Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38322e3134342e302f32322d3234203d3e203532343638.roa
File:                     3137302e38322e3134342e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          8eMEAqpzQ5hLfA0xGx4+FEXG83d+OuqIzP9Qi80o+E8=
Subject key identifier:   39:97:AC:26:B6:98:3F:25:A1:1E:4F:17:9D:C5:2E:3D:81:60:99:4F
Certificate issuer:       /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial:       2C1D7ABA0F85F128EB616EC5A18C9D8320B379F9
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38322e3134342e302f32322d3234203d3e203532343638.roa
Signing time:             Thu 03 Apr 2025 16:55:02 +0000
ROA not before:           Thu 03 Apr 2025 16:50:02 +0000
ROA not after:            Thu 02 Apr 2026 16:55:02 +0000
asID:                     52468
IP address blocks:        170.82.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1d:7a:ba:0f:85:f1:28:eb:61:6e:c5:a1:8c:9d:83:20:b3:79:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
        Validity
            Not Before: Apr  3 16:50:02 2025 GMT
            Not After : Apr  2 16:55:02 2026 GMT
        Subject: CN=3997AC26B6983F25A11E4F179DC52E3D8160994F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:f7:6b:3c:76:d9:6b:cb:fa:23:93:28:08:
                    fd:a9:36:55:78:df:97:5a:e9:8b:52:0f:f0:02:c1:
                    b1:d9:90:9a:ad:5b:1e:46:20:26:22:6b:31:3f:23:
                    d7:6a:a5:ce:d2:bc:5f:ea:b9:f7:85:53:d9:25:78:
                    e6:82:23:85:d7:0c:9c:17:89:8c:ea:03:27:e4:e5:
                    91:83:66:8a:5d:3a:1f:90:f1:7f:3b:95:61:b2:b8:
                    d4:39:70:80:66:88:3a:b1:11:5e:2d:fd:fe:90:33:
                    e3:f2:c4:71:09:4b:7b:cf:fd:0b:3b:f4:38:5d:0b:
                    ed:47:9b:37:e4:5a:05:fc:c7:87:cb:9a:53:e5:0e:
                    e3:f3:39:19:bb:f4:07:37:71:b1:e3:a1:2c:a9:f4:
                    c6:c2:87:80:03:30:47:37:0d:f3:3c:b9:f5:cd:da:
                    9b:e8:f7:ed:5e:3f:c2:eb:e0:0a:08:8b:fd:76:d9:
                    7b:fd:cb:8c:0f:86:21:56:6f:ba:14:5b:96:4b:d7:
                    cd:4f:66:5b:87:d4:7c:a9:88:29:98:2f:38:70:53:
                    48:f0:99:4e:b2:09:42:29:9d:ac:03:f6:92:e0:71:
                    5e:a9:8e:05:88:eb:29:7b:3e:97:af:7b:36:00:f7:
                    5a:c6:24:1c:e3:3c:71:77:7e:68:03:76:e5:58:26:
                    12:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:97:AC:26:B6:98:3F:25:A1:1E:4F:17:9D:C5:2E:3D:81:60:99:4F
            X509v3 Authority Key Identifier:
                keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38322e3134342e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:58:b6:d1:4d:a0:87:2f:35:7a:46:88:c0:06:e1:6b:a3:13:
         5f:ac:26:b5:51:58:9e:8f:1b:66:14:23:4b:f2:80:8c:9c:60:
         0e:1a:cb:3d:34:91:4d:cb:64:79:8c:2e:c8:73:5a:61:82:d0:
         b3:58:fb:3e:33:d0:1a:11:39:85:9e:4c:5e:ac:d6:b9:07:72:
         87:21:c8:a3:2e:d4:d5:ba:10:6f:a0:e3:df:a3:31:71:7d:4b:
         4b:aa:ed:c6:66:05:4f:82:61:10:d7:27:4a:e1:0b:11:41:c0:
         e5:43:a0:b7:dd:6a:3b:ff:6c:ce:d5:de:7e:6f:4a:ef:14:e3:
         32:41:15:40:46:8f:6d:18:78:60:13:b3:4a:b2:17:23:6d:4f:
         a5:87:99:30:1a:91:94:44:99:85:48:99:a8:f9:aa:16:7c:81:
         31:28:9d:71:54:66:a1:bf:ce:60:60:03:19:a7:5d:7f:17:bc:
         84:cf:f1:6a:57:c1:e3:89:da:9d:4e:18:23:1d:5a:d3:52:9b:
         a1:4f:96:85:da:a3:d7:34:14:2c:ca:e3:2e:f6:34:44:e8:e9:
         8c:61:d6:96:75:86:77:27:b4:57:be:7b:0f:d1:b3:d5:f7:83:
         6d:ff:e3:40:8e:aa:14:02:13:87:70:ae:aa:c9:83:e9:c4:0b:
         cc:3b:32:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:39 2025 by rpki-client on console.sobornost.net