Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3137302e302f32342d3234203d3e20323730313131.roa
File:                     3138392e35312e3137302e302f32342d3234203d3e20323730313131.roa (raw, json)
Hash identifier:          M/7HY6FK7WrZzwh8N9awxUuVwti1tHMiGs6UCZqU0aw=
Subject key identifier:   72:E5:83:5A:A7:B7:8F:3D:60:90:43:BB:EF:32:87:85:86:33:43:7E
Certificate issuer:       /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial:       4856CC1D0ECEA58969B911D78469F2AC1480FCD4
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3137302e302f32342d3234203d3e20323730313131.roa
Signing time:             Sun 20 Apr 2025 01:35:00 +0000
ROA not before:           Sun 20 Apr 2025 01:30:00 +0000
ROA not after:            Sun 19 Apr 2026 01:35:00 +0000
asID:                     270111
IP address blocks:        189.51.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:56:cc:1d:0e:ce:a5:89:69:b9:11:d7:84:69:f2:ac:14:80:fc:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
        Validity
            Not Before: Apr 20 01:30:00 2025 GMT
            Not After : Apr 19 01:35:00 2026 GMT
        Subject: CN=72E5835AA7B78F3D609043BBEF3287858633437E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:2e:13:13:91:37:f4:3b:17:50:f6:9d:bd:
                    af:d2:b1:4a:4c:96:a9:07:67:74:a4:3c:35:44:7d:
                    0d:f5:13:9e:6a:0a:d0:72:a0:6e:96:a6:cf:0e:ac:
                    55:a0:c6:37:5c:0c:8a:b0:e5:b5:3e:32:9a:9e:40:
                    eb:05:61:6e:d9:0a:85:8e:1e:dd:0a:a6:56:68:a3:
                    c2:ec:be:13:17:d0:07:fc:4f:83:c5:9f:5d:c2:a3:
                    f4:07:35:23:1a:65:70:c3:04:33:99:2f:7b:66:9a:
                    ee:0d:4a:62:a4:e8:16:72:06:48:b4:22:10:55:1f:
                    6a:07:93:3a:b4:75:d1:af:7d:25:21:94:10:cf:14:
                    b3:9f:ee:cb:5c:33:9e:6f:8e:23:a9:26:00:17:e3:
                    46:46:0a:4e:53:41:15:eb:ca:27:f0:82:e2:eb:a2:
                    0d:aa:1b:b5:38:ba:6e:91:91:dc:12:31:f9:ad:d3:
                    e5:bb:1e:98:54:ea:af:bb:d5:b2:3d:ef:34:11:d9:
                    c2:36:e4:bf:65:5b:69:4c:74:40:de:a6:71:fe:27:
                    64:31:1d:3c:2c:70:0b:ac:79:81:99:a4:14:fb:c6:
                    56:43:33:30:2c:2a:7a:18:c9:e6:b6:ed:02:cd:1e:
                    09:eb:5c:7d:50:ca:5c:b9:c4:fa:9b:bf:fc:e1:79:
                    45:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E5:83:5A:A7:B7:8F:3D:60:90:43:BB:EF:32:87:85:86:33:43:7E
            X509v3 Authority Key Identifier:
                keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3137302e302f32342d3234203d3e20323730313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:08:7e:e8:cc:f1:78:ef:67:04:57:7f:79:12:bc:98:9b:07:
         b0:a9:66:bf:66:5b:4d:a7:7d:7c:6d:9b:7b:30:70:32:00:2f:
         d6:fa:33:27:90:8c:a0:68:da:ab:eb:6a:fc:ef:c1:0a:1c:8c:
         28:8d:e6:aa:ab:09:a9:8f:a4:d1:5f:84:c9:28:52:e7:54:d3:
         e1:e3:b0:c5:a1:99:4b:09:26:d8:e3:e6:e0:fe:ac:75:63:c4:
         2f:fd:e9:ce:5c:82:53:0a:bf:05:af:5b:20:81:88:21:2a:b1:
         24:08:15:31:33:36:e1:4a:08:88:8e:62:04:9b:88:d7:5a:0b:
         4d:05:bc:c5:97:a1:8c:46:78:99:7e:43:4d:48:2e:1d:e0:f6:
         21:fd:5c:73:77:f6:bb:6d:51:14:ac:ae:5d:72:6e:12:46:36:
         5c:9b:ac:bd:33:c3:07:1e:13:6c:a6:51:91:55:00:32:60:c3:
         f2:d2:d5:6e:e2:e3:50:55:fa:a9:bf:43:5a:32:34:26:0f:cb:
         b9:8f:da:d4:8a:c5:30:d0:bb:ec:5b:e3:5e:8c:fe:b2:75:12:
         48:d1:5b:3f:7b:50:9b:a2:11:3c:a5:00:43:6c:94:6a:5c:82:
         6a:12:e8:5a:46:ca:f9:a0:e5:5f:f7:8c:7e:b4:26:0e:00:77:
         97:ba:03:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:57 2025 by rpki-client on console.sobornost.net