Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136392e302f32342d3234203d3e20323730313131.roa
File:                     3138392e35312e3136392e302f32342d3234203d3e20323730313131.roa (raw, json)
Hash identifier:          uZ46KoypXsiaZkEmeOsFjW4RWd2DDE/wdETak2oq15M=
Subject key identifier:   E7:EE:76:43:4C:50:A2:F7:AC:DD:BD:B6:98:5D:F5:53:9B:A7:DF:C5
Certificate issuer:       /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial:       2F43C779D67A20A986E8006153A9BE67612BB3CF
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136392e302f32342d3234203d3e20323730313131.roa
Signing time:             Sun 20 Apr 2025 01:35:02 +0000
ROA not before:           Sun 20 Apr 2025 01:30:02 +0000
ROA not after:            Sun 19 Apr 2026 01:35:02 +0000
asID:                     270111
IP address blocks:        189.51.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:43:c7:79:d6:7a:20:a9:86:e8:00:61:53:a9:be:67:61:2b:b3:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
        Validity
            Not Before: Apr 20 01:30:02 2025 GMT
            Not After : Apr 19 01:35:02 2026 GMT
        Subject: CN=E7EE76434C50A2F7ACDDBDB6985DF5539BA7DFC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:ce:69:82:82:3b:2d:ce:f1:6b:e3:21:ca:
                    c3:f5:39:5c:b7:f1:09:2c:ec:fd:bd:d0:ae:61:bf:
                    2e:2a:95:fa:fb:05:ae:00:d8:74:cb:c0:23:97:45:
                    1d:f1:98:82:e8:9d:72:be:eb:0f:e6:da:ca:99:47:
                    17:7d:22:e2:ef:41:19:cc:59:99:a1:13:4f:cf:e2:
                    f7:a5:6f:5a:ea:cd:42:5d:d4:4f:73:b4:ca:c6:c7:
                    a5:8e:ee:da:b0:93:78:ff:02:a3:2a:00:86:e6:6d:
                    cc:b2:82:27:18:9a:8c:d2:f8:4c:92:fd:5f:25:ad:
                    96:b2:13:d9:3d:96:e4:35:30:d5:cc:5b:e4:1b:1c:
                    2f:85:d3:4e:4d:ed:e2:c6:77:87:9f:63:2d:26:a7:
                    15:d8:23:a5:52:98:68:a5:7e:51:ca:d4:d8:39:9f:
                    4c:2a:05:1a:2a:04:5e:c6:77:96:09:42:56:73:e1:
                    9e:4e:cb:a6:4a:0a:71:70:4a:13:96:08:4e:f2:85:
                    b2:1d:88:ad:c4:56:f2:74:2b:01:d8:fb:b8:4a:4e:
                    97:48:a3:f6:4d:63:d1:1b:ea:d8:12:96:d0:80:7e:
                    ae:21:b8:5f:9a:8a:a3:fe:f7:b3:33:63:64:5c:7e:
                    94:1f:9d:73:5c:11:15:69:b3:e4:d2:82:8c:cb:41:
                    ad:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EE:76:43:4C:50:A2:F7:AC:DD:BD:B6:98:5D:F5:53:9B:A7:DF:C5
            X509v3 Authority Key Identifier:
                keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136392e302f32342d3234203d3e20323730313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:a9:55:d7:e4:05:ab:ea:dc:19:03:cb:d9:4c:c0:c2:b4:25:
         44:6c:bb:9d:c7:98:96:b6:91:cf:fd:e6:b0:e1:15:84:8d:2c:
         65:d2:8d:a8:b2:f6:4b:5c:7f:98:5b:d1:78:e9:e0:45:fe:6b:
         ba:d6:55:a4:4b:26:73:3c:6c:07:ac:df:6c:d2:a0:d8:a0:a8:
         63:76:6f:4e:cc:67:80:4c:9e:a3:44:d3:9c:a0:6b:00:f9:5b:
         e7:ff:5a:54:1a:f9:a7:28:75:ac:b6:c7:79:ed:90:2a:da:8e:
         52:48:3b:bc:f2:a5:d0:56:c3:3d:3c:b2:09:3b:25:08:73:c6:
         aa:11:94:7b:23:09:b4:33:64:b9:cf:5a:f2:4a:5f:85:aa:ce:
         9b:53:32:6b:93:93:8f:6f:b6:45:98:a7:a0:53:05:97:5a:34:
         75:f3:5f:4b:8a:22:cb:60:d7:12:e1:40:4a:18:54:66:4d:3a:
         96:f1:5f:00:b0:5f:f9:09:7d:5d:21:ae:56:66:a0:ca:97:c7:
         7a:40:f9:f7:b6:a5:27:0a:6e:ec:fd:e9:2d:70:0d:e7:91:ad:
         0f:c8:ff:84:b3:5f:74:60:52:6a:41:b8:d8:9c:fb:3f:97:df:
         a2:e6:bd:38:87:b6:94:fe:ee:58:3f:ee:b8:fa:7d:a5:a2:93:
         1c:5d:7f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:57 2025 by rpki-client on console.sobornost.net