Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37382e302f32342d3234203d3e20323731393137.roa
File:                     3138312e3138392e37382e302f32342d3234203d3e20323731393137.roa (raw, json)
Hash identifier:          WjCat9FjBsuulxjd8NXIr55wHCEVM+VPx8Kb0a9KZKY=
Subject key identifier:   C6:9D:BE:E9:A4:33:36:AD:7A:75:FE:38:CE:73:5F:F7:26:5B:C7:25
Certificate issuer:       /CN=1A90820403E94C622A991DBEB877EB7197198430
Certificate serial:       540F6CA604D42778CE75EEBBD5C5CF74AD35A3D9
Authority key identifier: 1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37382e302f32342d3234203d3e20323731393137.roa
Signing time:             Fri 25 Apr 2025 15:16:05 +0000
ROA not before:           Fri 25 Apr 2025 15:11:05 +0000
ROA not after:            Fri 24 Apr 2026 15:16:05 +0000
asID:                     271917
IP address blocks:        181.189.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0f:6c:a6:04:d4:27:78:ce:75:ee:bb:d5:c5:cf:74:ad:35:a3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90820403E94C622A991DBEB877EB7197198430
        Validity
            Not Before: Apr 25 15:11:05 2025 GMT
            Not After : Apr 24 15:16:05 2026 GMT
        Subject: CN=C69DBEE9A43336AD7A75FE38CE735FF7265BC725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:e4:65:8a:c4:b3:44:07:96:2a:1d:1c:3e:
                    27:67:ab:96:fe:27:53:20:f1:5a:55:87:51:7b:f6:
                    51:67:38:3d:89:11:a6:5a:04:08:34:ac:65:fc:e5:
                    2b:b8:57:07:e0:e4:f5:e1:d3:04:45:09:d0:41:79:
                    c2:07:08:c5:c6:aa:72:ac:9b:cc:44:9d:6b:14:d4:
                    20:3b:f2:63:83:04:87:3f:c3:32:1c:22:d8:92:e9:
                    36:00:db:4c:02:b9:d1:13:a6:fa:53:1e:6b:e3:29:
                    d9:7c:6a:0c:b4:5b:b5:c1:78:1d:4b:08:3f:0c:3f:
                    7d:13:dc:6e:a5:8a:51:df:c5:fc:57:49:a4:c9:ea:
                    f1:48:44:0c:fe:1c:64:4f:c6:2b:a7:56:65:9c:e0:
                    d4:15:4e:67:d2:37:0a:7f:da:5b:43:80:4f:86:70:
                    78:0e:3b:af:8b:a1:73:06:0b:41:eb:95:bd:bd:66:
                    7a:a2:1f:c6:ed:9d:b9:d6:91:d4:b9:d5:66:29:55:
                    23:e8:8f:29:38:54:0b:49:cf:4e:1a:d9:fd:8c:06:
                    48:ce:ce:14:4f:23:5b:03:e6:18:0c:c1:0f:0e:d5:
                    9e:a5:10:eb:68:a9:62:fd:a6:7c:47:99:28:a3:4d:
                    51:8a:36:67:15:7f:6c:f1:6a:17:2e:33:9a:ae:b6:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9D:BE:E9:A4:33:36:AD:7A:75:FE:38:CE:73:5F:F7:26:5B:C7:25
            X509v3 Authority Key Identifier:
                keyid:1A:90:82:04:03:E9:4C:62:2A:99:1D:BE:B8:77:EB:71:97:19:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/1A90820403E94C622A991DBEB877EB7197198430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A90820403E94C622A991DBEB877EB7197198430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DADE095A1E285AABE8C191625B83C0DA08B514A3BB7B6E9DB65D4EFB3BBEFE96/0/3138312e3138392e37382e302f32342d3234203d3e20323731393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:83:25:f9:0c:3e:9d:6a:47:4a:ea:35:67:12:b1:77:df:af:
         09:98:dc:5e:02:9a:d7:16:a0:55:93:0a:7f:93:96:a6:f9:7c:
         f4:3e:8a:97:e2:ad:5e:a6:4a:d9:b8:40:22:20:55:08:85:96:
         dd:ab:c7:bb:d7:1b:9d:99:ea:88:f6:9c:4a:55:af:2e:34:8b:
         ff:af:c3:dd:11:cb:32:7a:5d:b4:a8:0c:37:8e:f6:b8:63:a5:
         a2:de:4c:1a:a8:27:f2:cb:f4:e8:5e:57:56:15:68:da:ea:a1:
         39:58:6c:f8:85:ba:24:73:a1:81:b4:b8:0a:da:9d:cf:12:9b:
         a2:07:fd:dc:7b:23:2d:51:a5:f4:d3:31:b0:25:27:49:3d:1e:
         4e:41:96:27:e0:77:3b:4d:79:65:de:bb:57:52:20:ea:c1:f8:
         72:74:be:af:61:a2:98:90:51:fd:8c:ba:4c:60:c8:45:f9:e5:
         71:1c:b3:2d:b9:0e:b3:2d:5a:14:44:8a:9b:32:4b:ac:37:d2:
         8a:4f:5b:f1:a4:5c:61:19:63:3b:2d:23:b1:ee:08:4c:ab:75:
         12:a4:b0:07:18:13:18:63:7b:1e:f7:b7:d0:14:13:47:b2:ae:
         a2:d2:ce:d5:0d:53:68:b6:f8:35:86:45:ef:cb:2c:80:6f:80:
         f6:00:23:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:40 2025 by rpki-client on console.sobornost.net