Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136382e302f32342d3234203d3e20323730313232.roa
File:                     3138392e35312e3136382e302f32342d3234203d3e20323730313232.roa (raw, json)
Hash identifier:          e1ak7yfiFG4VWHeontXiNX0jqMFqswB6NrJn8b8XHTo=
Subject key identifier:   7C:C9:11:53:33:F2:62:F7:D7:23:F5:5D:B5:4D:A6:6B:A5:E3:18:E4
Certificate issuer:       /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial:       0D4F8956D7EF136095A0F40264FAF716C962535F
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136382e302f32342d3234203d3e20323730313232.roa
Signing time:             Fri 25 Apr 2025 13:20:00 +0000
ROA not before:           Fri 25 Apr 2025 13:15:00 +0000
ROA not after:            Fri 24 Apr 2026 13:20:00 +0000
asID:                     270122
IP address blocks:        189.51.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4f:89:56:d7:ef:13:60:95:a0:f4:02:64:fa:f7:16:c9:62:53:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
        Validity
            Not Before: Apr 25 13:15:00 2025 GMT
            Not After : Apr 24 13:20:00 2026 GMT
        Subject: CN=7CC9115333F262F7D723F55DB54DA66BA5E318E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:84:7d:b0:83:9e:3b:b2:98:7b:84:b5:d7:
                    0b:dd:28:63:90:90:e7:3b:7a:1c:09:ce:df:ed:28:
                    db:4a:e6:9b:82:ae:34:aa:a1:52:c3:d1:c5:95:2d:
                    4d:5c:63:4d:00:85:5b:ca:26:87:7f:fa:4c:27:bf:
                    5d:83:6a:f4:aa:1b:81:ea:fe:a3:13:72:c0:c2:16:
                    97:f6:cd:89:0b:78:42:6b:dd:2d:57:47:8d:c8:cf:
                    92:e8:77:03:0d:d2:a7:d0:89:f3:ae:7f:bb:22:e5:
                    93:1c:26:88:0b:fb:22:42:d7:e4:9b:47:52:0a:77:
                    03:8e:cd:b6:e1:f6:42:c8:2a:2e:3a:e0:17:f3:5b:
                    0b:29:80:d3:7e:08:af:22:de:2e:f6:5b:14:d1:2e:
                    16:40:2e:1d:91:25:84:02:80:56:b6:f4:3f:e0:24:
                    fe:e2:3b:81:0c:df:18:37:a0:9b:9d:a3:0c:36:ce:
                    48:6f:f4:68:23:fa:ff:9c:97:4c:60:9d:c1:4e:26:
                    e9:06:87:f7:ca:7b:8c:2f:8f:ee:72:eb:4b:60:4f:
                    7d:27:56:8c:25:5f:dc:63:8a:45:58:00:b5:d5:d9:
                    33:b7:63:d9:5e:51:8b:12:d5:1a:9f:dc:30:b2:88:
                    e9:5c:82:7f:f5:da:cb:36:8b:1f:27:f8:5c:b2:9a:
                    db:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C9:11:53:33:F2:62:F7:D7:23:F5:5D:B5:4D:A6:6B:A5:E3:18:E4
            X509v3 Authority Key Identifier:
                keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136382e302f32342d3234203d3e20323730313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:13:78:c8:4c:d8:34:62:2c:03:0f:84:32:f5:45:64:78:c1:
         fb:6d:a3:d8:aa:3b:64:31:32:34:dc:fe:00:ad:2b:3b:01:8b:
         ab:c2:af:a4:5e:80:a8:b2:37:e2:6b:0f:16:0c:e0:43:8a:f0:
         c5:90:16:1b:24:f8:15:72:d2:b5:a6:34:96:94:49:93:d7:61:
         f4:f2:61:c8:2d:76:52:a7:2d:7c:d7:28:63:ed:33:12:74:4d:
         25:46:2a:07:12:e2:89:64:9a:df:cf:ae:e9:51:27:be:f7:71:
         8b:3c:4c:ed:18:12:e8:b7:35:b6:9e:12:6b:25:89:41:b4:74:
         c5:3c:de:99:07:b2:28:0e:4b:83:c7:2c:87:59:21:f7:39:a2:
         27:9a:47:d4:33:cf:48:88:62:a4:b7:7a:b2:fe:aa:2c:8c:1e:
         c3:ba:c2:2e:79:27:4e:95:2a:96:37:3f:80:32:d2:3b:0d:ee:
         ee:17:f4:99:da:1c:15:11:16:81:b8:74:c8:0e:c8:fe:e3:0b:
         ed:4e:bb:04:36:ba:b8:9c:a1:2c:1f:b9:4d:c3:7e:02:1a:e5:
         9a:7c:f9:a1:bb:9d:c9:4e:11:40:68:61:87:29:a7:ce:c9:e0:
         92:87:16:66:cc:90:9a:9e:40:d0:39:84:60:cb:17:5b:12:36:
         81:17:4c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:57 2025 by rpki-client on console.sobornost.net