Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/34352e3233302e3230362e302f32342d3234203d3e20323636373433.roa
File:                     34352e3233302e3230362e302f32342d3234203d3e20323636373433.roa (raw, json)
Hash identifier:          417XJMM7CukaqwuwcBg8BmF6fEJKDvm6jvFd336S7Z0=
Subject key identifier:   60:F5:74:B4:45:A6:BE:40:35:19:B7:29:66:96:66:59:5A:2F:5E:3A
Certificate issuer:       /CN=27132C0B16F59934A89DA1E369D30BCEC9B7E01E
Certificate serial:       64B139CE0B114BA540FFFAECCD47884A626B63B3
Authority key identifier: 27:13:2C:0B:16:F5:99:34:A8:9D:A1:E3:69:D3:0B:CE:C9:B7:E0:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/34352e3233302e3230362e302f32342d3234203d3e20323636373433.roa
Signing time:             Tue 04 Feb 2025 18:15:17 +0000
ROA not before:           Tue 04 Feb 2025 18:10:17 +0000
ROA not after:            Tue 03 Feb 2026 18:15:17 +0000
asID:                     266743
IP address blocks:        45.230.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b1:39:ce:0b:11:4b:a5:40:ff:fa:ec:cd:47:88:4a:62:6b:63:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27132C0B16F59934A89DA1E369D30BCEC9B7E01E
        Validity
            Not Before: Feb  4 18:10:17 2025 GMT
            Not After : Feb  3 18:15:17 2026 GMT
        Subject: CN=60F574B445A6BE403519B729669666595A2F5E3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:db:81:bd:ea:b1:f7:e8:b1:f2:e5:b4:88:2f:
                    30:10:57:81:7b:fe:68:c4:c7:81:04:aa:90:17:79:
                    74:bb:5b:99:c0:1f:b7:16:25:b0:73:37:da:fc:16:
                    51:59:7f:ff:30:53:bb:29:d0:00:8f:98:2e:49:b5:
                    67:b4:ea:3d:0e:92:13:ec:a4:6f:ba:d3:e5:08:9b:
                    0a:36:64:fe:f3:a2:92:70:69:e2:8c:92:24:5e:26:
                    b2:d0:ac:0f:34:2c:d7:ce:cf:fe:82:77:8c:55:67:
                    ec:ff:6e:4d:e2:64:d5:a6:c2:7a:e1:96:07:43:66:
                    5e:3a:ad:fb:fe:80:cb:50:ce:06:f3:81:72:3b:01:
                    69:09:b6:fd:c0:62:cb:c0:f1:c0:3c:3f:af:34:ca:
                    52:27:9a:eb:2e:c8:45:02:b4:e0:08:f5:0d:8c:02:
                    b5:ad:e8:bd:97:92:c5:70:b0:f1:02:77:e8:ca:47:
                    79:c6:cb:46:ae:c8:d1:5e:4f:cd:cd:15:16:66:59:
                    de:ab:fa:aa:3b:0f:2d:a7:07:bf:a1:43:fe:3e:2a:
                    32:12:cb:7e:68:97:5b:d9:b9:27:55:b0:4a:13:dc:
                    5c:bd:23:f0:01:95:0a:10:f6:8c:c0:a9:0e:b7:c8:
                    2b:12:e1:d3:61:31:f5:5a:01:88:b4:7a:f9:f4:f1:
                    e0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F5:74:B4:45:A6:BE:40:35:19:B7:29:66:96:66:59:5A:2F:5E:3A
            X509v3 Authority Key Identifier:
                keyid:27:13:2C:0B:16:F5:99:34:A8:9D:A1:E3:69:D3:0B:CE:C9:B7:E0:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/34352e3233302e3230362e302f32342d3234203d3e20323636373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:bb:b4:09:97:a8:22:ae:c0:a1:47:ac:88:71:e7:fd:90:8a:
         2f:e4:a7:cb:03:70:a3:37:5e:1b:c1:81:ef:b6:a5:41:89:3b:
         ea:df:54:c6:22:e6:3e:fc:81:62:5d:14:82:36:3c:b7:1c:5d:
         cb:b1:32:c9:32:7d:07:ce:9e:4c:77:79:3c:a8:61:e8:6c:fd:
         c0:a1:d8:02:35:d3:a8:4e:dc:07:f7:19:4d:e2:0b:20:6f:03:
         8d:99:ed:a7:eb:21:0d:08:50:9e:3a:9d:e3:3a:e1:ce:7a:85:
         2e:31:ac:ae:45:62:13:fe:1b:8e:b3:93:12:82:1b:a4:61:fe:
         30:44:a2:6c:b0:3f:f7:46:0d:c4:4d:db:a3:69:79:e4:c6:b0:
         f5:4b:df:4b:43:0e:5c:ad:2d:94:8d:21:31:c5:7b:d5:ef:2b:
         cb:be:78:44:be:39:06:a6:bb:2a:0f:88:29:03:79:12:09:58:
         11:b4:e7:1a:d4:68:3a:ae:e8:1b:ae:0f:0e:7b:b1:f6:7e:c1:
         d6:f9:45:12:9c:15:0a:a6:2d:3e:bb:e1:dd:42:54:74:18:73:
         79:00:0c:24:61:1b:e3:0a:8d:26:f0:f0:06:aa:1d:b8:2d:ca:
         e8:c0:c4:e1:c4:2e:60:64:1d:7c:17:d3:32:93:0a:d0:36:5b:
         c6:ff:c0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:02 2025 by rpki-client on console.sobornost.net