Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37362e302f32342d3234203d3e20323731393137.roa
File:                     3138312e3138392e37362e302f32342d3234203d3e20323731393137.roa (raw, json)
Hash identifier:          Ru+/L7vF6+bTBi4BpAmIGCmK//veqlhVpcRWv/q93Ao=
Subject key identifier:   3D:1E:52:8D:9E:C1:F7:89:32:AB:6D:67:6A:8B:F1:AF:F4:D3:74:F4
Certificate issuer:       /CN=1A90820403E94C622A991DBEB877EB7197198430
Certificate serial:       663E8639831EEC19633CF295FBF028EF3284D61A
Authority key identifier: 1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37362e302f32342d3234203d3e20323731393137.roa
Signing time:             Fri 25 Apr 2025 15:16:05 +0000
ROA not before:           Fri 25 Apr 2025 15:11:05 +0000
ROA not after:            Fri 24 Apr 2026 15:16:05 +0000
asID:                     271917
IP address blocks:        181.189.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3e:86:39:83:1e:ec:19:63:3c:f2:95:fb:f0:28:ef:32:84:d6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90820403E94C622A991DBEB877EB7197198430
        Validity
            Not Before: Apr 25 15:11:05 2025 GMT
            Not After : Apr 24 15:16:05 2026 GMT
        Subject: CN=3D1E528D9EC1F78932AB6D676A8BF1AFF4D374F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:f8:d5:7a:40:a8:36:94:4a:c1:4d:3e:fa:
                    c7:81:65:dc:74:e5:f9:10:0e:e3:29:57:c9:ff:7b:
                    e0:9a:4a:51:cc:e9:71:bc:3f:4b:71:b1:76:d8:bb:
                    00:8e:2d:4f:36:df:8b:44:09:c0:ee:e9:25:41:e2:
                    dc:26:c4:10:20:75:f6:1b:a8:70:ff:b3:97:28:6b:
                    b6:4a:05:a5:67:57:b1:f5:39:01:7a:3d:1f:8b:05:
                    92:9a:a8:37:b6:cc:f3:3c:65:9b:d8:9b:0b:51:53:
                    6c:20:57:bf:ee:1c:bb:90:e9:4c:39:77:bc:61:9f:
                    01:28:7f:2f:21:4c:11:c5:16:06:9f:ad:b5:5e:5d:
                    fd:a0:19:98:af:ef:7d:3c:4a:2c:f7:35:2c:9a:ec:
                    86:c1:73:ec:8e:87:a6:8f:21:4e:26:9f:6d:bc:da:
                    8d:b6:27:d6:83:9d:27:8a:5a:2d:b3:e5:27:88:1d:
                    b0:23:1e:ee:e5:19:a2:c7:b9:a1:46:f3:4a:46:eb:
                    04:11:11:d2:6a:8d:43:ff:8b:41:05:82:f3:37:68:
                    58:bd:49:1c:58:11:b9:74:7e:72:92:4a:71:47:a2:
                    5f:81:f2:0e:57:6d:e5:bf:a7:0d:cf:d6:54:76:6b:
                    20:34:28:eb:a7:1b:c1:38:e5:0e:6c:6a:95:f3:36:
                    4d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1E:52:8D:9E:C1:F7:89:32:AB:6D:67:6A:8B:F1:AF:F4:D3:74:F4
            X509v3 Authority Key Identifier:
                keyid:1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37362e302f32342d3234203d3e20323731393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:81:c9:a5:8e:26:b3:8e:e5:bc:7f:c9:ff:15:89:f9:19:b3:
         fe:52:ac:9e:ba:be:25:13:25:2e:b7:a7:6e:23:65:0d:bc:aa:
         7c:1e:76:4e:91:ff:fe:4e:4a:b1:31:cb:84:23:d7:a3:3a:87:
         47:bf:ea:98:aa:b5:8d:b6:d1:e2:31:4e:fb:27:05:52:33:d0:
         11:d2:82:ee:76:d7:9f:61:c1:1b:5f:3d:cf:04:3f:53:c7:40:
         6d:a0:dd:b9:fb:91:b8:bd:fb:43:8c:35:2a:93:34:03:8a:ff:
         f7:77:4b:f9:c1:47:ac:d5:7f:65:2d:73:ba:d5:bb:10:64:d1:
         02:f3:6b:4d:c6:6e:c3:91:28:c5:58:af:d5:a4:54:89:7c:77:
         21:87:ff:3f:82:b9:07:f4:a7:e7:65:56:bf:8a:c7:58:77:7c:
         45:ee:d0:6f:59:99:2a:c8:75:e2:ef:c7:28:07:f4:99:85:7f:
         f0:f2:85:a3:fa:d2:f2:f7:56:f4:81:f1:e9:39:6f:9b:78:52:
         92:bd:40:f7:2d:77:a5:8a:a9:b6:fd:79:30:bc:1e:11:3c:53:
         47:81:ed:e3:c7:5b:72:70:a2:54:a1:e9:f6:ba:a7:17:e6:4b:
         43:b0:14:28:da:f6:40:ff:e8:97:a2:1b:de:8d:f6:e1:13:ab:
         fc:fe:9d:0c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZj6GOYMe7BljPPKV+/Ao7zKE1howDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5MDgyMDQwM0U5NEM2MjJBOTkxREJFQjg3N0VCNzE5
NzE5ODQzMDAeFw0yNTA0MjUxNTExMDVaFw0yNjA0MjQxNTE2MDVaMDMxMTAvBgNV
BAMTKDNEMUU1MjhEOUVDMUY3ODkzMkFCNkQ2NzZBOEJGMUFGRjREMzc0RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5fjVekCoNpRKwU0++seBZdx0
5fkQDuMpV8n/e+CaSlHM6XG8P0txsXbYuwCOLU8234tECcDu6SVB4twmxBAgdfYb
qHD/s5coa7ZKBaVnV7H1OQF6PR+LBZKaqDe2zPM8ZZvYmwtRU2wgV7/uHLuQ6Uw5
d7xhnwEofy8hTBHFFgafrbVeXf2gGZiv7308Siz3NSya7IbBc+yOh6aPIU4mn228
2o22J9aDnSeKWi2z5SeIHbAjHu7lGaLHuaFG80pG6wQREdJqjUP/i0EFgvM3aFi9
SRxYEbl0fnKSSnFHol+B8g5XbeW/pw3P1lR2ayA0KOunG8E45Q5sapXzNk2xAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUPR5SjZ7B94kyq21naovxr/TTdPQwHwYDVR0j
BBgwFoAUGpCCBAPpTGIqmR2+uHfrcZcZhDAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQURFMDk1QTFFMjg1QUFCRThDMTkxNjI1QjgzQzBEQTA4
QjUxNEEzQkI3QjZFOURCNjVENEVGQjNCQkVGRTk2LzAvMUE5MDgyMDQwM0U5NEM2
MjJBOTkxREJFQjg3N0VCNzE5NzE5ODQzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQTkwODIwNDAzRTk0QzYyMkE5
OTFEQkVCODc3RUI3MTk3MTk4NDMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREFERTA5NUExRTI4NUFBQkU4QzE5MTYyNUI4M0MwREEwOEI1MTRBM0JC
N0I2RTlEQjY1RDRFRkIzQkJFRkU5Ni8wLzMxMzgzMTJlMzEzODM5MmUzNzM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzkzMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtb1M
MA0GCSqGSIb3DQEBCwUAA4IBAQAQgcmljiazjuW8f8n/FYn5GbP+Uqyeur4lEyUu
t6duI2UNvKp8HnZOkf/+TkqxMcuEI9ejOodHv+qYqrWNttHiMU77JwVSM9AR0oLu
dtefYcEbXz3PBD9Tx0BtoN25+5G4vftDjDUqkzQDiv/3d0v5wUes1X9lLXO61bsQ
ZNEC82tNxm7DkSjFWK/VpFSJfHchh/8/grkH9KfnZVa/isdYd3xF7tBvWZkqyHXi
78coB/SZhX/w8oWj+tLy91b0gfHpOW+beFKSvUD3LXeliqm2/XkwvB4RPFNHge3j
x1tycKJUoen2uqcX5ktDsBQo2vZA/+iXohvejfbhE6v8/p0M
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net