Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38322e3134342e302f32322d3234203d3e203631353132.roa
File:                     3137302e38322e3134342e302f32322d3234203d3e203631353132.roa (raw, json)
Hash identifier:          kmTf4naADu/mGFVaMLD/ubh49jIZMwTdbl4Zbs/E25U=
Subject key identifier:   DC:73:1E:AF:E1:22:6E:BC:40:E5:51:26:83:9D:0D:DF:27:BD:F7:45
Certificate issuer:       /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial:       487803AAF95D42DA183DF2FF07FD3D6F6B8400DC
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38322e3134342e302f32322d3234203d3e203631353132.roa
Signing time:             Thu 03 Apr 2025 16:45:00 +0000
ROA not before:           Thu 03 Apr 2025 16:40:00 +0000
ROA not after:            Thu 02 Apr 2026 16:45:00 +0000
asID:                     61512
IP address blocks:        170.82.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:78:03:aa:f9:5d:42:da:18:3d:f2:ff:07:fd:3d:6f:6b:84:00:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
        Validity
            Not Before: Apr  3 16:40:00 2025 GMT
            Not After : Apr  2 16:45:00 2026 GMT
        Subject: CN=DC731EAFE1226EBC40E55126839D0DDF27BDF745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:23:d0:86:87:ad:26:ba:55:00:41:56:8a:0f:
                    67:0a:63:1a:ec:5f:3e:81:53:1d:55:8d:ea:6f:82:
                    1d:ae:46:62:dd:80:4a:fd:4a:be:4c:ea:7d:3d:d2:
                    c4:98:74:09:dc:bb:be:47:0a:72:e3:aa:79:fc:5f:
                    ed:f6:4d:ba:0b:fc:94:45:ea:a4:ab:74:5b:db:34:
                    c7:6e:c8:46:87:38:c8:c8:02:3d:e5:90:28:3b:c6:
                    0b:8e:63:a0:60:a4:23:e0:8f:ba:69:12:89:68:17:
                    da:e2:a9:e7:9d:32:a9:a9:c6:57:20:7e:88:1e:6b:
                    40:4c:a6:b0:eb:fc:df:4c:6a:97:de:bd:42:2e:ec:
                    13:a5:4e:29:58:c4:ed:c0:05:c3:9f:e7:dd:2f:09:
                    4e:1d:e7:ea:a9:9b:bd:38:86:3c:da:f5:19:f3:35:
                    a4:2a:ae:88:16:3f:bd:c2:90:0f:02:58:2f:4b:fc:
                    15:5c:99:b3:fc:d1:01:a0:93:74:70:48:48:7f:c7:
                    78:30:46:4e:85:9a:37:21:99:c5:5d:1f:6f:dc:91:
                    13:0a:4a:58:80:8d:90:43:5d:a8:71:ab:43:bc:df:
                    15:fe:f6:a5:06:cf:ce:8d:18:1b:7c:72:23:4b:cc:
                    3a:9e:84:f6:71:64:ee:51:c1:3c:c5:00:86:8e:63:
                    1c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:73:1E:AF:E1:22:6E:BC:40:E5:51:26:83:9D:0D:DF:27:BD:F7:45
            X509v3 Authority Key Identifier:
                keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38322e3134342e302f32322d3234203d3e203631353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:e7:cf:cc:ee:6f:fc:94:71:62:06:19:cf:54:3d:da:4f:eb:
         9a:43:55:58:a1:5d:9f:de:0f:ce:e1:85:59:2f:ae:1b:1c:65:
         f1:72:20:de:da:60:49:28:cd:b9:24:b8:9d:f1:cb:c3:21:f9:
         33:d2:e5:10:7a:fe:e5:7d:49:92:31:ba:5b:b5:33:54:ce:60:
         eb:1f:ea:99:7d:89:a3:16:3e:6c:d1:d9:88:6d:31:85:c8:21:
         5d:98:ac:49:a3:a1:d0:23:03:31:16:6b:10:f8:fd:6f:29:db:
         23:9b:0c:ac:88:28:5f:07:b6:03:c9:4c:3e:a0:89:83:67:d7:
         51:98:66:25:2d:30:79:0e:28:28:6e:38:5f:6f:59:7d:8d:b4:
         68:26:32:34:2c:2b:02:b1:65:51:5e:be:76:0a:fd:3e:3b:13:
         bd:39:40:77:a8:7a:f9:18:c2:21:dc:a4:21:27:64:4c:55:4d:
         7f:eb:c4:db:16:4e:e7:5b:e0:ee:27:59:26:49:e2:d6:e1:ef:
         e8:27:ea:32:dc:09:08:97:c0:50:b1:79:71:3f:6c:65:92:0e:
         5c:bd:d5:78:31:13:e0:25:c3:0c:c2:ed:d2:cb:be:8d:a9:b4:
         5d:a1:5c:52:4e:fe:23:0e:da:42:49:6a:3e:b9:12:34:07:cf:
         71:b9:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:39 2025 by rpki-client on console.sobornost.net