Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e32322e302f32332d3233203d3e2033383136.roa
File:                     3138312e3137342e32322e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          1vk5/zsv2/hpLP350qDhXC/UZer7wtev2QsGr01uoEY=
Subject key identifier:   E3:27:7D:94:F0:15:A9:85:9A:CD:CF:0E:BF:5A:FD:2F:73:6E:CE:B1
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       724081A22F944A346B30791789B0F50DC6183B0B
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e32322e302f32332d3233203d3e2033383136.roa
Signing time:             Tue 15 Apr 2025 15:20:01 +0000
ROA not before:           Tue 15 Apr 2025 15:15:01 +0000
ROA not after:            Tue 14 Apr 2026 15:20:01 +0000
asID:                     3816
IP address blocks:        181.174.22.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:40:81:a2:2f:94:4a:34:6b:30:79:17:89:b0:f5:0d:c6:18:3b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Apr 15 15:15:01 2025 GMT
            Not After : Apr 14 15:20:01 2026 GMT
        Subject: CN=E3277D94F015A9859ACDCF0EBF5AFD2F736ECEB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:24:c4:97:c7:8f:50:ff:73:cd:67:38:4a:
                    cd:0f:5c:c9:e6:a4:97:c1:c0:11:d2:d9:1e:c0:5f:
                    53:43:ef:c3:a0:de:f1:86:1a:1d:9a:df:b5:71:1d:
                    fe:1a:2a:34:6e:b3:54:b4:86:87:09:e1:57:ed:d4:
                    89:62:cb:c5:df:3b:74:37:31:cd:9d:0c:23:c1:d5:
                    b3:b5:4b:05:32:f8:e7:ab:18:78:0c:00:b6:d1:69:
                    f1:b6:45:10:45:b3:d2:ab:be:57:87:2e:f1:cc:0d:
                    71:04:d9:a1:25:b1:cd:b0:ee:41:a2:b3:49:e2:13:
                    6e:9d:83:f8:49:d4:48:f0:ec:a0:19:ae:58:c1:06:
                    d8:a3:14:8b:d3:a1:4c:59:1e:93:90:90:27:2f:96:
                    35:db:55:30:72:6d:5b:93:e0:49:f0:91:b9:a5:66:
                    c1:1e:f4:7b:7a:88:b1:e2:bd:06:ac:8a:83:4e:60:
                    b0:7a:65:18:95:84:8e:b2:b9:a8:e1:77:9a:d1:8e:
                    1f:35:8b:94:61:65:89:66:14:3c:f1:2e:b6:0e:8d:
                    2d:bc:d4:5c:a3:0f:0f:b0:f6:98:ef:db:38:0c:7a:
                    3a:93:06:bc:f5:df:02:3e:3d:3b:19:70:d6:76:94:
                    22:25:b5:ef:cf:f6:4b:30:74:76:4b:f8:ef:01:4d:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:27:7D:94:F0:15:A9:85:9A:CD:CF:0E:BF:5A:FD:2F:73:6E:CE:B1
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e32322e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:52:89:9f:10:49:10:7d:96:07:49:eb:f1:4a:c3:46:17:6c:
         f6:2e:6e:45:6f:17:d6:d0:e9:9a:ef:9b:a5:0c:80:a6:a4:fc:
         4f:89:2c:6b:3f:d8:80:f5:3b:05:82:db:a1:a3:ca:17:6c:3b:
         85:ec:21:e8:8a:4d:58:f1:d5:80:24:9e:cf:6d:db:f1:05:ac:
         e3:56:3f:d7:d0:35:38:07:61:2c:12:52:fd:c8:f6:8b:91:b7:
         ff:2a:5b:64:ac:ad:0f:39:9a:44:b5:e2:b5:99:97:a6:44:8a:
         6d:2b:07:a4:9f:f7:fc:96:1f:58:5a:5d:51:90:d6:8c:c5:15:
         75:ef:62:20:57:c8:b2:5c:d7:c2:31:cf:59:7d:31:c6:82:d6:
         5a:df:22:99:9a:3d:49:c4:92:76:e6:0c:81:20:a7:f1:06:43:
         1d:39:e1:0b:9d:a8:44:a6:c4:ca:65:77:d1:dd:ef:17:c1:44:
         55:80:82:ef:8d:0c:02:3c:d2:d1:93:fe:17:94:78:95:ae:d9:
         37:b1:cd:ea:91:59:4e:00:e9:f2:79:51:85:f1:f1:52:6b:f2:
         bd:13:1c:3a:f8:16:af:60:63:7f:bc:79:77:be:0f:c9:d1:b6:
         fd:e1:74:b8:5b:60:5c:96:9f:f9:17:af:86:f5:ea:f7:e3:32:
         47:d9:4d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:22 2025 by rpki-client on console.sobornost.net