Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e31302e302f32332d3233203d3e2033383136.roa
File:                     3138312e3137342e31302e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          ZzsWPK0EIQq2lPa0TJlgEkJyfdWK5YNafM6X+pMKtoc=
Subject key identifier:   37:EE:DC:FA:0A:2D:BD:C8:41:FB:6E:E5:75:2F:FF:CE:8B:71:E9:E4
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       1C165D85E394FAF318980CB6FEAE8639311F1661
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e31302e302f32332d3233203d3e2033383136.roa
Signing time:             Tue 15 Apr 2025 15:20:00 +0000
ROA not before:           Tue 15 Apr 2025 15:15:00 +0000
ROA not after:            Tue 14 Apr 2026 15:20:00 +0000
asID:                     3816
IP address blocks:        181.174.10.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:16:5d:85:e3:94:fa:f3:18:98:0c:b6:fe:ae:86:39:31:1f:16:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Apr 15 15:15:00 2025 GMT
            Not After : Apr 14 15:20:00 2026 GMT
        Subject: CN=37EEDCFA0A2DBDC841FB6EE5752FFFCE8B71E9E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e8:95:34:9f:b6:03:82:10:ca:ec:aa:fc:2a:
                    b8:e4:95:46:a9:a0:5c:db:77:28:67:54:41:31:ef:
                    db:91:6a:d9:14:7f:dc:9e:4c:c6:11:21:5b:a5:ff:
                    1f:9f:6f:a2:94:22:e6:e0:90:b1:b4:61:05:42:ef:
                    21:6c:3b:ca:0d:8a:49:e3:23:33:20:24:1e:4b:dc:
                    c6:4e:42:67:7d:2c:f0:e6:3c:c3:6a:b6:69:3d:65:
                    e4:ac:d8:f3:3c:33:01:0b:f3:67:40:fa:a8:5b:c7:
                    4c:c5:49:f4:3a:25:ef:2e:88:c9:71:30:55:5b:5a:
                    dd:8f:3b:ac:38:4a:f3:08:57:c1:52:93:6b:e9:08:
                    1e:ab:5f:75:af:fa:e1:1f:9a:3d:b4:d6:fc:ee:df:
                    76:3b:cd:22:c3:3c:83:0c:53:25:b3:74:84:b7:52:
                    29:e4:37:37:58:f2:c5:e9:54:3a:64:2a:7b:be:12:
                    f9:d6:e0:cb:88:14:0f:55:a7:fc:5c:46:0c:ca:55:
                    bb:53:81:7a:5f:56:65:1d:2c:df:29:2b:74:09:19:
                    e0:eb:b3:81:19:f9:93:08:0d:d2:71:fc:f0:fb:77:
                    cb:ee:48:6e:ef:d2:7a:78:2d:79:4b:93:2e:57:93:
                    21:de:95:9d:23:95:21:9b:bd:79:d4:d8:dc:38:00:
                    24:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EE:DC:FA:0A:2D:BD:C8:41:FB:6E:E5:75:2F:FF:CE:8B:71:E9:E4
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e31302e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:05:d7:dd:f4:c7:8b:87:39:54:34:44:c9:05:ac:7c:7c:5a:
         e3:ac:a4:0a:5a:68:c9:23:89:bb:7f:fd:60:4d:12:34:ea:2d:
         3e:de:f7:3d:23:da:82:cc:fc:17:24:cd:ce:d1:d8:9b:c9:56:
         fc:79:71:13:91:c0:01:57:6a:c9:50:0e:de:91:1e:b9:fa:06:
         67:e3:b1:35:c1:2b:10:1c:f4:ba:e5:51:88:e0:be:47:92:c1:
         7e:e0:5d:4a:ad:e8:4b:7b:90:02:a7:b8:d5:11:d7:4a:c1:13:
         18:e0:19:cc:99:48:80:eb:ea:ff:28:18:49:a9:ca:5f:eb:10:
         bf:7f:5f:d0:8f:cb:58:ce:2f:52:75:f4:b6:8c:f2:97:53:b2:
         65:c7:2c:88:21:b4:b1:25:65:a1:db:cd:7e:ce:62:79:02:f4:
         e1:23:a9:50:40:ee:d6:be:27:a3:6b:65:bc:52:21:9e:56:b6:
         b8:9a:90:06:17:6d:41:4a:84:05:88:7a:12:ea:b3:9d:4f:86:
         7f:60:d7:7d:55:ec:f3:d9:3a:65:f5:2f:62:b3:3e:fa:36:38:
         ae:1d:cb:ef:ab:b1:b9:14:64:ef:36:ed:c0:cb:39:b0:c8:19:
         8d:7e:e9:0a:3d:3c:34:86:27:82:e2:9e:2b:c2:e7:a1:e5:da:
         f3:3e:8d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:22 2025 by rpki-client on console.sobornost.net