Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/3138392e34352e3137362e302f32342d3234203d3e20323639393738.roa
File:                     3138392e34352e3137362e302f32342d3234203d3e20323639393738.roa (raw, json)
Hash identifier:          dDyQQc+iwfeIDNgaNP2Spg6fdROXMfhBXDhE2UxhyT0=
Subject key identifier:   95:72:71:9A:09:87:50:C4:84:ED:81:27:9E:CE:9F:F0:C1:12:0F:25
Certificate issuer:       /CN=6A3360A7AAF500169AA1D3966EF9EDFA825A544E
Certificate serial:       359D7D20594B304101E68FE0A258F6D850CE1BD2
Authority key identifier: 6A:33:60:A7:AA:F5:00:16:9A:A1:D3:96:6E:F9:ED:FA:82:5A:54:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/3138392e34352e3137362e302f32342d3234203d3e20323639393738.roa
Signing time:             Tue 04 Feb 2025 19:57:57 +0000
ROA not before:           Tue 04 Feb 2025 19:52:57 +0000
ROA not after:            Tue 03 Feb 2026 19:57:57 +0000
asID:                     269978
IP address blocks:        189.45.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9d:7d:20:59:4b:30:41:01:e6:8f:e0:a2:58:f6:d8:50:ce:1b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A3360A7AAF500169AA1D3966EF9EDFA825A544E
        Validity
            Not Before: Feb  4 19:52:57 2025 GMT
            Not After : Feb  3 19:57:57 2026 GMT
        Subject: CN=9572719A098750C484ED81279ECE9FF0C1120F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:69:53:5d:c4:8d:66:82:03:62:e7:74:e5:40:
                    2b:b4:84:89:99:61:27:c2:27:2c:ed:5c:12:82:a0:
                    9e:cc:2a:47:f7:e4:d5:fa:36:f8:ad:b5:ef:87:92:
                    40:73:de:8e:1d:22:81:92:24:59:fa:91:ed:da:04:
                    3b:64:00:23:4d:f3:ac:87:69:f6:12:1b:d6:ca:2a:
                    bc:f7:ab:59:67:19:19:19:95:ac:c3:0b:37:75:70:
                    40:7a:bc:66:7f:4f:82:bf:b2:2a:4c:4f:52:ec:aa:
                    bd:48:54:65:8b:e7:84:1d:d7:11:fa:a6:2c:87:3b:
                    7d:33:e4:87:6e:73:ee:28:f8:b0:69:d0:ad:56:cd:
                    1a:47:ac:a1:92:8f:dd:19:5d:26:2f:eb:7c:9b:9c:
                    4a:b0:75:e2:ea:6e:86:87:0d:7b:2a:91:7e:d0:1e:
                    3d:c9:41:33:0c:cd:88:66:33:e7:7b:7d:3d:d6:ac:
                    bd:ac:10:19:96:24:bf:3c:b5:60:62:e6:6c:83:0b:
                    55:89:e8:14:76:a7:7a:3e:c5:c1:18:93:9f:b6:82:
                    49:d4:55:79:49:d9:01:ab:50:a0:cd:4b:6d:ce:f7:
                    93:78:d1:af:6a:51:1a:eb:13:eb:25:8c:65:c0:c0:
                    bc:d7:9b:21:24:e4:82:2d:c9:22:32:a7:b4:5a:a3:
                    5a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:72:71:9A:09:87:50:C4:84:ED:81:27:9E:CE:9F:F0:C1:12:0F:25
            X509v3 Authority Key Identifier:
                keyid:6A:33:60:A7:AA:F5:00:16:9A:A1:D3:96:6E:F9:ED:FA:82:5A:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/3138392e34352e3137362e302f32342d3234203d3e20323639393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:e6:71:e8:6f:c3:c5:85:de:30:f8:6a:ea:2c:49:97:e8:d0:
         1b:a9:05:5e:be:a3:c9:68:0f:d3:8c:ba:32:83:ce:2f:bc:2b:
         33:8a:77:fb:60:24:2b:ad:c9:4c:3e:97:d6:46:12:7d:23:8f:
         9a:b8:6f:50:6c:98:61:cf:d2:44:4c:48:b3:21:1c:40:b3:f4:
         1c:99:0f:52:23:c5:a9:db:07:c9:2c:1b:19:6e:3f:1f:12:c1:
         33:35:47:2b:1b:84:5d:06:d7:fb:1e:15:1b:be:65:b7:9a:6a:
         8a:9b:59:6c:72:36:da:52:db:cd:09:f9:e8:6c:da:f6:a4:24:
         1d:25:41:0d:d6:8b:f2:39:f3:cc:29:f3:58:e1:1a:14:fc:7b:
         24:59:76:19:21:83:d7:68:65:16:43:16:21:94:72:ff:60:30:
         20:d0:f5:ff:e0:67:27:5d:65:f1:c4:20:f9:f9:93:4c:d0:10:
         3f:e9:59:33:6f:c2:f8:d3:e0:94:84:a9:af:fb:3c:6c:a5:c0:
         3a:71:e9:b3:b6:65:22:5f:2b:d1:47:d6:61:79:22:bb:ea:a9:
         dc:7d:e6:ae:d7:61:b4:aa:d6:2d:dc:f3:50:fa:db:19:c3:fe:
         3e:69:fa:03:5e:df:36:50:08:19:14:51:16:61:00:c5:a4:32:
         ee:4b:17:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:20 2025 by rpki-client on console.sobornost.net