Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3137312e302f32342d3234203d3e20323730313232.roa
File:                     3138392e35312e3137312e302f32342d3234203d3e20323730313232.roa (raw, json)
Hash identifier:          bF4r9IXRMvW0ouK8TaDmuJ9tmjwCPTjbM3d05Yu5XfE=
Subject key identifier:   8C:86:05:27:14:B7:49:07:5A:1D:2B:AD:72:A5:C1:B3:1B:23:6C:10
Certificate issuer:       /CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
Certificate serial:       0474EF08DC6ED0D69AB252CC59A2890B7191A695
Authority key identifier: C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3137312e302f32342d3234203d3e20323730313232.roa
Signing time:             Fri 25 Apr 2025 13:25:01 +0000
ROA not before:           Fri 25 Apr 2025 13:20:01 +0000
ROA not after:            Fri 24 Apr 2026 13:25:01 +0000
asID:                     270122
IP address blocks:        189.51.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:74:ef:08:dc:6e:d0:d6:9a:b2:52:cc:59:a2:89:0b:71:91:a6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AF8630C728235D6D2C519F20712CEDAD9E5B6B
        Validity
            Not Before: Apr 25 13:20:01 2025 GMT
            Not After : Apr 24 13:25:01 2026 GMT
        Subject: CN=8C86052714B749075A1D2BAD72A5C1B31B236C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:45:b3:dd:ef:6d:95:96:a9:1a:a6:12:5c:
                    ae:0a:74:de:df:32:18:69:21:4d:9b:02:dc:a2:be:
                    07:8e:be:8f:3d:81:af:24:b6:cd:a2:6f:ca:34:4d:
                    bb:df:aa:a3:56:5e:05:2c:a8:46:d2:98:7e:f3:96:
                    c8:a0:96:d9:fc:ca:1d:9b:85:33:be:a0:dc:73:83:
                    70:85:e8:b1:6b:4d:40:07:6b:df:37:10:cc:bd:5b:
                    62:63:68:9e:ad:6c:f1:02:36:71:ed:43:30:c1:84:
                    83:a3:69:05:0c:da:f4:ea:69:5d:0c:7c:dc:7c:90:
                    dd:a7:29:87:51:d5:3c:00:92:50:bc:46:da:82:54:
                    7e:e3:e8:c1:e5:3c:3f:ef:6e:7c:95:24:e1:13:99:
                    e4:47:10:a9:56:7c:3c:44:a7:c0:82:f7:a7:1a:51:
                    e4:cd:cd:15:6f:cd:ca:80:ea:ff:ee:28:e1:d4:92:
                    9f:d6:3e:c9:fc:d0:be:ec:fd:3c:0d:2e:11:f7:01:
                    e4:d4:dd:99:a5:6c:6b:3a:32:cf:f5:47:9e:91:7e:
                    5c:40:3e:98:d5:05:05:82:0c:0a:0a:3b:da:8e:3e:
                    d9:6b:bb:5d:5b:7a:3c:dd:43:a6:e7:a2:6d:b4:af:
                    32:d9:68:a8:86:cc:e0:89:7b:a5:e8:60:f7:1a:e0:
                    9f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:86:05:27:14:B7:49:07:5A:1D:2B:AD:72:A5:C1:B3:1B:23:6C:10
            X509v3 Authority Key Identifier:
                keyid:C5:AF:86:30:C7:28:23:5D:6D:2C:51:9F:20:71:2C:ED:AD:9E:5B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5AF8630C728235D6D2C519F20712CEDAD9E5B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B4205FE62AEF214048E4D7C4F59B26453B8EB549F43F98BF53F3D442E6BE522/0/3138392e35312e3137312e302f32342d3234203d3e20323730313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:a9:20:17:7c:c6:64:e7:e9:3f:82:11:75:5f:af:c6:ea:77:
         7d:ec:a2:e6:3e:15:a2:6e:1a:e1:86:fd:ed:2c:8b:de:35:ff:
         d7:96:75:f2:f4:1c:73:7c:79:e1:f4:63:5d:df:02:f4:92:2f:
         89:54:00:34:9c:60:a1:dd:ba:ac:da:d3:37:d5:c8:9d:9e:78:
         93:38:77:ba:6f:13:ad:8f:84:f4:da:38:4b:54:2e:24:93:d6:
         94:59:86:36:5b:a1:0d:9d:93:cc:c2:6e:1d:06:86:e2:94:47:
         e2:7a:d8:38:63:8f:81:fe:2f:77:36:02:b6:02:56:d6:0b:14:
         55:13:1f:c6:c1:59:f9:8a:30:bd:dc:1e:e8:39:44:61:f8:67:
         e2:9b:47:b4:47:aa:d9:d0:b5:d4:b3:cf:22:7f:c2:71:9e:ba:
         6e:96:db:50:af:0a:85:a0:e3:dd:24:f3:07:cf:97:b3:50:52:
         1e:c5:47:49:f0:e4:b9:da:ca:ce:70:8e:f2:90:c5:a7:3a:5b:
         68:25:d0:4e:fe:f3:4a:bf:04:c7:1a:c6:68:15:2d:ce:4e:c6:
         eb:fc:62:fa:6d:da:cf:55:89:a7:ba:eb:fe:f1:d8:a7:87:75:
         f5:0b:63:3c:40:7c:b9:b2:75:95:99:a5:b1:6d:6b:cd:2e:80:
         9b:01:06:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:57 2025 by rpki-client on console.sobornost.net