Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS28097.roa
File:                     AS28097.roa (raw, json)
Hash identifier:          cDW86ERPB2QvjVQk13EoSfvLGXlsymSQvCpff+8rOm0=
Subject key identifier:   BB:43:7E:E3:F5:61:06:EC:29:F0:B2:14:32:CF:54:79:02:BA:39:BB
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       6DD9B989E28277840324DE551912402A4B0A2013
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS28097.roa
Signing time:             Tue 05 Mar 2024 18:00:28 +0000
ROA not before:           Tue 05 Mar 2024 17:55:28 +0000
ROA not after:            Tue 04 Mar 2025 18:00:28 +0000
asID:                     28097
IP address blocks:        181.188.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d9:b9:89:e2:82:77:84:03:24:de:55:19:12:40:2a:4b:0a:20:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Mar  5 17:55:28 2024 GMT
            Not After : Mar  4 18:00:28 2025 GMT
        Subject: CN=BB437EE3F56106EC29F0B21432CF547902BA39BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:28:24:e4:24:a2:37:4c:80:fd:80:d0:7c:9a:
                    63:97:ed:85:58:d5:4c:20:0a:4a:c7:bc:14:04:26:
                    d5:4b:8e:91:a8:ba:f3:76:d1:c2:8a:7a:d3:c8:4a:
                    be:ef:59:8e:37:9f:b6:01:5b:7a:de:57:6b:90:75:
                    ba:d1:b8:d6:e1:ba:e8:35:1f:e7:eb:1b:99:e9:f8:
                    3e:aa:49:47:9f:4a:14:01:ad:2e:1e:16:20:42:b4:
                    4c:d7:01:5b:0f:74:9c:56:62:79:f2:eb:99:39:eb:
                    75:a5:41:cd:01:a2:05:23:72:3e:7c:50:b9:44:84:
                    19:13:ec:08:c8:65:9d:ba:8f:99:8e:09:a3:2c:66:
                    46:72:da:9b:d4:13:3b:27:eb:e2:9a:ec:4a:3e:87:
                    7c:bf:97:a1:ca:93:18:95:9a:fd:76:a1:67:e7:7c:
                    88:78:2d:d9:97:9a:a9:b2:f5:50:d4:72:e1:b5:c7:
                    c7:c4:97:3a:33:bd:42:66:85:4c:77:a4:94:e5:20:
                    db:81:51:ce:8f:88:47:23:99:47:32:4b:a6:33:63:
                    9e:d9:0b:ef:d3:9b:78:83:9d:52:e5:ec:93:18:06:
                    7b:1a:0e:90:26:2e:9d:04:7f:55:44:7a:e5:d5:7d:
                    0d:9a:9d:89:8a:dd:6c:22:d7:b3:ab:5a:28:4b:dc:
                    cb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:43:7E:E3:F5:61:06:EC:29:F0:B2:14:32:CF:54:79:02:BA:39:BB
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS28097.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:b2:d1:2d:c3:28:96:dc:3a:6a:bb:bc:af:4c:0e:aa:77:7b:
         e6:c7:bc:eb:74:2c:59:68:5d:9f:6c:d0:19:57:e9:72:81:a3:
         ca:0f:61:20:7b:46:47:f1:b7:29:58:b3:a7:0c:d2:57:4f:cd:
         17:3e:4b:c7:c9:13:6a:e4:61:d0:4c:81:83:d8:4a:08:83:10:
         65:4b:e7:0a:43:eb:96:3e:96:ba:0e:03:35:f0:d1:1b:c6:e4:
         db:5d:24:bb:9f:de:5e:98:3c:2c:34:d5:7d:ae:68:7d:e6:6d:
         08:90:47:04:98:90:c3:f8:8f:70:81:a6:aa:da:7e:1d:fb:f1:
         aa:4d:6f:6a:7b:e2:7c:3f:3b:61:f4:27:67:8e:11:d8:07:e9:
         5a:07:e1:b8:08:05:51:aa:1f:34:22:80:9d:cc:d5:ea:3f:08:
         c6:4b:8d:60:3e:db:53:69:0f:d3:68:ac:a2:d2:63:1c:9e:c7:
         65:55:7f:f7:8e:ca:f8:fe:61:6e:1c:a5:56:26:5e:ff:e4:d0:
         be:cf:aa:00:11:c2:91:1f:12:bb:26:4e:43:ef:c9:57:70:a9:
         f3:fb:f2:34:07:a8:c8:a8:2a:b8:9e:ab:4a:75:2a:30:1e:55:
         23:8c:b0:c7:f0:6f:5e:1a:42:d9:88:0d:5e:37:91:2b:d4:5b:
         b9:62:90:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:36:38 2024 by rpki-client on console-ams.rpki-client.org