Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e3132342e36302f33302d3330203d3e20323730313036.roa
File:                     3138312e3230392e3132342e36302f33302d3330203d3e20323730313036.roa (raw, json)
Hash identifier:          JrZfgpyiooVh+jqHEfK78UGvzE1TXsuPJ9APiN963zg=
Subject key identifier:   6C:E4:05:97:AD:B9:B5:F7:EF:65:CB:D2:A4:C9:17:F0:CC:8B:4B:9B
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       579C84643D34D5E01BEFF2FA33A0C10200A22139
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e3132342e36302f33302d3330203d3e20323730313036.roa
Signing time:             Sat 19 Apr 2025 14:05:01 +0000
ROA not before:           Sat 19 Apr 2025 14:00:01 +0000
ROA not after:            Sat 18 Apr 2026 14:05:01 +0000
asID:                     270106
IP address blocks:        181.209.124.60/30 maxlen: 30

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9c:84:64:3d:34:d5:e0:1b:ef:f2:fa:33:a0:c1:02:00:a2:21:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Apr 19 14:00:01 2025 GMT
            Not After : Apr 18 14:05:01 2026 GMT
        Subject: CN=6CE40597ADB9B5F7EF65CBD2A4C917F0CC8B4B9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8b:01:3c:fb:42:1a:7b:cd:3e:dd:f5:21:0d:
                    bc:03:2a:f5:26:d1:52:3e:7d:aa:76:9e:1e:7c:1e:
                    d9:b2:36:67:6b:c8:42:c5:41:ae:66:07:20:68:38:
                    99:67:65:ab:22:20:dd:c9:9f:48:a2:b1:37:3b:2e:
                    36:d3:5a:dc:ec:ef:31:34:0f:3b:f3:44:00:01:83:
                    ac:28:a9:84:24:f2:71:a7:8c:11:ef:0b:44:b1:7a:
                    e5:87:b1:03:38:2b:e3:47:14:be:d8:08:e4:16:0d:
                    5e:1d:a7:98:fa:55:bd:a5:96:98:89:24:61:ca:55:
                    a4:cd:a5:f1:69:d7:45:53:d1:25:1d:11:89:cb:9b:
                    29:96:67:cf:b4:02:6c:45:38:6e:07:7c:43:7c:31:
                    be:78:e5:2f:71:22:ee:d9:9a:86:3a:de:5f:dc:c1:
                    7d:af:2f:27:61:9f:af:87:bd:80:0f:00:85:ca:92:
                    69:ad:47:2d:e7:af:7c:83:f5:4a:4b:a1:bb:97:18:
                    47:86:b1:e8:a6:20:6b:cf:10:04:ff:8c:1e:98:c2:
                    18:79:ff:48:23:06:cd:c4:fb:42:a8:02:b7:ef:b3:
                    05:5b:d8:9f:fd:4c:aa:cf:2e:53:93:02:5b:d1:0d:
                    f8:da:49:3c:fa:0c:85:13:ab:68:db:21:35:9b:8f:
                    50:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E4:05:97:AD:B9:B5:F7:EF:65:CB:D2:A4:C9:17:F0:CC:8B:4B:9B
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/3138312e3230392e3132342e36302f33302d3330203d3e20323730313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.124.60/30

    Signature Algorithm: sha256WithRSAEncryption
         41:68:58:ba:27:7d:46:68:ed:73:49:a3:db:2d:e4:d9:e8:bb:
         1b:47:f2:73:9a:72:d1:5b:72:7b:bc:af:8e:15:23:8c:ec:bd:
         15:ec:46:41:41:4a:84:48:db:2d:46:d0:4a:8c:f0:e5:f2:4a:
         1e:98:87:6d:34:bf:6f:61:7b:a0:28:db:1c:3c:1b:15:e6:17:
         e7:e8:78:31:3f:16:1f:c8:9b:62:c8:df:77:2d:fb:32:56:20:
         37:19:04:bc:cd:70:4d:0b:67:be:bb:af:9a:a6:a1:ef:6e:cb:
         65:5b:59:4a:d0:74:78:b5:e3:38:71:39:94:e0:65:fd:43:15:
         5f:58:17:f5:28:19:c0:d6:e6:31:d9:b4:7a:a0:db:c1:2d:97:
         7b:16:8e:5d:66:74:81:be:71:b5:d5:c1:e0:5f:3b:c1:7d:3f:
         83:e5:f9:7a:17:33:8d:b1:16:51:cc:a1:4b:ad:23:b3:35:01:
         d1:19:da:2c:6c:63:88:47:39:73:9e:62:75:91:44:5d:0c:e9:
         f7:79:d8:dd:78:14:aa:86:15:98:69:b2:f6:f2:5d:ab:ca:c5:
         70:44:dd:4b:4e:96:aa:50:fa:ab:3b:98:ab:60:39:45:70:af:
         31:27:58:7d:8d:33:e3:00:c1:0e:e6:94:9f:09:68:e2:0a:cb:
         6c:46:e0:67
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUV5yEZD001eAb7/L6M6DBAgCiITkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVDOTYzMkMyQkFGNENENDc1NERBNkI0NDYxMTZDNzBG
RUY0RDI2NzAeFw0yNTA0MTkxNDAwMDFaFw0yNjA0MTgxNDA1MDFaMDMxMTAvBgNV
BAMTKDZDRTQwNTk3QURCOUI1RjdFRjY1Q0JEMkE0QzkxN0YwQ0M4QjRCOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdiwE8+0Iae80+3fUhDbwDKvUm
0VI+fap2nh58HtmyNmdryELFQa5mByBoOJlnZasiIN3Jn0iisTc7LjbTWtzs7zE0
DzvzRAABg6woqYQk8nGnjBHvC0SxeuWHsQM4K+NHFL7YCOQWDV4dp5j6Vb2llpiJ
JGHKVaTNpfFp10VT0SUdEYnLmymWZ8+0AmxFOG4HfEN8Mb545S9xIu7ZmoY63l/c
wX2vLydhn6+HvYAPAIXKkmmtRy3nr3yD9UpLobuXGEeGseimIGvPEAT/jB6Ywhh5
/0gjBs3E+0KoArfvswVb2J/9TKrPLlOTAlvRDfjaSTz6DIUTq2jbITWbj1D5AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUbOQFl625tffvZcvSpMkX8MyLS5swHwYDVR0j
BBgwFoAUBcljLCuvTNR1Taa0RhFscP700mcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQTAwNTNEQTYwMzg1MkFGNjFDODQ0MjRGQkZGOUFDOEE2
MzI4ODcxODk5NkM2MzNCNjMyOUE4QzkzQzA2NzFFLzAvMDVDOTYzMkMyQkFGNENE
NDc1NERBNkI0NDYxMTZDNzBGRUY0RDI2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNUM5NjMyQzJCQUY0Q0Q0NzU0
REE2QjQ0NjExNkM3MEZFRjREMjY3LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkEwMDUzREE2MDM4NTJBRjYxQzg0NDI0RkJGRjlBQzhBNjMyODg3MTg5
OTZDNjMzQjYzMjlBOEM5M0MwNjcxRS8wLzMxMzgzMTJlMzIzMDM5MmUzMTMyMzQy
ZTM2MzAyZjMzMzAyZDMzMzAyMDNkM2UyMDMyMzczMDMxMzAzNi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMF
ArXRfDwwDQYJKoZIhvcNAQELBQADggEBAEFoWLonfUZo7XNJo9st5NnouxtH8nOa
ctFbcnu8r44VI4zsvRXsRkFBSoRI2y1G0EqM8OXySh6Yh200v29he6Ao2xw8GxXm
F+foeDE/Fh/Im2LI33ct+zJWIDcZBLzNcE0LZ767r5qmoe9uy2VbWUrQdHi14zhx
OZTgZf1DFV9YF/UoGcDW5jHZtHqg28Etl3sWjl1mdIG+cbXVweBfO8F9P4Pl+XoX
M42xFlHMoUutI7M1AdEZ2ixsY4hHOXOeYnWRRF0M6fd52N14FKqGFZhpsvbyXavK
xXBE3UtOlqpQ+qs7mKtgOUVwrzEnWH2NM+MAwQ7mlJ8JaOIKy2xG4Gc=
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:07 2025 by rpki-client on console.sobornost.net