:a4:6d:f4:
         46:c0:b4:f6:a5:c5:c6:45:3f:d4:61:5e:a9:6b:f5:36:75:19:
         8d:ff:30:da:9c:2e:01:34:eb:32:8f:08:b7:2b:54:8e:8d:02:
         bd:9d:e2:55:50:78:1b:28:2c:25:3a:4c:29:a8:47:2f:06:fe:
         a0:4e:f9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:14 2025 by rpki-client on console.sobornost.net