Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3133382e3131372e3232392e302f32342d3234203d3e203238343631.roa
File:                     3133382e3131372e3232392e302f32342d3234203d3e203238343631.roa (raw, json)
Hash identifier:          O9/F9rRZTr+fPELfCSj0biKhD9hjp0g+Tu75AFeNnxI=
Subject key identifier:   AC:2B:1A:4A:79:3D:A3:51:C8:80:D1:2D:40:FA:11:53:EF:C7:67:98
Certificate issuer:       /CN=3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6
Certificate serial:       73536F19216F9694E9FB08A94F27AE109409ABBF
Authority key identifier: 36:32:90:0A:5F:3F:72:A0:6C:F6:EC:B7:B9:D3:B1:E3:35:6D:A9:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3133382e3131372e3232392e302f32342d3234203d3e203238343631.roa
Signing time:             Mon 21 Apr 2025 19:15:36 +0000
ROA not before:           Mon 21 Apr 2025 19:10:36 +0000
ROA not after:            Mon 20 Apr 2026 19:15:36 +0000
asID:                     28461
IP address blocks:        138.117.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:53:6f:19:21:6f:96:94:e9:fb:08:a9:4f:27:ae:10:94:09:ab:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6
        Validity
            Not Before: Apr 21 19:10:36 2025 GMT
            Not After : Apr 20 19:15:36 2026 GMT
        Subject: CN=AC2B1A4A793DA351C880D12D40FA1153EFC76798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:67:f3:ed:d8:32:55:ed:02:14:e2:d4:83:50:
                    6e:7c:1e:ac:99:dc:24:09:5a:2f:37:eb:95:ee:a1:
                    c6:74:3a:f2:4e:13:27:70:13:5b:84:de:47:95:3f:
                    46:bc:dd:6c:de:e2:1f:82:4c:70:ed:38:97:71:72:
                    4c:d3:04:40:d3:43:fa:fc:a6:86:79:6e:d5:f7:7c:
                    3f:16:e0:a3:6a:38:5c:b1:cf:6a:6e:9b:50:4c:16:
                    39:ed:14:57:90:2e:4e:45:ca:4b:a8:f8:93:fc:5c:
                    e3:27:0c:f2:62:78:23:ca:9f:21:3e:74:76:f7:40:
                    a1:8f:95:5d:45:92:9a:57:61:0c:c7:37:b4:34:a7:
                    43:f2:ba:7d:b3:80:ee:fa:03:2c:55:7e:fd:c0:0c:
                    ca:7e:5f:46:8f:39:1c:83:e9:94:57:fe:21:3b:5c:
                    2d:c5:7c:ee:59:02:c0:4b:8e:bd:76:4b:15:fb:c6:
                    94:3b:67:af:1c:1a:8d:be:e6:a0:3a:67:df:c2:88:
                    19:a9:7a:5f:38:20:a4:f6:85:bd:a9:40:19:90:f1:
                    37:c4:2b:de:88:84:bc:f4:b8:04:56:f1:31:f8:28:
                    5c:ba:23:ce:66:15:ce:49:43:7b:f8:a8:08:55:ac:
                    62:42:d7:df:4f:1f:01:c2:99:18:e8:3f:d7:bb:e5:
                    9e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2B:1A:4A:79:3D:A3:51:C8:80:D1:2D:40:FA:11:53:EF:C7:67:98
            X509v3 Authority Key Identifier:
                keyid:36:32:90:0A:5F:3F:72:A0:6C:F6:EC:B7:B9:D3:B1:E3:35:6D:A9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3133382e3131372e3232392e302f32342d3234203d3e203238343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:38:da:71:aa:93:6f:0f:01:0b:6d:f2:ec:3f:cc:74:72:53:
         3e:92:de:9d:36:ef:eb:7c:41:03:f4:e6:18:cf:b3:f9:69:fc:
         3e:a4:e8:44:7e:8e:ac:15:6c:00:dd:df:ef:8b:f7:c6:e4:70:
         41:c4:a4:a8:eb:31:d8:b3:7e:69:4f:a8:69:9f:d3:ac:a0:36:
         31:03:68:14:b9:d3:8b:c9:eb:d9:21:ac:20:e0:6d:19:3e:b5:
         92:bf:9a:d6:52:4c:89:f1:08:b5:7b:9c:6a:21:b1:63:c3:61:
         61:8b:22:7b:29:9a:fb:bd:92:fd:75:25:ee:0b:c9:a6:71:ef:
         2a:89:e2:8c:e1:bd:b5:e6:04:50:38:c3:bd:d1:bb:42:61:81:
         98:05:cf:85:bc:a1:72:76:58:dd:5d:d6:c6:33:fc:a8:20:84:
         ce:82:d2:cb:8e:d1:38:33:52:ec:a4:09:08:0d:12:f1:38:64:
         9a:51:5b:4f:11:d0:35:80:a4:3e:db:21:15:d6:84:c0:8e:1c:
         4f:18:3e:0f:c2:af:74:4e:07:ed:ff:dc:96:ba:13:da:e7:b9:
         8d:c1:29:e1:b8:bb:9d:17:07:ba:6c:9e:ff:e5:f9:7d:cc:25:
         8d:c7:7e:fa:5d:8d:2b:94:32:03:4e:7f:99:cd:4b:49:80:4c:
         c1:22:15:78
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUc1NvGSFvlpTp+wipTyeuEJQJq78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYzMjkwMEE1RjNGNzJBMDZDRjZFQ0I3QjlEM0IxRTMz
NTZEQTlGNjAeFw0yNTA0MjExOTEwMzZaFw0yNjA0MjAxOTE1MzZaMDMxMTAvBgNV
BAMTKEFDMkIxQTRBNzkzREEzNTFDODgwRDEyRDQwRkExMTUzRUZDNzY3OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKZ/Pt2DJV7QIU4tSDUG58HqyZ
3CQJWi8365XuocZ0OvJOEydwE1uE3keVP0a83Wze4h+CTHDtOJdxckzTBEDTQ/r8
poZ5btX3fD8W4KNqOFyxz2pum1BMFjntFFeQLk5Fykuo+JP8XOMnDPJieCPKnyE+
dHb3QKGPlV1FkppXYQzHN7Q0p0Pyun2zgO76AyxVfv3ADMp+X0aPORyD6ZRX/iE7
XC3FfO5ZAsBLjr12SxX7xpQ7Z68cGo2+5qA6Z9/CiBmpel84IKT2hb2pQBmQ8TfE
K96IhLz0uARW8TH4KFy6I85mFc5JQ3v4qAhVrGJC199PHwHCmRjoP9e75Z79AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUrCsaSnk9o1HIgNEtQPoRU+/HZ5gwHwYDVR0j
BBgwFoAUNjKQCl8/cqBs9uy3udOx4zVtqfYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNkNGMDY4Q0Y0QkE0MzQ3ODJGREREN0IyNEFBQTExNjUx
NTI4QkJFNUEzOUFGOTIyMkRBRDI4N0FBMzI2NzhCLzAvMzYzMjkwMEE1RjNGNzJB
MDZDRjZFQ0I3QjlEM0IxRTMzNTZEQTlGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNjMyOTAwQTVGM0Y3MkEwNkNG
NkVDQjdCOUQzQjFFMzM1NkRBOUY2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjZDRjA2OENGNEJBNDM0NzgyRkRERDdCMjRBQUExMTY1MTUyOEJCRTVB
MzlBRjkyMjJEQUQyODdBQTMyNjc4Qi8wLzMxMzMzODJlMzEzMTM3MmUzMjMyMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzQzNjMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinXl
MA0GCSqGSIb3DQEBCwUAA4IBAQDFONpxqpNvDwELbfLsP8x0clM+kt6dNu/rfEED
9OYYz7P5afw+pOhEfo6sFWwA3d/vi/fG5HBBxKSo6zHYs35pT6hpn9OsoDYxA2gU
udOLyevZIawg4G0ZPrWSv5rWUkyJ8Qi1e5xqIbFjw2FhiyJ7KZr7vZL9dSXuC8mm
ce8qieKM4b215gRQOMO90btCYYGYBc+FvKFydljdXdbGM/yoIITOgtLLjtE4M1Ls
pAkIDRLxOGSaUVtPEdA1gKQ+2yEV1oTAjhxPGD4Pwq90Tgft/9yWuhPa57mNwSnh
uLudFwe6bJ7/5fl9zCWNx376XY0rlDIDTn+ZzUtJgEzBIhV4
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:14 2025 by rpki-client on console.sobornost.net