Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/3133382e35392e3137322e302f32322d3234203d3e20323633373436.roa
File:                     3133382e35392e3137322e302f32322d3234203d3e20323633373436.roa (raw, json)
Hash identifier:          8BaT5YzYP3Byrwbw/93a+QLSDNZ6kwwRMriduvdD4OE=
Subject key identifier:   28:03:26:18:54:E7:DF:E2:69:5E:75:3B:69:A9:27:EA:E7:C7:AF:DD
Certificate issuer:       /CN=DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1
Certificate serial:       5B2777C6AC179F81C793F044D87AA35D98655587
Authority key identifier: DC:9A:CC:F7:76:CB:F0:37:0B:3B:A2:78:3B:A7:A4:A1:14:07:24:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/3133382e35392e3137322e302f32322d3234203d3e20323633373436.roa
Signing time:             Mon 14 Apr 2025 16:14:49 +0000
ROA not before:           Mon 14 Apr 2025 16:09:49 +0000
ROA not after:            Mon 13 Apr 2026 16:14:49 +0000
asID:                     263746
IP address blocks:        138.59.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:27:77:c6:ac:17:9f:81:c7:93:f0:44:d8:7a:a3:5d:98:65:55:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1
        Validity
            Not Before: Apr 14 16:09:49 2025 GMT
            Not After : Apr 13 16:14:49 2026 GMT
        Subject: CN=2803261854E7DFE2695E753B69A927EAE7C7AFDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:21:67:40:82:43:25:86:06:93:93:b2:39:5e:
                    12:8d:83:04:48:f0:3f:40:90:f7:7d:0a:2d:ca:a1:
                    9b:12:01:06:c7:40:f3:17:4e:cb:4a:70:6e:4b:56:
                    e8:66:22:b2:2b:34:70:29:48:74:8a:4e:26:25:cc:
                    1d:d9:48:38:8f:5d:6e:15:22:79:e8:f9:7d:d7:e4:
                    a3:67:7a:78:13:57:b5:02:72:1a:da:f8:4a:98:ce:
                    55:40:e4:4d:9f:53:98:e4:08:f0:f9:05:82:65:40:
                    5a:be:af:f9:8d:dd:e2:b1:70:e4:f1:b2:e4:4e:02:
                    c9:d9:e1:80:cf:bf:09:b3:68:b2:16:ba:d3:98:79:
                    62:6f:ce:85:8d:7f:d8:8e:cf:aa:b1:9d:fe:24:06:
                    df:4d:59:51:6b:6b:ba:b0:56:57:5e:cf:6a:92:d2:
                    20:c9:7d:ac:62:a4:82:79:d7:98:fe:e5:30:00:2d:
                    4f:34:9f:a8:eb:c7:43:f4:3c:f2:8c:99:11:93:42:
                    d6:c1:56:e3:67:36:de:2b:04:c7:62:e1:95:d8:55:
                    fa:6b:a5:98:db:1f:cb:9c:e6:f4:94:e2:bd:7d:88:
                    f2:01:9c:30:3b:98:e0:cf:36:47:80:fb:55:a0:f4:
                    01:3e:c3:9a:cb:9f:08:ca:28:92:bf:4b:db:b3:c2:
                    c9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:03:26:18:54:E7:DF:E2:69:5E:75:3B:69:A9:27:EA:E7:C7:AF:DD
            X509v3 Authority Key Identifier:
                keyid:DC:9A:CC:F7:76:CB:F0:37:0B:3B:A2:78:3B:A7:A4:A1:14:07:24:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/3133382e35392e3137322e302f32322d3234203d3e20323633373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:9a:22:d2:bf:df:1f:46:0c:38:9d:fc:65:b2:44:c4:63:b9:
         00:fa:2b:e2:6d:c5:ff:9e:50:23:07:dd:95:34:c0:00:84:a3:
         fb:78:c3:46:ce:7d:5f:f1:44:37:70:1b:22:e5:c8:a1:26:74:
         4c:3b:8a:ec:be:9a:d9:91:19:f9:41:f0:5a:bd:cf:d9:7c:fa:
         a3:5a:09:e5:98:85:36:db:94:bb:38:75:98:18:f1:0c:bd:a9:
         75:c5:d8:3a:27:91:c2:bc:95:31:9b:44:40:93:d3:b7:82:bc:
         30:85:a3:99:84:2f:46:0f:67:0b:63:b5:30:44:89:fe:c9:69:
         21:e1:ab:53:b1:f4:5e:cb:e0:c1:dd:c7:5c:6a:24:3c:d3:93:
         94:81:6e:45:25:2c:5b:06:5e:98:58:26:9d:c1:0b:44:14:89:
         97:68:81:cf:83:8e:c9:3d:fb:eb:75:84:5e:b0:73:6b:6b:2a:
         21:a8:00:93:aa:da:b8:06:77:af:49:7a:8c:34:65:b2:f9:00:
         4b:13:76:f7:e3:92:96:7d:c0:21:c9:82:5c:b3:f2:d6:6e:97:
         29:89:e2:17:a3:b4:46:52:3e:08:7f:f5:8e:c2:6a:52:f8:72:
         6d:5e:48:ac:e6:98:e7:01:58:a9:1d:03:4e:2d:7c:9c:5d:ee:
         04:76:27:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:10 2025 by rpki-client on console.sobornost.net