Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33322e302f32332d3233203d3e2033383136.roa
File:                     3138312e3137342e33322e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          nkDmqixJG4w4prKRjkLTZH8gR/f2lua3GXk8iXZ2JaI=
Subject key identifier:   49:3D:D5:BA:12:25:91:9D:EB:C8:1E:F5:37:7F:8E:17:B0:7A:E7:FD
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       017A814E74F2A832A3BFBDF3309167DF8876F7C6
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33322e302f32332d3233203d3e2033383136.roa
Signing time:             Tue 15 Apr 2025 15:20:00 +0000
ROA not before:           Tue 15 Apr 2025 15:15:00 +0000
ROA not after:            Tue 14 Apr 2026 15:20:00 +0000
asID:                     3816
IP address blocks:        181.174.32.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7a:81:4e:74:f2:a8:32:a3:bf:bd:f3:30:91:67:df:88:76:f7:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Apr 15 15:15:00 2025 GMT
            Not After : Apr 14 15:20:00 2026 GMT
        Subject: CN=493DD5BA1225919DEBC81EF5377F8E17B07AE7FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b9:25:04:92:a0:96:19:ba:a3:f0:e6:a3:79:
                    9c:43:8a:2a:3c:e4:09:05:2c:0a:82:8c:8b:99:1e:
                    da:fa:85:20:b2:ff:f3:09:93:8b:b6:5c:27:a7:7b:
                    a6:af:b5:02:76:a7:51:a8:1a:a4:af:7d:17:50:69:
                    ae:f2:83:a1:19:8d:c7:c6:7b:f3:e6:70:c8:1d:52:
                    30:94:1d:dd:72:26:ca:2d:d6:bf:fc:bb:16:eb:42:
                    d9:d9:47:85:6a:d9:84:80:53:8f:ac:67:b7:8d:25:
                    23:fb:ee:30:6a:b2:65:c4:87:c3:1d:a7:99:87:06:
                    0d:be:70:d4:48:ff:a6:7d:67:1b:3e:1a:c6:3a:cc:
                    9d:c6:81:ee:a4:27:ad:3a:c3:70:5a:d6:8b:6a:b5:
                    01:e0:dd:4d:ea:b4:57:d2:7d:2e:8a:c1:58:61:9a:
                    f9:e6:ff:1d:54:ef:45:a3:3f:db:6a:98:d8:f1:76:
                    9b:66:5f:8b:d0:f8:e3:4f:39:5e:3d:99:9b:34:f2:
                    98:53:b4:fb:8c:66:ef:b4:3c:41:49:fc:69:b3:02:
                    4a:78:09:05:2d:e8:a6:e4:c7:78:88:0e:7b:28:61:
                    ef:99:7d:1f:9f:75:d2:10:bc:78:8a:82:c4:b0:6a:
                    e9:5b:7e:a8:f7:4b:02:12:56:f6:37:c2:dc:b5:a7:
                    f1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3D:D5:BA:12:25:91:9D:EB:C8:1E:F5:37:7F:8E:17:B0:7A:E7:FD
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33322e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:79:a9:68:9d:2c:73:7f:f1:06:c3:1c:d9:bd:18:ac:30:28:
         57:11:c1:29:37:34:ff:76:0d:9d:cb:ea:d4:21:97:c5:54:28:
         10:76:06:87:d4:e6:05:6c:34:65:21:64:68:19:38:20:77:9d:
         eb:6b:5c:01:ad:24:4e:33:af:70:2a:0c:73:8a:e8:35:81:75:
         91:91:9a:78:bf:9c:1c:85:ed:46:8e:62:4e:a4:c7:82:d1:f6:
         5f:9b:05:4c:83:a1:4b:8f:0f:fe:b4:20:c4:6c:b7:c4:a3:0d:
         e3:4e:1f:86:70:45:92:b2:dc:7f:ec:40:19:33:9a:c0:f1:3d:
         49:bf:fd:a0:05:17:0d:e8:4a:cc:86:a2:d1:88:87:72:76:3d:
         7e:e7:88:38:6e:ef:1f:fa:38:41:ea:a5:dc:9f:87:da:57:ce:
         c8:15:b7:87:78:f4:5b:b9:ac:ed:f1:36:c8:36:04:21:f6:65:
         4e:03:4e:3e:e8:f2:70:ad:be:18:ac:13:2a:fc:9b:5f:47:e7:
         0f:2f:7d:9d:8e:af:3a:f2:aa:74:db:b9:25:51:8b:ba:03:14:
         32:67:9f:46:97:55:c5:10:76:09:b7:3a:e4:2b:55:65:f8:aa:
         08:84:e4:3b:24:a7:38:63:d2:be:de:6d:5d:dc:92:ba:eb:5c:
         31:4a:6c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:22 2025 by rpki-client on console.sobornost.net