Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232342e302f32332d3233203d3e20323730303532.roa
File:                     3133382e35392e3232342e302f32332d3233203d3e20323730303532.roa (raw, json)
Hash identifier:          ky+vxKGjmgTYNC/ECSMbQYS6wQeU4AGISuZfQdooQcg=
Subject key identifier:   F6:04:8D:C3:00:5A:B1:44:E1:49:05:8B:61:89:E8:B8:45:E7:DB:99
Certificate issuer:       /CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
Certificate serial:       5A9AB4700A1C13092DD39988F1FD753AD9FEE072
Authority key identifier: 69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232342e302f32332d3233203d3e20323730303532.roa
Signing time:             Sun 27 Apr 2025 15:16:16 +0000
ROA not before:           Sun 27 Apr 2025 15:11:16 +0000
ROA not after:            Sun 26 Apr 2026 15:16:16 +0000
asID:                     270052
IP address blocks:        138.59.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9a:b4:70:0a:1c:13:09:2d:d3:99:88:f1:fd:75:3a:d9:fe:e0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
        Validity
            Not Before: Apr 27 15:11:16 2025 GMT
            Not After : Apr 26 15:16:16 2026 GMT
        Subject: CN=F6048DC3005AB144E149058B6189E8B845E7DB99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:70:2f:73:04:a7:db:c4:71:c1:d7:62:a4:
                    6a:a3:3b:d7:8b:87:82:42:1c:c9:2d:6f:fd:26:76:
                    66:48:94:03:15:83:35:52:8a:8d:d8:de:d4:9f:01:
                    99:1e:a0:9f:d9:0d:ef:15:7d:d9:6b:94:7c:fe:6b:
                    5b:1a:82:e9:b5:44:6c:bd:05:49:8c:09:7f:60:10:
                    59:86:73:64:34:85:eb:4c:aa:a2:69:81:f4:22:0c:
                    5e:25:1d:4c:cd:f0:c3:7f:c9:9a:5e:ef:36:99:e9:
                    61:e2:65:15:41:bd:62:d1:64:8c:96:a8:b5:83:56:
                    6a:7a:0a:2f:14:ac:51:d0:74:e9:62:e0:2c:85:88:
                    d9:3f:6f:09:ff:f3:64:70:65:8e:e5:b5:60:2a:3e:
                    7a:4c:e0:1b:60:64:96:89:15:04:cb:47:f9:f6:21:
                    2f:83:61:ec:e0:91:ba:44:b6:6f:66:76:ee:0e:76:
                    a1:cd:e7:f4:d6:1e:c9:c0:64:99:ed:f2:50:c3:f0:
                    1d:76:33:19:d6:be:c4:c2:05:79:ee:0d:f7:13:4e:
                    a0:89:83:55:75:e6:1c:25:5d:4e:b0:e4:5c:f3:99:
                    f2:cd:84:ea:48:87:7e:39:32:11:8a:67:82:f4:14:
                    52:f3:96:e8:8d:85:d5:2b:17:63:00:5f:24:b3:ce:
                    78:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:04:8D:C3:00:5A:B1:44:E1:49:05:8B:61:89:E8:B8:45:E7:DB:99
            X509v3 Authority Key Identifier:
                keyid:69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232342e302f32332d3233203d3e20323730303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:13:bb:12:d7:df:30:4c:4b:b7:de:8c:22:df:7d:51:a8:9f:
         74:56:a3:25:d8:ea:b0:b1:50:39:2d:7d:c2:e5:99:16:ca:5c:
         0a:51:99:78:ab:08:84:51:d4:14:5c:ae:1c:01:e2:a1:2c:a3:
         5e:56:1a:1d:72:17:39:6a:80:cb:85:8c:4b:ca:16:fc:df:ad:
         38:cd:47:a3:48:29:ed:5d:96:49:00:3a:99:98:8f:72:39:f7:
         a2:b3:d8:4d:c3:6d:8e:4b:93:67:74:8a:58:9c:ab:42:fa:e2:
         67:47:6c:db:50:1d:ab:89:35:e5:75:d1:55:13:df:ad:5c:4d:
         21:93:b1:f1:6c:fb:fd:62:c3:fc:b2:bb:7f:13:68:26:43:b6:
         03:a8:c1:58:a5:0f:9c:f5:08:f5:ac:4f:b2:f1:de:96:47:45:
         55:fc:f6:12:5c:dc:2f:e7:c8:8d:1e:99:1d:b9:9f:c7:f4:b7:
         82:aa:25:79:b1:91:8d:44:49:0a:ce:15:ad:3f:a4:cf:5d:fa:
         38:bd:e4:ec:80:66:6f:b8:99:60:6c:5c:b6:ed:8b:79:97:ad:
         44:b1:bd:4d:97:5e:17:93:6e:a1:96:28:49:16:94:e9:d0:89:
         6e:61:29:2e:7a:9b:21:64:3a:25:aa:ef:68:71:26:73:9d:88:
         fa:ce:bf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:59 2025 by rpki-client on console.sobornost.net