Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37362e302f32322d3232203d3e20323731393137.roa
File:                     3138312e3138392e37362e302f32322d3232203d3e20323731393137.roa (raw, json)
Hash identifier:          6dIW7MxWcraHMElvnb37zWPUm1bfrSKRAjFS6xdEpg0=
Subject key identifier:   E8:27:6C:0C:43:98:15:92:7F:9D:71:6A:D1:92:2D:F4:A8:90:6A:F0
Certificate issuer:       /CN=1A90820403E94C622A991DBEB877EB7197198430
Certificate serial:       6E24EDF91098380035CE8DAD2AFABC5CE20AE6E0
Authority key identifier: 1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37362e302f32322d3232203d3e20323731393137.roa
Signing time:             Fri 25 Apr 2025 15:16:05 +0000
ROA not before:           Fri 25 Apr 2025 15:11:05 +0000
ROA not after:            Fri 24 Apr 2026 15:16:05 +0000
asID:                     271917
IP address blocks:        181.189.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:24:ed:f9:10:98:38:00:35:ce:8d:ad:2a:fa:bc:5c:e2:0a:e6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90820403E94C622A991DBEB877EB7197198430
        Validity
            Not Before: Apr 25 15:11:05 2025 GMT
            Not After : Apr 24 15:16:05 2026 GMT
        Subject: CN=E8276C0C439815927F9D716AD1922DF4A8906AF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1f:3c:aa:e1:97:30:ce:8c:a1:a2:a3:fc:59:
                    69:13:3e:43:cf:47:ca:c7:15:e6:37:4c:11:a1:68:
                    1f:20:2a:74:dd:4c:79:2a:ae:96:b8:a1:71:36:c0:
                    7a:b9:00:0e:8a:ea:c1:75:74:c6:ea:61:f1:a2:ed:
                    95:65:1d:f5:1a:04:53:da:aa:8a:23:cc:8a:34:94:
                    13:c1:84:4b:7e:94:f7:86:5f:d5:8a:0e:fd:6f:ae:
                    94:e0:84:9f:75:0e:85:e0:6a:6d:93:7b:23:1a:51:
                    e9:a4:66:43:6f:d8:61:25:40:61:8a:68:e2:24:18:
                    03:60:33:55:31:9c:e3:d1:f4:99:f9:31:be:d1:8e:
                    d2:fb:ab:bc:53:97:93:f1:0a:c3:c5:55:30:1d:0a:
                    f9:70:2a:a3:94:ca:1e:8c:25:99:45:ce:a2:cf:35:
                    41:b2:4c:4f:b8:b2:e1:cb:5c:56:9a:ad:e0:e7:04:
                    59:a1:67:54:85:96:03:46:2a:dd:cf:43:5b:15:56:
                    03:f8:c5:2e:5f:ef:b7:0f:28:2a:c4:27:43:af:27:
                    6e:7e:55:67:d1:33:f0:21:81:61:af:98:22:67:12:
                    ba:1a:f5:40:1e:03:e4:4b:a6:3d:d4:67:c3:0f:2d:
                    09:df:0a:f4:48:e6:b0:b7:a2:c2:5c:a9:d1:bf:a0:
                    57:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:27:6C:0C:43:98:15:92:7F:9D:71:6A:D1:92:2D:F4:A8:90:6A:F0
            X509v3 Authority Key Identifier:
                keyid:1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37362e302f32322d3232203d3e20323731393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:b5:34:d6:55:be:57:41:f5:db:d8:0f:be:90:ba:c5:21:1b:
         f3:85:a0:d5:51:fd:8a:18:db:00:a6:9e:98:4e:61:8a:26:e8:
         db:81:6c:5d:e5:f4:16:10:d5:71:34:26:c6:ca:5a:09:9a:3e:
         4a:ea:39:04:50:db:01:fc:5e:d3:b8:3f:ec:25:71:2c:ea:a7:
         36:d2:7c:92:94:f8:b0:bb:5e:32:66:fa:40:ef:6c:7b:5e:99:
         2d:ff:5a:ef:b7:b0:9c:d7:d8:90:4b:2b:c1:1b:7f:a2:a7:c3:
         94:67:e1:3a:44:41:d7:eb:82:3b:ef:01:5e:16:ea:57:5b:59:
         f8:a7:00:e7:50:ce:8d:ec:5a:27:25:1d:1e:74:8e:bc:03:b2:
         59:10:88:a3:0c:30:4d:c5:65:c9:9b:2a:24:66:b9:39:a3:ef:
         a4:bd:8e:44:43:5f:85:37:2c:cd:d3:b3:b7:30:fc:b1:87:c3:
         84:25:32:4d:e2:72:cf:ea:54:0b:08:72:59:66:63:e4:70:4e:
         0c:ee:8a:16:59:ed:45:13:59:ff:9e:bd:c9:fb:67:e9:e6:5a:
         9b:c3:23:90:7d:0c:18:af:1c:98:a7:99:ef:91:c0:ad:88:79:
         c4:ed:ac:37:a9:1e:75:b8:36:a4:e2:72:e9:8c:7e:a4:12:88:
         c4:42:ab:13
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbiTt+RCYOAA1zo2tKvq8XOIK5uAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5MDgyMDQwM0U5NEM2MjJBOTkxREJFQjg3N0VCNzE5
NzE5ODQzMDAeFw0yNTA0MjUxNTExMDVaFw0yNjA0MjQxNTE2MDVaMDMxMTAvBgNV
BAMTKEU4Mjc2QzBDNDM5ODE1OTI3RjlENzE2QUQxOTIyREY0QTg5MDZBRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXHzyq4ZcwzoyhoqP8WWkTPkPP
R8rHFeY3TBGhaB8gKnTdTHkqrpa4oXE2wHq5AA6K6sF1dMbqYfGi7ZVlHfUaBFPa
qoojzIo0lBPBhEt+lPeGX9WKDv1vrpTghJ91DoXgam2TeyMaUemkZkNv2GElQGGK
aOIkGANgM1UxnOPR9Jn5Mb7RjtL7q7xTl5PxCsPFVTAdCvlwKqOUyh6MJZlFzqLP
NUGyTE+4suHLXFaareDnBFmhZ1SFlgNGKt3PQ1sVVgP4xS5f77cPKCrEJ0OvJ25+
VWfRM/AhgWGvmCJnEroa9UAeA+RLpj3UZ8MPLQnfCvRI5rC3osJcqdG/oFeXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU6CdsDEOYFZJ/nXFq0ZIt9KiQavAwHwYDVR0j
BBgwFoAUGpCCBAPpTGIqmR2+uHfrcZcZhDAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQURFMDk1QTFFMjg1QUFCRThDMTkxNjI1QjgzQzBEQTA4
QjUxNEEzQkI3QjZFOURCNjVENEVGQjNCQkVGRTk2LzAvMUE5MDgyMDQwM0U5NEM2
MjJBOTkxREJFQjg3N0VCNzE5NzE5ODQzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQTkwODIwNDAzRTk0QzYyMkE5
OTFEQkVCODc3RUI3MTk3MTk4NDMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREFERTA5NUExRTI4NUFBQkU4QzE5MTYyNUI4M0MwREEwOEI1MTRBM0JC
N0I2RTlEQjY1RDRFRkIzQkJFRkU5Ni8wLzMxMzgzMTJlMzEzODM5MmUzNzM2MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMxMzkzMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCtb1M
MA0GCSqGSIb3DQEBCwUAA4IBAQBgtTTWVb5XQfXb2A++kLrFIRvzhaDVUf2KGNsA
pp6YTmGKJujbgWxd5fQWENVxNCbGyloJmj5K6jkEUNsB/F7TuD/sJXEs6qc20nyS
lPiwu14yZvpA72x7Xpkt/1rvt7Cc19iQSyvBG3+ip8OUZ+E6REHX64I77wFeFupX
W1n4pwDnUM6N7FonJR0edI68A7JZEIijDDBNxWXJmyokZrk5o++kvY5EQ1+FNyzN
07O3MPyxh8OEJTJN4nLP6lQLCHJZZmPkcE4M7ooWWe1FE1n/nr3J+2fp5lqbwyOQ
fQwYrxyYp5nvkcCtiHnE7aw3qR51uDak4nLpjH6kEojEQqsT
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net