Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/3139302e392e37302e302f32332d3234203d3e20323733313136.roa
File:                     3139302e392e37302e302f32332d3234203d3e20323733313136.roa (raw, json)
Hash identifier:          yMfrLdjSETrzDEWDykxplEFbDBpIj5/hJPnyc6roT9M=
Subject key identifier:   10:8D:2D:16:08:9A:66:41:F2:E5:E6:25:5A:89:0B:20:59:EA:74:4C
Certificate issuer:       /CN=E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF
Certificate serial:       6E6C71857555BA5D11F045820D78CBC419677526
Authority key identifier: E5:1A:FE:0A:CF:27:78:6A:37:1E:93:DA:A4:5A:D2:32:AF:F6:F8:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/3139302e392e37302e302f32332d3234203d3e20323733313136.roa
Signing time:             Tue 04 Feb 2025 18:22:36 +0000
ROA not before:           Tue 04 Feb 2025 18:17:36 +0000
ROA not after:            Tue 03 Feb 2026 18:22:36 +0000
asID:                     273116
IP address blocks:        190.9.70.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 01:23:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6c:71:85:75:55:ba:5d:11:f0:45:82:0d:78:cb:c4:19:67:75:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF
        Validity
            Not Before: Feb  4 18:17:36 2025 GMT
            Not After : Feb  3 18:22:36 2026 GMT
        Subject: CN=108D2D16089A6641F2E5E6255A890B2059EA744C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:a6:05:13:f7:7d:8d:de:30:1c:54:29:f4:
                    f7:b2:6c:3d:e5:30:7b:27:ce:58:66:d3:de:64:4b:
                    ae:4f:30:39:6c:ba:d0:77:17:3c:b2:e2:97:27:bb:
                    3e:d4:e4:48:d0:38:90:02:47:2f:cc:0c:25:85:1f:
                    5a:4d:f6:2c:bb:e6:38:ea:7b:1f:64:40:b3:48:4d:
                    0a:8e:2e:0b:a3:96:b3:53:50:38:bb:fa:96:68:7f:
                    15:2a:1c:11:a9:24:a4:fa:82:d3:76:c5:92:46:9e:
                    4e:12:21:59:57:45:4f:d0:25:f1:3b:46:8d:91:ca:
                    2c:da:b0:bd:b9:cf:dc:e7:8f:a4:4a:46:81:ea:3f:
                    71:37:97:0d:1e:e3:53:6d:3a:e7:92:54:03:8f:5d:
                    0a:d4:0a:79:39:bb:e3:14:27:31:f5:57:dd:da:6c:
                    41:3a:44:f0:d6:a0:b0:4f:f8:21:45:10:29:71:a1:
                    11:db:9c:2f:fa:95:bf:ca:dd:2a:b2:e8:88:35:de:
                    69:29:89:68:dc:32:f9:fc:c0:ee:71:9f:83:60:61:
                    8c:cc:a8:3d:08:e8:e7:1c:23:15:4d:bc:1a:ed:9a:
                    9d:bf:71:1f:9f:73:6a:e7:3b:9f:19:d7:6d:0e:de:
                    24:e5:bb:91:b8:26:93:a2:59:b3:84:34:89:b8:4a:
                    bc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8D:2D:16:08:9A:66:41:F2:E5:E6:25:5A:89:0B:20:59:EA:74:4C
            X509v3 Authority Key Identifier:
                keyid:E5:1A:FE:0A:CF:27:78:6A:37:1E:93:DA:A4:5A:D2:32:AF:F6:F8:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E51AFE0ACF27786A371E93DAA45AD232AFF6F8CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5A7BC69D0EB1845D2FDE3FC5E5564FAF1DA99B9BDADBF0ACB44307D088829D9/0/3139302e392e37302e302f32332d3234203d3e20323733313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:0e:57:a2:61:89:3d:63:f0:91:f1:ea:58:fd:bb:46:37:9b:
         25:f5:a6:fa:81:e8:47:f2:b0:ea:07:c0:7e:44:5f:1b:a2:cf:
         54:2d:77:8e:a3:dd:95:eb:3d:9f:46:3d:a0:7e:1e:57:fc:af:
         e2:d3:df:55:4c:44:7e:8d:e7:d8:32:2a:8f:1e:68:dc:01:62:
         a7:40:e3:e7:9f:79:f4:7e:e4:79:f3:b5:7c:ee:0d:7d:21:51:
         37:5e:2e:e8:b4:e3:46:5c:90:16:3b:55:5c:a9:fe:e0:3a:6b:
         84:62:79:b0:f6:43:3e:b5:11:16:dc:26:27:7d:19:6b:9b:74:
         42:a9:50:81:27:39:db:46:f5:2e:8d:5b:24:d4:af:21:ea:55:
         25:ab:0e:d5:56:3f:36:b8:dc:a5:00:35:cd:46:ab:07:ab:cc:
         02:84:aa:98:64:d4:f6:8c:0a:e9:94:ff:45:04:33:c1:74:55:
         e1:82:70:88:43:67:4d:5b:19:ca:91:82:eb:06:73:18:e5:35:
         c3:db:76:3f:a5:ee:23:49:8f:f7:d3:9e:ac:08:db:a4:d1:08:
         c4:07:eb:ff:18:53:53:18:ec:a5:27:89:81:ea:90:87:db:45:
         de:71:ce:cd:9a:39:96:42:2d:8a:e6:0c:27:98:b0:0c:a7:cd:
         7b:9c:2b:1a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUbmxxhXVVul0R8EWCDXjLxBlndSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUxQUZFMEFDRjI3Nzg2QTM3MUU5M0RBQTQ1QUQyMzJB
RkY2RjhDRjAeFw0yNTAyMDQxODE3MzZaFw0yNjAyMDMxODIyMzZaMDMxMTAvBgNV
BAMTKDEwOEQyRDE2MDg5QTY2NDFGMkU1RTYyNTVBODkwQjIwNTlFQTc0NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC16YFE/d9jd4wHFQp9PeybD3l
MHsnzlhm095kS65PMDlsutB3Fzyy4pcnuz7U5EjQOJACRy/MDCWFH1pN9iy75jjq
ex9kQLNITQqOLgujlrNTUDi7+pZofxUqHBGpJKT6gtN2xZJGnk4SIVlXRU/QJfE7
Ro2RyizasL25z9znj6RKRoHqP3E3lw0e41NtOueSVAOPXQrUCnk5u+MUJzH1V93a
bEE6RPDWoLBP+CFFEClxoRHbnC/6lb/K3Sqy6Ig13mkpiWjcMvn8wO5xn4NgYYzM
qD0I6OccIxVNvBrtmp2/cR+fc2rnO58Z120O3iTlu5G4JpOiWbOENIm4SryBAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUEI0tFgiaZkHy5eYlWokLIFnqdEwwHwYDVR0j
BBgwFoAU5Rr+Cs8neGo3HpPapFrSMq/2+M8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNUE3QkM2OUQwRUIxODQ1RDJGREUzRkM1RTU1NjRGQUYx
REE5OUI5QkRBREJGMEFDQjQ0MzA3RDA4ODgyOUQ5LzAvRTUxQUZFMEFDRjI3Nzg2
QTM3MUU5M0RBQTQ1QUQyMzJBRkY2RjhDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNTFBRkUwQUNGMjc3ODZBMzcx
RTkzREFBNDVBRDIzMkFGRjZGOENGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTVBN0JDNjlEMEVCMTg0NUQyRkRFM0ZDNUU1NTY0RkFGMURBOTlCOUJE
QURCRjBBQ0I0NDMwN0QwODg4MjlEOS8wLzMxMzkzMDJlMzkyZTM3MzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMjM3MzMzMTMxMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+CUYwDQYJ
KoZIhvcNAQELBQADggEBAEYOV6JhiT1j8JHx6lj9u0Y3myX1pvqB6EfysOoHwH5E
Xxuiz1Qtd46j3ZXrPZ9GPaB+Hlf8r+LT31VMRH6N59gyKo8eaNwBYqdA4+efefR+
5HnztXzuDX0hUTdeLui040ZckBY7VVyp/uA6a4RiebD2Qz61ERbcJid9GWubdEKp
UIEnOdtG9S6NWyTUryHqVSWrDtVWPza43KUANc1GqwerzAKEqphk1PaMCumU/0UE
M8F0VeGCcIhDZ01bGcqRgusGcxjlNcPbdj+l7iNJj/fTnqwI26TRCMQH6/8YU1MY
7KUniYHqkIfbRd5xzs2aOZZCLYrmDCeYsAynzXucKxo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:24:04 2025 by rpki-client on console.sobornost.net