Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3137302e302f32332d3234203d3e20323633383333.roa
File:                     3133382e3235352e3137302e302f32332d3234203d3e20323633383333.roa (raw, json)
Hash identifier:          93CtAjiWqDTTXguVpQW+XQWgePs41pZPc7AhL3karV8=
Subject key identifier:   09:1A:34:73:63:2B:D2:03:E7:FD:E0:BD:34:3E:89:B1:9C:C3:4D:38
Certificate issuer:       /CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF
Certificate serial:       63F1F6F62C15E9B40DB2F5B268712A00420A4F66
Authority key identifier: 8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3137302e302f32332d3234203d3e20323633383333.roa
Signing time:             Fri 04 Apr 2025 11:13:55 +0000
ROA not before:           Fri 04 Apr 2025 11:08:55 +0000
ROA not after:            Fri 03 Apr 2026 11:13:55 +0000
asID:                     263833
IP address blocks:        138.255.170.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f1:f6:f6:2c:15:e9:b4:0d:b2:f5:b2:68:71:2a:00:42:0a:4f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF
        Validity
            Not Before: Apr  4 11:08:55 2025 GMT
            Not After : Apr  3 11:13:55 2026 GMT
        Subject: CN=091A3473632BD203E7FDE0BD343E89B19CC34D38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:55:97:6f:b1:4d:14:db:08:35:bf:29:a3:9f:
                    ea:89:61:f7:f2:97:82:14:0a:cd:c0:a7:a7:9e:fe:
                    6b:16:bb:db:ad:0e:8b:fe:8f:69:12:c8:5f:84:16:
                    1e:2f:a6:02:e8:3c:a1:a3:ef:63:72:d3:cb:66:d1:
                    15:a0:f8:fc:06:f9:05:a5:17:9d:d9:6a:10:8e:40:
                    01:f2:ab:d6:51:9d:f4:fe:a0:6f:ef:80:a6:d3:45:
                    e7:54:b9:71:1f:81:7d:d0:ec:ac:28:94:b7:f8:d3:
                    0d:c5:bd:d9:1d:f1:81:23:e5:73:20:15:bc:41:41:
                    2e:33:8e:12:15:0b:2f:a2:f9:0e:f6:53:39:1e:41:
                    fc:fe:ff:3d:a5:0e:91:99:6c:b2:30:2d:bf:82:07:
                    59:f9:f9:23:1b:60:94:ff:51:28:fe:2c:ba:49:74:
                    36:f8:00:8a:f2:14:4d:47:f9:2e:da:5c:5c:e7:5a:
                    11:21:4a:5d:da:ea:13:ba:80:e0:5d:b1:ad:72:2b:
                    00:0c:8f:0a:85:e0:49:a8:e9:43:66:4b:db:84:50:
                    01:5c:a2:a8:d3:c2:57:6a:23:ae:5b:ca:7a:1a:41:
                    23:bc:38:f2:e7:70:44:c9:e5:e4:77:a2:08:df:97:
                    9c:75:98:1b:12:df:d0:da:ae:18:74:e8:fc:9b:d6:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1A:34:73:63:2B:D2:03:E7:FD:E0:BD:34:3E:89:B1:9C:C3:4D:38
            X509v3 Authority Key Identifier:
                keyid:8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3137302e302f32332d3234203d3e20323633383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:01:65:e4:41:19:5d:0b:e5:5a:95:70:2d:85:a3:f8:8f:3e:
         9d:19:c8:64:0e:97:a3:50:33:51:60:f6:b1:27:2a:88:3e:db:
         fc:a8:86:9d:d3:38:79:42:5e:77:a6:ec:d1:e6:6c:89:9b:91:
         f8:10:a0:65:de:2b:8b:70:74:80:bf:ad:61:99:80:b8:a9:fe:
         18:49:73:0a:37:45:9c:f7:d1:96:49:82:4d:27:dd:b0:a2:63:
         bd:43:be:bd:68:ce:ca:00:ae:73:2c:77:61:0e:df:47:46:0d:
         c2:6f:81:b5:2c:dd:ec:81:f1:00:ab:6d:1e:d0:2e:1a:8a:86:
         1f:8c:0f:37:64:5e:a3:3a:f2:6e:58:d3:e7:82:c7:f6:9e:9b:
         54:3c:d2:96:0b:83:c6:51:7a:36:70:7d:b7:aa:98:71:80:70:
         b6:72:31:40:15:2f:4f:79:6f:e3:f9:a9:b0:3b:8b:0f:ec:fa:
         b0:9e:d9:2f:9c:af:c0:16:02:4a:7d:8f:ea:ff:63:bb:ea:a9:
         de:5d:13:6a:90:9e:6f:f3:66:f6:bd:40:8e:17:e0:cf:d4:6b:
         66:78:4e:2b:f8:15:7f:ff:40:6f:e2:87:fb:1c:21:be:69:24:
         85:20:58:0c:c0:8c:7a:14:19:2e:3f:8e:d3:6e:1e:98:ed:36:
         07:6f:64:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:37 2025 by rpki-client on console.sobornost.net