Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136392e302f32342d3234203d3e20323730313232.roa
File:                     3138392e35312e3136392e302f32342d3234203d3e20323730313232.roa (raw, json)
Hash identifier:          YpQU+qO4aGBz+yJyWBlAJFV5Zuho5fbxaNgH27Q08Wc=
Subject key identifier:   EC:78:97:33:35:22:F0:63:E1:5F:11:A2:BC:62:BC:30:EE:AF:62:26
Certificate issuer:       /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial:       38D39FC35F2C91C2F9A5A50BA0CE6DD0AEA5E416
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136392e302f32342d3234203d3e20323730313232.roa
Signing time:             Fri 25 Apr 2025 13:25:01 +0000
ROA not before:           Fri 25 Apr 2025 13:20:01 +0000
ROA not after:            Fri 24 Apr 2026 13:25:01 +0000
asID:                     270122
IP address blocks:        189.51.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d3:9f:c3:5f:2c:91:c2:f9:a5:a5:0b:a0:ce:6d:d0:ae:a5:e4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
        Validity
            Not Before: Apr 25 13:20:01 2025 GMT
            Not After : Apr 24 13:25:01 2026 GMT
        Subject: CN=EC7897333522F063E15F11A2BC62BC30EEAF6226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:a5:83:36:0f:55:80:71:29:2f:f0:4b:40:
                    66:7b:81:c9:a0:4a:4a:cd:12:4b:68:e2:1e:3c:cd:
                    99:14:a7:aa:6e:46:ce:e9:49:50:7d:09:05:43:ba:
                    81:1e:2e:3a:b2:21:09:7d:f4:c0:26:98:d3:7b:b3:
                    62:35:0f:8f:80:31:21:25:f8:61:ab:51:91:3d:a9:
                    88:4b:cd:95:02:ee:21:8f:8a:72:96:2a:7a:4c:53:
                    49:ef:06:f1:db:b5:1b:fb:1f:b2:a6:58:1e:d7:a0:
                    50:1e:74:bd:9b:cc:67:ea:a6:dd:5f:b5:d3:43:e2:
                    29:b4:f7:d8:29:9d:f7:c1:9e:b0:15:56:25:3b:1d:
                    1e:ac:44:e0:96:c4:ba:47:6d:51:e6:9c:1a:3f:89:
                    fc:d6:fd:89:ba:55:d8:39:6c:b9:f9:79:88:3d:51:
                    28:30:d7:e3:84:8b:37:e1:57:d1:7d:1f:b1:26:f5:
                    2b:de:09:73:cf:13:89:f7:39:b5:7c:d2:4b:d4:90:
                    fe:ad:fa:57:0a:c5:45:a8:e6:87:d8:ae:52:e0:76:
                    52:bf:b1:09:c9:60:30:13:57:34:43:6c:2a:73:85:
                    d8:2f:70:ae:11:ab:e6:8b:c7:e7:2c:88:54:b4:3c:
                    3e:d0:16:d2:ec:0e:86:eb:cf:e1:20:ba:67:05:89:
                    2b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:78:97:33:35:22:F0:63:E1:5F:11:A2:BC:62:BC:30:EE:AF:62:26
            X509v3 Authority Key Identifier:
                keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3136392e302f32342d3234203d3e20323730313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:9a:8b:83:b8:c3:23:40:78:9a:7c:99:5b:3b:47:1d:c8:1b:
         5e:08:7c:e9:cd:c2:da:f4:8a:ee:1d:80:6d:0a:e9:38:10:05:
         a1:aa:20:a8:b7:5e:a0:d1:59:bf:bb:59:f4:e6:df:cb:12:83:
         c1:a9:fa:23:6c:44:a8:4e:31:b9:11:ac:31:09:fa:58:d1:3f:
         3b:e8:c0:c4:66:0a:b1:31:40:6d:48:5f:d9:60:6d:2b:f2:10:
         ac:58:cb:a5:c7:b4:2d:82:36:b9:31:80:85:9b:de:7c:80:ba:
         2b:0e:f7:7a:f4:e8:d5:5e:09:4f:3e:82:cb:9e:b2:88:be:0d:
         99:58:23:25:35:bb:34:e9:3e:98:9d:e9:54:0c:3c:b5:c7:d4:
         c6:80:73:2d:c5:e0:32:ff:7d:f9:33:61:68:dd:2d:40:9e:83:
         f7:8c:c2:92:9b:d3:4b:49:6d:f8:f8:47:eb:73:16:4f:1f:a6:
         a8:d7:c4:57:4d:61:01:1a:70:9c:9b:94:de:4a:40:ec:49:9c:
         ca:20:64:6a:00:f3:20:53:0f:48:35:56:81:2b:e6:c7:10:62:
         66:f0:bc:67:a1:1d:b4:d9:ee:e2:2d:56:2f:62:af:b2:0a:89:
         ff:4c:0a:34:b4:10:15:42:40:17:b7:60:57:63:7d:0e:86:03:
         f1:59:c9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:57 2025 by rpki-client on console.sobornost.net