Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3134382e302f32322d3234203d3e20323730303633.roa
File:                     3230302e38312e3134382e302f32322d3234203d3e20323730303633.roa (raw, json)
Hash identifier:          PGvniDnSwHFhhz5nAcwTWFpUvdKznJDDtLjOPHEWV8Y=
Subject key identifier:   32:C3:F5:B8:D6:70:61:64:62:37:17:2C:C5:5A:BC:D7:5C:7C:CD:97
Certificate issuer:       /CN=9EA657B7464CA681E408DD78432AA090F1846959
Certificate serial:       547ECE408CABC77F316BA1F088447B78BBC9EA3C
Authority key identifier: 9E:A6:57:B7:46:4C:A6:81:E4:08:DD:78:43:2A:A0:90:F1:84:69:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3134382e302f32322d3234203d3e20323730303633.roa
Signing time:             Tue 04 Feb 2025 18:49:31 +0000
ROA not before:           Tue 04 Feb 2025 18:44:31 +0000
ROA not after:            Tue 03 Feb 2026 18:49:31 +0000
asID:                     270063
IP address blocks:        200.81.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7e:ce:40:8c:ab:c7:7f:31:6b:a1:f0:88:44:7b:78:bb:c9:ea:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EA657B7464CA681E408DD78432AA090F1846959
        Validity
            Not Before: Feb  4 18:44:31 2025 GMT
            Not After : Feb  3 18:49:31 2026 GMT
        Subject: CN=32C3F5B8D67061646237172CC55ABCD75C7CCD97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:43:a5:89:35:c5:07:3d:66:67:1a:ba:2d:40:
                    53:8b:1a:ad:86:59:5c:cf:30:ab:ac:0e:55:fe:54:
                    3d:e6:fc:3d:3a:08:31:7f:0c:c6:90:0d:ba:3d:c1:
                    1c:47:65:45:d5:86:f5:54:e5:05:2e:3f:78:eb:51:
                    15:a3:a3:ee:12:a6:12:53:03:86:92:32:5a:fe:20:
                    66:9d:08:8d:a6:85:41:b0:19:19:1e:60:2e:3d:51:
                    1a:ed:11:2c:5d:61:f6:a5:c7:c8:bd:c4:43:d4:8e:
                    39:37:ca:1f:a7:0d:f0:3a:b2:ce:82:1b:87:c4:ba:
                    35:b9:a0:b7:5c:13:3b:74:30:c5:c9:fa:f7:d4:b2:
                    61:ff:05:80:0b:68:46:d2:87:3f:ce:b3:51:ac:72:
                    22:2f:21:41:6d:48:69:fb:60:86:f1:71:ce:60:aa:
                    aa:46:af:58:31:34:0a:c5:3b:10:b0:bd:82:d0:ad:
                    2d:b5:51:e8:3b:0c:4f:ca:38:65:1d:1f:ff:db:52:
                    bb:e8:a4:b7:55:ac:e8:8c:40:d9:b4:dc:0b:43:03:
                    51:9c:59:9f:c0:76:b1:f2:d1:fa:a5:d5:02:e0:ef:
                    57:d4:e8:1a:b3:08:89:32:83:fa:1b:f6:2f:8c:9a:
                    76:9c:45:6b:0a:17:45:bb:f9:8e:40:48:69:92:e7:
                    02:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C3:F5:B8:D6:70:61:64:62:37:17:2C:C5:5A:BC:D7:5C:7C:CD:97
            X509v3 Authority Key Identifier:
                keyid:9E:A6:57:B7:46:4C:A6:81:E4:08:DD:78:43:2A:A0:90:F1:84:69:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/9EA657B7464CA681E408DD78432AA090F1846959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EA657B7464CA681E408DD78432AA090F1846959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3F32E23B195B84F6717C5BEFEC5E9759188044B29AFB54A06D3841A3E563BC1/0/3230302e38312e3134382e302f32322d3234203d3e20323730303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:d0:83:3e:86:5b:3f:86:04:7a:e0:b7:1c:2d:cb:b9:17:00:
         5a:85:21:39:bd:f9:27:f3:05:f7:db:77:63:99:d8:ab:c6:36:
         01:8e:1e:93:2a:0f:00:cc:2c:39:95:59:ad:1d:a5:39:56:32:
         19:14:31:f8:02:7a:6a:7d:32:0d:72:b5:34:3a:7e:87:23:1b:
         83:ed:a5:11:76:c9:db:ab:47:f6:f2:01:7e:6c:61:44:ae:18:
         9c:ac:73:e3:cf:46:47:d4:e3:5b:e5:99:f6:54:6a:33:e6:7a:
         d3:fc:f1:f4:0c:6c:82:55:23:8d:c6:80:6f:4b:fb:80:54:ac:
         cd:e3:20:b0:51:a2:f6:db:c5:c8:57:14:9d:93:38:13:82:6e:
         52:f4:ba:30:26:64:54:19:1d:cd:ad:70:fe:aa:3f:59:4e:e1:
         f7:e1:33:b3:93:a3:c3:cb:ca:2a:30:3f:79:56:22:86:99:07:
         bb:ef:df:b6:c1:e6:3e:32:97:f1:3f:08:c0:45:a1:be:19:6e:
         09:fa:6f:1a:e3:d2:68:a6:89:c1:a0:ce:fe:ee:28:17:18:bc:
         8c:58:93:f9:c5:6a:a3:e4:78:39:4c:17:14:85:30:a9:80:f1:
         38:15:7a:a3:e7:fe:cc:38:15:27:60:1a:d9:db:a2:5c:65:18:
         00:45:89:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:06:33 2025 by rpki-client on console.sobornost.net