Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CB5A0421A3DED423EB47007B5143A9F8534AFECF7F389CA73BC1D8204C04B97/0/3137302e38342e3235342e302f32342d3234203d3e20323732383434.roa
File:                     3137302e38342e3235342e302f32342d3234203d3e20323732383434.roa (raw, json)
Hash identifier:          XhjK53acqAyWyVpfAqjwmgKFtEdI6iApIW9iKqYHi/Q=
Subject key identifier:   58:96:07:60:EA:AA:62:E8:AF:2C:0F:8E:27:AC:EE:A0:E9:0E:47:A4
Certificate issuer:       /CN=9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946
Certificate serial:       4B029A63B72D1F193B41E0FBA4582BBAD0E32207
Authority key identifier: 9C:6D:7F:DF:EB:0E:FB:FC:DD:C3:2F:A4:6A:1C:74:CC:4C:C1:C9:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CB5A0421A3DED423EB47007B5143A9F8534AFECF7F389CA73BC1D8204C04B97/0/3137302e38342e3235342e302f32342d3234203d3e20323732383434.roa
Signing time:             Tue 04 Feb 2025 18:11:48 +0000
ROA not before:           Tue 04 Feb 2025 18:06:48 +0000
ROA not after:            Tue 03 Feb 2026 18:11:48 +0000
asID:                     272844
IP address blocks:        170.84.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CB5A0421A3DED423EB47007B5143A9F8534AFECF7F389CA73BC1D8204C04B97/0/9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CB5A0421A3DED423EB47007B5143A9F8534AFECF7F389CA73BC1D8204C04B97/0/9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:02:9a:63:b7:2d:1f:19:3b:41:e0:fb:a4:58:2b:ba:d0:e3:22:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946
        Validity
            Not Before: Feb  4 18:06:48 2025 GMT
            Not After : Feb  3 18:11:48 2026 GMT
        Subject: CN=58960760EAAA62E8AF2C0F8E27ACEEA0E90E47A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:4b:1a:88:98:7b:cd:f3:79:f9:97:62:37:
                    b2:2a:71:ee:91:0a:fc:0b:0f:ee:a5:cd:41:b9:0f:
                    7c:c9:20:94:d7:ad:09:bc:9d:55:d3:a4:98:fb:60:
                    00:e0:22:61:bc:fe:1e:48:ea:08:c0:fc:b4:b6:cd:
                    5a:86:c6:c2:68:a9:77:0a:3b:31:7b:d6:4a:4f:18:
                    7e:e1:c7:ca:3f:58:4b:fe:2d:01:60:9f:fd:ca:0a:
                    5b:5f:c5:f8:56:05:16:e5:c4:4d:94:40:da:a8:84:
                    9e:26:4b:20:f2:47:d6:dc:4e:51:5d:50:c6:4a:ac:
                    d2:5e:a4:62:17:54:9f:91:e3:5a:e3:c6:3f:a1:9f:
                    1e:3e:64:9b:eb:4d:f4:8e:29:69:e4:78:c1:da:bc:
                    fd:e8:4c:c3:29:01:4b:6b:98:52:dc:72:d7:84:8a:
                    76:f1:a5:ca:87:45:29:c0:f2:f1:2f:7c:24:d7:7f:
                    95:c3:f9:f6:bd:de:f2:31:9f:17:1a:2a:0d:2c:62:
                    47:75:47:21:eb:73:0e:17:1a:20:73:2d:80:0c:52:
                    80:11:df:48:a4:9d:9a:e6:01:df:96:aa:43:cc:f8:
                    70:ef:46:5e:9f:c2:cd:4b:4c:d2:fb:d3:31:04:25:
                    f2:56:af:0c:2a:41:0d:eb:db:e8:17:36:ad:25:be:
                    3b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:96:07:60:EA:AA:62:E8:AF:2C:0F:8E:27:AC:EE:A0:E9:0E:47:A4
            X509v3 Authority Key Identifier:
                keyid:9C:6D:7F:DF:EB:0E:FB:FC:DD:C3:2F:A4:6A:1C:74:CC:4C:C1:C9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CB5A0421A3DED423EB47007B5143A9F8534AFECF7F389CA73BC1D8204C04B97/0/9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CB5A0421A3DED423EB47007B5143A9F8534AFECF7F389CA73BC1D8204C04B97/0/3137302e38342e3235342e302f32342d3234203d3e20323732383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:99:cc:2f:df:bb:f3:20:d5:fd:7e:88:81:78:f8:34:23:eb:
         b8:38:71:4c:06:fa:95:5e:c5:f2:d7:72:a4:ed:0b:39:89:7b:
         4a:8c:e1:5a:e9:09:9b:b1:29:90:1b:0e:76:14:31:6c:83:e4:
         be:42:aa:95:54:17:80:95:46:dd:12:58:80:e1:cb:4f:d9:79:
         4b:fd:c0:27:67:a8:5a:5f:47:90:69:64:13:72:58:53:c6:62:
         ad:54:27:82:f9:5d:6f:58:7e:9a:9d:a2:2e:0a:4d:6f:47:b6:
         70:1d:3a:2d:0a:b0:c8:f4:a3:e4:22:07:28:f6:6c:0b:78:05:
         a4:ca:de:18:07:69:3e:4f:dc:30:8e:5d:e6:43:7f:ae:0a:dc:
         c8:d8:b7:80:0b:ff:5a:10:c3:3d:df:3e:5e:12:62:a5:44:62:
         b6:5f:d8:6e:7f:34:cd:1d:e9:71:aa:48:d1:06:df:7b:0b:96:
         72:22:04:0d:37:55:24:f6:19:73:04:eb:3c:95:fe:b9:6a:1f:
         e7:06:ac:4f:20:03:3e:fb:92:0b:90:8c:4e:21:98:f7:a1:f4:
         34:09:28:c2:a8:b7:88:d3:05:4c:1b:af:38:e7:7c:38:bc:9a:
         54:73:07:e8:df:6e:20:e5:40:00:5e:fc:2a:88:4c:cb:aa:ab:
         5b:ea:69:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:37 2025 by rpki-client on console.sobornost.net