Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136382e302f32322d3232203d3e20323730313232.roa
File:                     3138392e35312e3136382e302f32322d3232203d3e20323730313232.roa (raw, json)
Hash identifier:          xTGoCFuQsJagiB2SBPPxuTVMZO9D0FyYr5LYzwCyLdo=
Subject key identifier:   8C:A8:29:E7:2A:5D:53:85:6D:8C:17:03:6B:98:14:5C:0A:6B:D3:22
Certificate issuer:       /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial:       5EF4356CE69BB0B2C6771D0E0C09F8D3B377A102
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136382e302f32322d3232203d3e20323730313232.roa
Signing time:             Fri 25 Apr 2025 13:25:00 +0000
ROA not before:           Fri 25 Apr 2025 13:20:00 +0000
ROA not after:            Fri 24 Apr 2026 13:25:00 +0000
asID:                     270122
IP address blocks:        189.51.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f4:35:6c:e6:9b:b0:b2:c6:77:1d:0e:0c:09:f8:d3:b3:77:a1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
        Validity
            Not Before: Apr 25 13:20:00 2025 GMT
            Not After : Apr 24 13:25:00 2026 GMT
        Subject: CN=8CA829E72A5D53856D8C17036B98145C0A6BD322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fd:ef:fc:03:e0:b3:0e:52:de:77:43:70:59:
                    eb:69:b0:9d:11:04:10:7a:04:d3:b4:2e:2d:15:dc:
                    43:07:37:db:43:59:d9:d3:25:65:57:df:da:89:f6:
                    8f:56:1f:f9:6f:51:98:3d:f8:e9:2a:d5:5e:ce:f3:
                    cc:37:7d:9e:81:15:f0:9d:9b:d9:2f:39:80:64:79:
                    a4:b3:96:7d:59:ef:b8:0f:ee:83:cc:4f:30:74:99:
                    fc:32:8e:7b:3b:21:60:77:64:5a:c0:fc:8c:69:25:
                    86:d6:41:28:4d:fd:d7:9a:c3:a2:a2:a8:c6:06:63:
                    fa:32:64:c1:64:d8:63:28:1c:45:a6:84:df:89:32:
                    e3:7e:2d:64:27:7e:31:86:78:16:cf:9d:ca:c2:4a:
                    2b:12:fa:b4:fc:6c:86:2f:8f:6a:5b:f3:b8:25:bc:
                    78:cc:69:62:24:87:d0:6d:cb:34:2d:14:84:ad:e0:
                    f7:4f:26:64:7b:57:77:92:66:3d:4f:4b:5f:3f:74:
                    63:08:37:67:d3:87:65:2a:fc:c9:69:dd:9c:0a:c6:
                    5d:ff:06:35:3c:fc:2d:32:27:5a:a5:ea:d5:31:c2:
                    b0:94:33:2f:0c:9d:50:55:56:aa:f4:b1:86:6e:2b:
                    5f:28:8f:a1:ee:51:3a:dc:f2:75:a1:22:3c:e8:b2:
                    4d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A8:29:E7:2A:5D:53:85:6D:8C:17:03:6B:98:14:5C:0A:6B:D3:22
            X509v3 Authority Key Identifier:
                keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136382e302f32322d3232203d3e20323730313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:36:ea:ac:3f:fd:49:f9:5f:91:41:5d:e3:ce:f3:df:b7:f2:
         bf:e4:08:39:6a:82:9b:35:0d:24:c8:56:9e:9a:0f:b7:5b:5e:
         80:cb:a6:64:b9:39:7f:7a:42:d0:c8:2f:db:4b:7d:dc:dc:e2:
         38:f9:0e:91:98:3e:31:73:fb:e9:99:b0:80:ab:a4:2a:80:23:
         eb:e4:ed:73:48:ec:aa:48:88:7a:52:0d:8f:df:05:ea:9f:ae:
         14:e7:9e:55:2e:b0:83:e8:59:16:e8:76:69:4a:2d:66:cd:27:
         36:33:53:36:85:fa:2b:d2:31:67:74:28:5d:00:4f:af:92:aa:
         9d:51:5b:0f:17:72:0f:16:2f:25:62:c6:a3:25:5f:6c:6a:98:
         a9:36:8f:00:30:ab:95:34:67:df:e1:fe:a7:f4:4d:bc:c6:54:
         ff:37:46:35:02:2e:7a:b4:f8:39:8c:8b:4a:d6:00:fb:69:d9:
         e5:75:d2:fe:b8:bb:ad:6f:0d:97:5a:a1:3a:23:70:ce:14:79:
         3f:6b:85:bf:7b:ba:67:0c:56:4b:08:dd:53:1c:56:2d:61:b0:
         bc:64:98:ff:35:16:2a:10:46:72:68:5f:d1:62:10:4c:ad:38:
         8c:93:9a:cf:b4:8e:be:7c:99:64:17:8c:4b:9c:01:9b:66:bc:
         c8:6b:52:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:57 2025 by rpki-client on console.sobornost.net