Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136382e302f32342d3234203d3e20323730313131.roa
File:                     3138392e35312e3136382e302f32342d3234203d3e20323730313131.roa (raw, json)
Hash identifier:          uJr2TVxDYGo75416mvpyI8rsst+ON2J2haZULcxyvXc=
Subject key identifier:   D3:27:7A:32:19:F2:88:85:FC:26:61:EE:3F:C3:7E:75:B6:D8:78:0A
Certificate issuer:       /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial:       26AF0AB2EB06C8A593E5668BE8D0F60DC43F183D
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136382e302f32342d3234203d3e20323730313131.roa
Signing time:             Sun 20 Apr 2025 01:35:00 +0000
ROA not before:           Sun 20 Apr 2025 01:30:00 +0000
ROA not after:            Sun 19 Apr 2026 01:35:00 +0000
asID:                     270111
IP address blocks:        189.51.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:af:0a:b2:eb:06:c8:a5:93:e5:66:8b:e8:d0:f6:0d:c4:3f:18:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
        Validity
            Not Before: Apr 20 01:30:00 2025 GMT
            Not After : Apr 19 01:35:00 2026 GMT
        Subject: CN=D3277A3219F28885FC2661EE3FC37E75B6D8780A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5f:93:dd:ef:5d:80:44:0a:de:71:aa:56:29:
                    89:d9:24:a5:11:36:a6:1f:00:0d:c1:dd:92:10:e1:
                    03:9e:0e:c1:a6:cb:f4:70:fa:a9:1a:98:bc:71:9a:
                    b3:91:52:d3:01:d2:0d:03:61:af:63:20:e4:8f:50:
                    59:2e:17:21:d9:1e:40:69:5e:ea:ef:e7:e8:ee:f7:
                    db:5a:46:9d:92:0a:7d:58:72:54:0f:8c:a1:04:3e:
                    42:5f:1d:c4:2e:45:36:98:a5:a8:e5:c8:93:da:d6:
                    8d:fa:71:49:f7:54:f2:c1:33:ee:c5:21:41:bc:2b:
                    08:2a:d2:f9:45:18:49:a1:47:1e:39:73:93:44:1c:
                    36:b1:fa:11:37:1a:92:c6:ff:d5:99:fc:61:f2:6a:
                    4b:1d:e7:11:e7:9b:61:d2:78:ce:02:3a:1b:67:2a:
                    c8:48:42:b5:67:ca:8c:91:58:62:66:fa:92:ce:4e:
                    09:6c:59:86:2d:7d:e2:f3:7d:0d:ab:88:c1:d5:d6:
                    33:73:e0:f7:75:87:14:dc:b3:37:c9:5b:45:3e:7d:
                    3e:b0:ff:ec:40:b0:e9:73:5b:ef:e0:11:47:5a:78:
                    cb:7a:00:c9:7b:61:94:87:03:6b:d5:9b:7a:8e:42:
                    1a:26:5c:b6:a1:01:fc:cb:ba:b5:65:ea:6a:cf:53:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:27:7A:32:19:F2:88:85:FC:26:61:EE:3F:C3:7E:75:B6:D8:78:0A
            X509v3 Authority Key Identifier:
                keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136382e302f32342d3234203d3e20323730313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ef:fe:d5:da:1e:cc:45:f2:7b:7c:33:8b:7f:c2:85:99:4e:
         27:92:c0:8b:2a:73:73:cd:f3:74:a4:ea:7f:d6:43:49:93:45:
         03:5e:b1:02:bf:ce:28:fd:e6:f3:6b:4e:08:17:7f:e4:d2:c5:
         e6:4c:d9:0e:c5:f2:69:87:33:02:2b:3b:43:e4:ea:35:1c:f2:
         69:db:2f:d6:14:20:aa:17:a6:dd:7b:d9:3b:55:f5:e4:c7:95:
         df:39:03:f8:a7:a6:bc:00:af:d1:7a:bb:10:a2:49:cf:dc:be:
         ed:f9:61:8f:0b:c0:44:81:d8:9b:cf:d4:df:4a:38:0b:ee:25:
         66:f1:27:c2:40:f7:d1:01:36:8b:2c:4a:57:5a:3f:b9:ab:74:
         34:6b:9a:8d:cd:16:c7:c6:70:4b:bb:e0:08:03:a4:29:52:87:
         21:79:00:be:e4:46:42:b5:c6:00:75:0e:14:03:63:04:79:7a:
         eb:be:0e:fc:5c:7a:af:03:49:04:c2:74:cc:17:87:b4:a1:e4:
         77:8b:99:94:52:e0:c6:b7:77:01:1d:09:af:15:62:c5:21:bd:
         61:c2:bb:b4:5f:fe:79:d9:de:f5:24:9f:81:cd:07:19:5c:61:
         7d:4f:b6:99:d9:bc:65:9e:e5:39:f1:f4:ec:59:f7:26:46:29:
         a4:78:21:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:57 2025 by rpki-client on console.sobornost.net