Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37372e302f32342d3234203d3e20323731393137.roa
File:                     3138312e3138392e37372e302f32342d3234203d3e20323731393137.roa (raw, json)
Hash identifier:          6ckZyjGYeRm4Cgm2mtdy45h5Sa6pV00JwURXJjIfbO4=
Subject key identifier:   13:A3:0C:CC:CC:8D:8A:05:C0:A9:6A:7C:C1:E7:35:18:12:3D:79:A2
Certificate issuer:       /CN=1A90820403E94C622A991DBEB877EB7197198430
Certificate serial:       68D043FE6CBED4A8962508139EA319A715CBA57F
Authority key identifier: 1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37372e302f32342d3234203d3e20323731393137.roa
Signing time:             Fri 25 Apr 2025 15:16:04 +0000
ROA not before:           Fri 25 Apr 2025 15:11:04 +0000
ROA not after:            Fri 24 Apr 2026 15:16:04 +0000
asID:                     271917
IP address blocks:        181.189.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d0:43:fe:6c:be:d4:a8:96:25:08:13:9e:a3:19:a7:15:cb:a5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90820403E94C622A991DBEB877EB7197198430
        Validity
            Not Before: Apr 25 15:11:04 2025 GMT
            Not After : Apr 24 15:16:04 2026 GMT
        Subject: CN=13A30CCCCC8D8A05C0A96A7CC1E73518123D79A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b4:d2:d6:18:52:b5:65:55:2f:f0:88:63:b3:
                    cc:dc:76:d8:fe:cf:7f:cd:8a:34:f5:03:c6:0a:f7:
                    82:e4:ce:cd:4e:16:5c:1c:0c:12:17:b2:c5:a0:f6:
                    35:5b:d4:bc:67:fc:a1:01:50:52:83:4b:53:1a:2e:
                    9a:44:a5:d5:65:d9:42:96:e1:91:83:c6:16:04:47:
                    40:5e:a7:5c:4b:1d:3e:ca:e4:19:ee:d7:fe:d8:3c:
                    42:ec:cb:a8:85:fe:2b:ad:09:53:70:65:b0:6a:45:
                    62:b5:b5:15:db:98:0a:19:48:40:b9:33:9c:36:00:
                    32:6f:bc:e0:7d:05:3c:20:70:ef:14:a4:82:ca:23:
                    b8:c8:92:a9:50:11:22:14:01:32:e9:7a:f0:26:ae:
                    ac:ca:cf:86:66:a6:42:5d:a4:7a:5e:f1:56:07:6f:
                    18:c3:1a:7f:15:2a:c2:c7:6a:af:3c:6b:89:f8:01:
                    91:13:cc:14:29:d6:c1:4e:b5:7d:2c:49:71:d0:24:
                    be:33:0a:28:86:a4:a7:68:3c:92:f3:e0:31:d5:e7:
                    94:0b:98:61:dd:fc:4f:f6:0d:4a:70:b2:8f:d3:d7:
                    1b:4b:12:72:e1:e6:05:24:18:f7:42:d6:7e:44:23:
                    3a:96:a0:92:b1:e8:81:6e:d3:60:29:29:53:42:5a:
                    ab:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A3:0C:CC:CC:8D:8A:05:C0:A9:6A:7C:C1:E7:35:18:12:3D:79:A2
            X509v3 Authority Key Identifier:
                keyid:1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37372e302f32342d3234203d3e20323731393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:35:d5:65:5b:2b:af:45:58:2d:66:1f:ea:22:5b:cd:00:92:
         cc:38:93:c3:bf:df:a4:2c:91:c2:b8:bf:81:fa:23:e0:aa:e5:
         6d:60:e3:30:a6:17:c7:d2:ea:61:33:07:ee:eb:ad:da:00:52:
         48:b2:27:31:7d:da:35:8e:59:70:11:94:c7:40:44:8c:bf:d8:
         95:fa:b0:0d:a9:b8:62:72:d3:70:a7:65:ca:b7:e1:df:7a:32:
         cf:cb:d9:5a:41:3d:82:88:63:2c:0a:bf:10:ee:a0:b6:32:6d:
         26:ac:18:da:2c:5f:7a:57:4a:4d:70:ad:dc:be:78:fe:b4:3d:
         97:be:94:33:c1:d7:75:99:eb:29:04:1f:e8:17:3b:a8:a5:b0:
         34:99:e0:81:b1:58:46:38:c4:2e:c4:e7:89:b5:77:35:0a:e6:
         f1:04:91:ca:19:91:ec:6d:24:e1:0a:da:a3:45:51:7a:cf:b2:
         5b:b3:91:50:d6:93:35:95:7f:ea:fb:d9:2f:7c:22:4e:d5:82:
         ca:ad:99:f3:af:a0:ab:27:ac:ed:11:28:dd:e4:ce:a6:bc:8a:
         cd:75:7f:9b:93:97:a1:7d:a0:8c:0a:b9:c8:86:c7:03:bd:24:
         62:5a:4c:53:c2:5b:3b:32:08:d0:3b:a8:a0:ea:ef:1c:03:6c:
         53:c4:c4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net