Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/3137302e3135302e34372e31362f32392d3239203d3e203532353039.roa
File:                     3137302e3135302e34372e31362f32392d3239203d3e203532353039.roa (raw, json)
Hash identifier:          dkL2M+k1oaH/1XshIw3DX/mtAtma5i7hVuZR0nF4OQ4=
Subject key identifier:   E5:39:F0:B6:B2:44:05:05:0B:A1:BC:FF:C9:62:93:6F:65:D2:39:2C
Certificate issuer:       /CN=6DE888EFA2956802EC74153A5670BFB030384D0F
Certificate serial:       22277CF0036C8A3EFD9F7AF4833D262B11A54B46
Authority key identifier: 6D:E8:88:EF:A2:95:68:02:EC:74:15:3A:56:70:BF:B0:30:38:4D:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DE888EFA2956802EC74153A5670BFB030384D0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/3137302e3135302e34372e31362f32392d3239203d3e203532353039.roa
Signing time:             Mon 14 Apr 2025 21:14:51 +0000
ROA not before:           Mon 14 Apr 2025 21:09:51 +0000
ROA not after:            Mon 13 Apr 2026 21:14:51 +0000
asID:                     52509
IP address blocks:        170.150.47.16/29 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/6DE888EFA2956802EC74153A5670BFB030384D0F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/6DE888EFA2956802EC74153A5670BFB030384D0F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DE888EFA2956802EC74153A5670BFB030384D0F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:27:7c:f0:03:6c:8a:3e:fd:9f:7a:f4:83:3d:26:2b:11:a5:4b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DE888EFA2956802EC74153A5670BFB030384D0F
        Validity
            Not Before: Apr 14 21:09:51 2025 GMT
            Not After : Apr 13 21:14:51 2026 GMT
        Subject: CN=E539F0B6B24405050BA1BCFFC962936F65D2392C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:45:a2:fb:5d:16:64:e5:33:0b:37:78:10:
                    f3:17:e2:f1:ff:97:47:e4:f9:10:14:4d:5a:98:06:
                    f8:c5:fc:a4:23:b3:eb:ed:c3:f8:3f:e2:ac:a1:6e:
                    0f:41:81:0f:b8:87:36:36:65:2f:45:6f:24:0c:07:
                    28:87:92:0f:e2:0c:b7:ee:87:e4:55:ba:f0:be:47:
                    b8:0f:db:9d:8d:7e:74:5b:71:8e:4f:b6:2b:ab:68:
                    2c:11:88:08:91:b3:9a:5f:f6:c2:5c:cb:8b:b0:87:
                    9e:3d:fc:30:d6:3c:a9:3b:c3:7e:da:37:37:4b:fe:
                    9a:08:76:61:62:d6:ea:a8:3f:59:c7:ab:3f:a1:fb:
                    f6:70:a5:39:0e:7d:8a:b0:a8:6f:b5:66:af:a8:68:
                    71:8a:e9:ca:bb:42:1e:46:27:af:58:9e:33:f6:c2:
                    0a:b1:60:e8:2d:31:5c:12:1f:c0:3b:e0:01:e6:38:
                    a0:31:a7:02:37:c2:ef:72:20:59:dd:a7:8c:cf:b8:
                    74:3c:46:44:6d:ba:83:78:fc:54:4e:7d:2c:2c:8d:
                    c8:0d:8e:bc:ea:8a:14:ab:c7:0f:b9:f7:1e:11:95:
                    56:66:18:34:49:13:2f:db:8d:e1:31:40:1f:37:8f:
                    4a:bb:ec:e7:ac:cc:f1:ca:1e:01:14:d0:4c:bb:1d:
                    df:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:39:F0:B6:B2:44:05:05:0B:A1:BC:FF:C9:62:93:6F:65:D2:39:2C
            X509v3 Authority Key Identifier:
                keyid:6D:E8:88:EF:A2:95:68:02:EC:74:15:3A:56:70:BF:B0:30:38:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/6DE888EFA2956802EC74153A5670BFB030384D0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6DE888EFA2956802EC74153A5670BFB030384D0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/288FCF06CCC0FA5B0D9267A217C8E2FC74AB26CA550823C5F0AE6F8AFF176230/0/3137302e3135302e34372e31362f32392d3239203d3e203532353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.47.16/29

    Signature Algorithm: sha256WithRSAEncryption
         43:0a:52:b2:7d:81:2d:f7:76:ee:60:bc:af:04:9e:fd:2e:8e:
         50:82:50:ff:a5:ba:23:cb:be:c0:32:04:f9:b1:79:3e:6e:d3:
         e1:12:d2:ae:b6:c2:11:f2:fd:58:a1:70:5d:fe:87:73:0c:23:
         cb:78:61:fd:2a:39:cd:02:a4:03:c8:ac:e1:05:eb:c9:48:90:
         bf:47:a4:04:5f:2f:f7:d2:0d:75:cc:16:92:2b:3d:51:25:e4:
         70:33:b6:e9:f2:13:ad:74:be:48:2b:ca:c4:16:94:ab:3e:2b:
         22:de:f2:8c:07:e9:29:9c:4e:39:f3:29:13:93:6d:e2:17:b9:
         1b:f5:c2:e0:e9:67:ef:0e:88:71:f3:0f:ed:5a:e8:37:26:c5:
         f1:0f:f3:9e:82:bd:ea:b7:1f:bb:81:76:40:ec:6e:83:a4:74:
         86:26:ba:6d:a1:0e:be:63:20:e2:bb:b9:e3:c3:32:30:75:f5:
         10:d2:36:e4:1b:e4:3f:a1:38:47:b4:3b:c7:14:25:9a:76:85:
         c7:ea:68:95:2a:f2:36:ed:d0:74:94:ed:e6:02:42:54:23:0c:
         e3:ad:8b:69:65:a1:d3:98:0b:75:99:c3:96:0e:b8:f9:4f:ff:
         15:5b:f8:93:3c:ca:18:52:5d:74:46:7a:15:1d:60:b7:be:5d:
         6f:10:e2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:13 2025 by rpki-client on console.sobornost.net