Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/3136382e3232372e39362e302f32322d3234203d3e20323634363835.roa
File:                     3136382e3232372e39362e302f32322d3234203d3e20323634363835.roa (raw, json)
Hash identifier:          ghqydyGax5MgZPxjQP1zzKYoMrHoE6PV5def6U7saxE=
Subject key identifier:   D7:48:E9:80:51:21:B3:79:D8:A9:24:6D:F8:FA:A2:C2:3E:69:14:BD
Certificate issuer:       /CN=9E957DE90D33B8FE187AF8743E44EAE92B9B7504
Certificate serial:       0A7DFB9B9E80FCE52091A2F95F035FF2AF0F9F17
Authority key identifier: 9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/3136382e3232372e39362e302f32322d3234203d3e20323634363835.roa
Signing time:             Tue 04 Feb 2025 18:23:43 +0000
ROA not before:           Tue 04 Feb 2025 18:18:43 +0000
ROA not after:            Tue 03 Feb 2026 18:23:43 +0000
asID:                     264685
IP address blocks:        168.227.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7d:fb:9b:9e:80:fc:e5:20:91:a2:f9:5f:03:5f:f2:af:0f:9f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E957DE90D33B8FE187AF8743E44EAE92B9B7504
        Validity
            Not Before: Feb  4 18:18:43 2025 GMT
            Not After : Feb  3 18:23:43 2026 GMT
        Subject: CN=D748E9805121B379D8A9246DF8FAA2C23E6914BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8c:48:be:88:a3:b9:91:1f:15:06:77:e6:b2:
                    2c:30:b4:65:4e:45:ef:36:a2:03:a6:0f:55:8a:6c:
                    cf:2b:b4:b2:34:00:cb:40:8d:7f:93:32:f4:b2:d2:
                    52:5e:71:15:f5:96:45:94:19:2a:4e:d3:e8:6b:6f:
                    5a:dc:8c:6c:9d:63:14:93:db:bf:5b:90:98:a7:d1:
                    17:67:68:ac:16:c3:80:c0:72:d5:bf:fc:ac:83:f9:
                    16:27:3f:21:ac:fb:86:85:d0:7c:fa:3e:05:12:14:
                    43:31:37:44:50:11:1a:56:bb:66:f4:c8:fb:40:72:
                    a7:b9:7f:36:4e:e5:b7:08:d1:48:61:da:a2:20:26:
                    1e:c6:8a:bb:cb:4a:41:c9:1c:1a:4b:45:5a:f0:5f:
                    18:7c:96:73:36:81:2d:a2:51:69:43:ca:c3:47:ff:
                    d5:b4:33:92:a0:3c:6b:1e:06:f4:84:6d:bd:a6:82:
                    74:e5:69:a1:8c:4c:e7:d5:d2:7e:8b:38:2d:da:27:
                    14:16:79:82:dc:28:55:63:be:d2:1c:68:3e:a9:c3:
                    3c:61:04:53:6a:0d:60:25:41:f7:8e:dc:3b:29:2a:
                    6b:8d:b8:2c:f8:0b:bf:63:74:29:e8:60:73:3e:fd:
                    74:15:c0:d8:1c:bc:23:47:4a:12:2e:68:a4:f6:0a:
                    4b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:48:E9:80:51:21:B3:79:D8:A9:24:6D:F8:FA:A2:C2:3E:69:14:BD
            X509v3 Authority Key Identifier:
                keyid:9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/3136382e3232372e39362e302f32322d3234203d3e20323634363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:a3:bc:5d:bd:6c:c0:12:43:5c:04:68:7f:4d:a5:3e:bb:08:
         c1:30:1e:e9:f5:3b:1b:e5:f9:56:53:44:a0:66:78:41:28:04:
         2f:7a:d5:fa:09:ed:a3:7b:b6:61:f1:cd:ad:33:35:ff:83:bb:
         b4:88:44:82:04:94:73:8c:1b:f5:6a:f1:77:7c:a6:9b:77:ac:
         df:54:df:01:1e:92:31:cf:ba:32:7d:ef:de:e6:79:49:d4:98:
         fd:00:11:74:ef:b4:68:6f:bc:99:a6:c9:5b:31:cf:94:6b:bb:
         be:f0:e4:8d:82:33:26:43:f0:4c:9f:72:a5:70:2f:cb:1e:40:
         db:18:6f:32:db:f2:41:0a:51:8d:38:a6:42:a0:99:d5:61:dd:
         54:41:41:65:b3:e0:d9:4d:d5:38:4c:03:a4:80:5d:a8:64:c3:
         e7:3a:2c:bb:08:72:19:d7:17:71:54:bf:d2:e6:bc:a2:bc:64:
         49:1c:c2:06:37:70:32:b3:82:dc:f5:00:c8:55:45:c4:89:71:
         91:a3:a5:42:ec:39:70:a6:a2:48:40:74:23:79:d2:b5:67:c0:
         2e:48:22:46:b6:12:44:76:ce:e6:d3:79:70:a9:da:ff:ed:5d:
         49:e0:0a:1d:31:08:9d:62:9b:69:fe:8f:98:cb:5d:f8:80:3e:
         c5:3d:dc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:28 2025 by rpki-client on console.sobornost.net