Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3133382e3131372e3233302e302f32332d3234203d3e20323639393839.roa
File:                     3133382e3131372e3233302e302f32332d3234203d3e20323639393839.roa (raw, json)
Hash identifier:          +QYy1CYq8HBEmeY/FN4+VX60wjLvvLox/VhWPx4KaRM=
Subject key identifier:   AB:C4:63:F0:92:41:A1:9D:B3:2A:E8:C4:82:5C:46:D3:75:49:A0:A0
Certificate issuer:       /CN=3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6
Certificate serial:       045E3E63BD63F5BF0EFD4AFC168F95557C389062
Authority key identifier: 36:32:90:0A:5F:3F:72:A0:6C:F6:EC:B7:B9:D3:B1:E3:35:6D:A9:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3133382e3131372e3233302e302f32332d3234203d3e20323639393839.roa
Signing time:             Mon 21 Apr 2025 19:15:36 +0000
ROA not before:           Mon 21 Apr 2025 19:10:36 +0000
ROA not after:            Mon 20 Apr 2026 19:15:36 +0000
asID:                     269989
IP address blocks:        138.117.230.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5e:3e:63:bd:63:f5:bf:0e:fd:4a:fc:16:8f:95:55:7c:38:90:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6
        Validity
            Not Before: Apr 21 19:10:36 2025 GMT
            Not After : Apr 20 19:15:36 2026 GMT
        Subject: CN=ABC463F09241A19DB32AE8C4825C46D37549A0A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:ea:b0:50:e0:af:c9:82:bc:27:56:21:31:
                    a6:e4:d8:6e:48:1f:fc:43:89:b4:72:d7:d9:9d:fd:
                    4b:0b:87:fe:d5:24:49:77:7e:c5:ec:51:65:89:fc:
                    ae:e0:bd:5c:3e:8c:cf:a2:52:78:0c:35:79:28:f2:
                    0b:d4:0a:3c:fd:a7:da:4c:fc:77:14:c0:5f:1d:ab:
                    4e:14:f3:81:9d:c5:4a:dd:c2:19:3e:8c:b4:1a:02:
                    00:0e:51:54:01:05:54:33:38:61:58:88:10:e6:10:
                    12:ea:d1:e4:c9:3e:07:db:da:9a:78:51:6b:35:3f:
                    de:82:30:57:a9:07:db:f8:c1:82:31:62:03:8a:cb:
                    e5:73:02:26:bf:ce:88:f1:37:91:55:c0:e9:7a:9e:
                    cd:ba:78:f2:0f:61:7f:41:30:12:b3:8f:67:83:0d:
                    46:56:83:14:6c:a5:a3:55:1d:d3:ce:59:c7:5b:5e:
                    52:13:2a:be:7e:b6:51:41:f7:78:70:c2:93:a9:31:
                    1f:a8:84:af:04:e7:92:7d:d5:f0:f0:ff:d7:9c:75:
                    50:18:b0:bb:3a:56:d7:9b:a2:55:c6:61:1a:27:4a:
                    83:63:95:92:55:71:e8:6e:26:8c:f2:13:46:a2:f3:
                    81:22:51:b4:cc:ae:00:ea:d2:94:e1:63:a4:a1:7f:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C4:63:F0:92:41:A1:9D:B3:2A:E8:C4:82:5C:46:D3:75:49:A0:A0
            X509v3 Authority Key Identifier:
                keyid:36:32:90:0A:5F:3F:72:A0:6C:F6:EC:B7:B9:D3:B1:E3:35:6D:A9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3133382e3131372e3233302e302f32332d3234203d3e20323639393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:47:b0:20:86:19:14:cc:d1:8b:1a:2f:19:81:5f:93:23:30:
         78:00:b6:e0:5e:8d:23:e6:4d:77:83:49:d6:dc:a1:fe:03:a0:
         cb:e9:8c:f9:0b:72:4e:a4:7e:dc:82:47:cc:8a:a9:4d:b1:5a:
         ca:d3:61:52:0b:d5:5c:13:e2:1d:fc:f1:87:36:26:e2:12:85:
         b5:c3:cb:2d:54:3e:9f:90:4e:a0:50:a3:78:7d:71:48:7d:d6:
         87:47:07:c0:21:ae:bf:76:57:75:a3:d5:fe:58:c8:b3:8d:d7:
         57:46:ba:56:6f:94:c5:33:63:7c:b1:df:54:65:c0:82:b6:a0:
         48:83:c3:b7:59:51:26:94:ea:07:29:33:f7:4e:9f:76:1e:8b:
         7e:4c:62:3d:5b:ba:f6:bc:c0:68:f0:ec:af:59:44:d8:6d:80:
         e7:40:53:19:0d:5f:07:d3:de:b9:62:b0:66:41:0a:24:e4:b5:
         3c:42:33:03:ec:61:7b:a6:d2:59:2c:5a:2a:c2:d3:07:ef:74:
         e0:31:a5:23:30:6c:26:44:0e:af:5c:c6:e3:14:05:40:8a:75:
         5c:63:75:35:31:8f:76:bf:13:d9:f3:b5:6f:37:6e:ca:88:20:
         6c:31:3b:c7:b4:2b:ba:75:f7:3c:a9:68:af:29:c8:3c:a1:75:
         bb:d2:2a:7f
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUBF4+Y71j9b8O/Ur8Fo+VVXw4kGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYzMjkwMEE1RjNGNzJBMDZDRjZFQ0I3QjlEM0IxRTMz
NTZEQTlGNjAeFw0yNTA0MjExOTEwMzZaFw0yNjA0MjAxOTE1MzZaMDMxMTAvBgNV
BAMTKEFCQzQ2M0YwOTI0MUExOURCMzJBRThDNDgyNUM0NkQzNzU0OUEwQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5euqwUOCvyYK8J1YhMabk2G5I
H/xDibRy19md/UsLh/7VJEl3fsXsUWWJ/K7gvVw+jM+iUngMNXko8gvUCjz9p9pM
/HcUwF8dq04U84GdxUrdwhk+jLQaAgAOUVQBBVQzOGFYiBDmEBLq0eTJPgfb2pp4
UWs1P96CMFepB9v4wYIxYgOKy+VzAia/zojxN5FVwOl6ns26ePIPYX9BMBKzj2eD
DUZWgxRspaNVHdPOWcdbXlITKr5+tlFB93hwwpOpMR+ohK8E55J91fDw/9ecdVAY
sLs6VtebolXGYRonSoNjlZJVcehuJozyE0ai84EiUbTMrgDq0pThY6Shf58BAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUq8Rj8JJBoZ2zKujEglxG03VJoKAwHwYDVR0j
BBgwFoAUNjKQCl8/cqBs9uy3udOx4zVtqfYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNkNGMDY4Q0Y0QkE0MzQ3ODJGREREN0IyNEFBQTExNjUx
NTI4QkJFNUEzOUFGOTIyMkRBRDI4N0FBMzI2NzhCLzAvMzYzMjkwMEE1RjNGNzJB
MDZDRjZFQ0I3QjlEM0IxRTMzNTZEQTlGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNjMyOTAwQTVGM0Y3MkEwNkNG
NkVDQjdCOUQzQjFFMzM1NkRBOUY2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjZDRjA2OENGNEJBNDM0NzgyRkRERDdCMjRBQUExMTY1MTUyOEJCRTVB
MzlBRjkyMjJEQUQyODdBQTMyNjc4Qi8wLzMxMzMzODJlMzEzMTM3MmUzMjMzMzAy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzkzOTM4Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGK
deYwDQYJKoZIhvcNAQELBQADggEBAABHsCCGGRTM0YsaLxmBX5MjMHgAtuBejSPm
TXeDSdbcof4DoMvpjPkLck6kftyCR8yKqU2xWsrTYVIL1VwT4h388Yc2JuIShbXD
yy1UPp+QTqBQo3h9cUh91odHB8Ahrr92V3Wj1f5YyLON11dGulZvlMUzY3yx31Rl
wIK2oEiDw7dZUSaU6gcpM/dOn3Yei35MYj1buva8wGjw7K9ZRNhtgOdAUxkNXwfT
3rlisGZBCiTktTxCMwPsYXum0lksWirC0wfvdOAxpSMwbCZEDq9cxuMUBUCKdVxj
dTUxj3a/E9nztW83bsqIIGwxO8e0K7p19zypaK8pyDyhdbvSKn8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:14 2025 by rpki-client on console.sobornost.net