Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/3138372e34392e3139312e302f32342d3234203d3e20323639393733.roa
File:                     3138372e34392e3139312e302f32342d3234203d3e20323639393733.roa (raw, json)
Hash identifier:          aOl/xqJ8hiZGXmquFS+sh9NIDi8wMrGChveEursvdgs=
Subject key identifier:   1D:E2:BC:B3:28:34:9F:FD:6A:80:34:FF:FA:FE:6D:1F:ED:46:49:6C
Certificate issuer:       /CN=5995D747478C5DCDC0151DBD69361708C3663EEC
Certificate serial:       3E9FAE7084B188A360E1B24E8CD94ABD855B41B4
Authority key identifier: 59:95:D7:47:47:8C:5D:CD:C0:15:1D:BD:69:36:17:08:C3:66:3E:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5995D747478C5DCDC0151DBD69361708C3663EEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/3138372e34392e3139312e302f32342d3234203d3e20323639393733.roa
Signing time:             Mon 24 Mar 2025 17:35:00 +0000
ROA not before:           Mon 24 Mar 2025 17:30:00 +0000
ROA not after:            Mon 23 Mar 2026 17:35:00 +0000
asID:                     269973
IP address blocks:        187.49.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/5995D747478C5DCDC0151DBD69361708C3663EEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/5995D747478C5DCDC0151DBD69361708C3663EEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5995D747478C5DCDC0151DBD69361708C3663EEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9f:ae:70:84:b1:88:a3:60:e1:b2:4e:8c:d9:4a:bd:85:5b:41:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5995D747478C5DCDC0151DBD69361708C3663EEC
        Validity
            Not Before: Mar 24 17:30:00 2025 GMT
            Not After : Mar 23 17:35:00 2026 GMT
        Subject: CN=1DE2BCB328349FFD6A8034FFFAFE6D1FED46496C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5d:ba:ad:06:68:7c:03:d7:7e:2b:b3:e3:8f:
                    e0:2f:94:01:9a:36:1b:45:45:14:38:51:e7:c0:79:
                    db:9e:b2:0c:3e:29:99:38:4c:ff:0a:21:85:45:9a:
                    39:14:92:97:72:e2:14:7a:5c:61:f5:ff:a5:81:de:
                    e4:3c:c4:f1:e9:79:bb:87:48:57:22:31:8e:14:b7:
                    87:8f:4d:c4:f5:9a:d5:80:17:d0:9d:a0:d7:a6:d7:
                    49:6e:0a:66:c2:d5:85:80:47:90:c9:59:6a:94:9b:
                    b3:31:5b:ee:5a:5a:6c:1c:90:38:72:14:7c:0c:a0:
                    e6:ff:72:9c:e1:8a:f7:5a:78:33:9b:28:ef:8d:39:
                    20:09:b5:6f:6f:83:73:fb:86:0a:29:38:10:ef:05:
                    f0:fd:5c:f5:4c:f0:60:8f:d2:7d:00:88:aa:ee:15:
                    aa:f3:f0:28:4e:33:cd:fa:cc:ce:19:8b:56:e4:49:
                    5d:c3:2b:4f:eb:38:92:84:57:a0:f3:af:e0:71:e3:
                    e9:2b:19:a0:4a:99:80:c5:57:e2:2f:a2:47:b0:4a:
                    49:3c:7c:29:c9:7e:c4:f3:97:eb:b0:6d:fc:6d:4d:
                    52:c1:01:54:a7:99:14:15:53:f6:70:62:f5:00:d8:
                    a4:ae:97:3c:b2:f2:f1:90:bb:b1:db:9e:3f:48:f6:
                    82:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E2:BC:B3:28:34:9F:FD:6A:80:34:FF:FA:FE:6D:1F:ED:46:49:6C
            X509v3 Authority Key Identifier:
                keyid:59:95:D7:47:47:8C:5D:CD:C0:15:1D:BD:69:36:17:08:C3:66:3E:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/5995D747478C5DCDC0151DBD69361708C3663EEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5995D747478C5DCDC0151DBD69361708C3663EEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4D647836B8E6046983C7C7DFF49F0F288D6BE2CC2EBEA5DBD736C3EE7B74B12/0/3138372e34392e3139312e302f32342d3234203d3e20323639393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:55:8f:37:2d:76:8f:8e:6c:ab:5f:9d:e5:76:d0:42:57:89:
         1d:80:46:53:45:34:23:1e:cc:1a:1b:49:c1:5a:ba:23:b5:b4:
         44:90:de:a7:b1:91:fa:09:d3:c5:ff:ed:54:a5:61:bc:3f:69:
         b5:f8:75:3f:9e:21:e9:a2:a5:ea:d4:97:f1:e3:dc:a3:ba:66:
         30:19:60:d5:d9:55:99:08:58:47:8c:ef:89:08:df:71:5e:97:
         17:b2:fb:d5:b0:d8:b1:17:ff:cd:80:0f:dc:e4:29:91:3a:a1:
         bf:23:4e:b4:e8:6b:38:d0:e8:a5:29:32:b6:cb:9e:66:2e:cb:
         db:44:07:bc:d2:60:c2:c7:a4:7d:ab:96:fe:0c:ed:47:9d:e3:
         5b:71:5b:bf:50:27:be:51:0b:2c:f8:fe:2f:69:a3:81:90:d1:
         81:6d:10:ab:07:51:62:b3:be:a6:d5:52:c9:9c:c2:b6:ca:93:
         81:d2:97:9a:0e:c6:65:10:e1:25:b4:b5:ec:e0:21:56:7a:fc:
         ff:f4:eb:07:c7:8f:bd:2a:c8:a9:bb:fc:f9:1b:cc:16:52:89:
         eb:04:ff:bb:98:89:60:82:0b:83:e4:1d:41:19:2e:fc:7e:24:
         e6:a7:ec:62:08:74:df:ae:99:7a:c1:b2:20:e6:ed:46:0a:bc:
         ed:0d:9b:b4
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPp+ucISxiKNg4bJOjNlKvYVbQbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk5NUQ3NDc0NzhDNURDREMwMTUxREJENjkzNjE3MDhD
MzY2M0VFQzAeFw0yNTAzMjQxNzMwMDBaFw0yNjAzMjMxNzM1MDBaMDMxMTAvBgNV
BAMTKDFERTJCQ0IzMjgzNDlGRkQ2QTgwMzRGRkZBRkU2RDFGRUQ0NjQ5NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhXbqtBmh8A9d+K7Pjj+AvlAGa
NhtFRRQ4UefAeduesgw+KZk4TP8KIYVFmjkUkpdy4hR6XGH1/6WB3uQ8xPHpebuH
SFciMY4Ut4ePTcT1mtWAF9CdoNem10luCmbC1YWAR5DJWWqUm7MxW+5aWmwckDhy
FHwMoOb/cpzhivdaeDObKO+NOSAJtW9vg3P7hgopOBDvBfD9XPVM8GCP0n0AiKru
Farz8ChOM836zM4Zi1bkSV3DK0/rOJKEV6Dzr+Bx4+krGaBKmYDFV+IvokewSkk8
fCnJfsTzl+uwbfxtTVLBAVSnmRQVU/ZwYvUA2KSulzyy8vGQu7Hbnj9I9oJRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUHeK8syg0n/1qgDT/+v5tH+1GSWwwHwYDVR0j
BBgwFoAUWZXXR0eMXc3AFR29aTYXCMNmPuwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENEQ2NDc4MzZCOEU2MDQ2OTgzQzdDN0RGRjQ5RjBGMjg4
RDZCRTJDQzJFQkVBNURCRDczNkMzRUU3Qjc0QjEyLzAvNTk5NUQ3NDc0NzhDNURD
REMwMTUxREJENjkzNjE3MDhDMzY2M0VFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OTk1RDc0NzQ3OEM1RENEQzAx
NTFEQkQ2OTM2MTcwOEMzNjYzRUVDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDRENjQ3ODM2QjhFNjA0Njk4M0M3QzdERkY0OUYwRjI4OEQ2QkUyQ0My
RUJFQTVEQkQ3MzZDM0VFN0I3NEIxMi8wLzMxMzgzNzJlMzQzOTJlMzEzOTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzkzNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuzG/
MA0GCSqGSIb3DQEBCwUAA4IBAQAoVY83LXaPjmyrX53ldtBCV4kdgEZTRTQjHswa
G0nBWrojtbREkN6nsZH6CdPF/+1UpWG8P2m1+HU/niHpoqXq1Jfx49yjumYwGWDV
2VWZCFhHjO+JCN9xXpcXsvvVsNixF//NgA/c5CmROqG/I0606Gs40OilKTK2y55m
LsvbRAe80mDCx6R9q5b+DO1HneNbcVu/UCe+UQss+P4vaaOBkNGBbRCrB1Fis76m
1VLJnMK2ypOB0peaDsZlEOEltLXs4CFWevz/9OsHx4+9Ksipu/z5G8wWUonrBP+7
mIlggguD5B1BGS78fiTmp+xiCHTfrpl6wbIg5u1GCrztDZu0
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:20 2025 by rpki-client on console.sobornost.net