Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232342e302f32342d3234203d3e20323730303532.roa
File:                     3133382e35392e3232342e302f32342d3234203d3e20323730303532.roa (raw, json)
Hash identifier:          2PotNl7B56kaRgfvINB/h3CC2LSZ4ndK6eCxFJeuyfg=
Subject key identifier:   8F:BE:52:61:EE:14:F4:8E:CB:18:CC:92:EE:CC:39:9C:56:C9:2D:35
Certificate issuer:       /CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
Certificate serial:       5A1E5F0B345FA4986F161E03E258D160A4FC3F7C
Authority key identifier: 69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232342e302f32342d3234203d3e20323730303532.roa
Signing time:             Sun 27 Apr 2025 15:16:17 +0000
ROA not before:           Sun 27 Apr 2025 15:11:17 +0000
ROA not after:            Sun 26 Apr 2026 15:16:17 +0000
asID:                     270052
IP address blocks:        138.59.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1e:5f:0b:34:5f:a4:98:6f:16:1e:03:e2:58:d1:60:a4:fc:3f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
        Validity
            Not Before: Apr 27 15:11:17 2025 GMT
            Not After : Apr 26 15:16:17 2026 GMT
        Subject: CN=8FBE5261EE14F48ECB18CC92EECC399C56C92D35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:58:9a:5d:5f:98:db:1a:10:73:02:d3:80:69:
                    c6:9f:92:0c:26:cc:8b:48:0a:3f:58:25:0b:85:16:
                    d3:05:32:bc:13:b4:94:91:63:5b:82:4f:8d:3c:4a:
                    1d:4e:5a:9d:20:dd:02:ab:32:92:0a:f2:a8:16:c2:
                    7c:e2:64:a9:16:63:f6:6c:75:8b:64:81:2b:d0:0c:
                    61:73:d8:0c:24:26:27:1b:7c:70:d6:ab:60:f1:f3:
                    aa:37:27:58:e9:eb:a4:0b:49:6d:5a:8d:3e:11:69:
                    d7:fb:cb:fb:10:62:84:a0:1a:f3:a6:8a:10:ef:ea:
                    2f:2c:73:fb:9e:a2:3f:a7:31:27:7d:da:fa:de:b3:
                    22:b4:b2:fe:5c:da:a3:f7:ea:84:9e:c8:04:1f:4a:
                    e0:ea:a2:bb:2b:2d:c5:e3:d2:cc:14:5a:d3:7b:ee:
                    0e:2c:8c:3f:0a:cc:a3:fb:b3:76:03:ba:20:52:02:
                    da:01:d6:b8:11:aa:81:cf:e4:62:97:52:d8:26:ab:
                    1e:06:8b:96:0a:69:2f:9d:07:0c:9f:a4:7d:41:fe:
                    b8:36:53:48:4b:94:e1:2b:01:b3:c1:e2:d9:2e:bc:
                    9c:32:7d:c5:b8:26:23:76:6d:e9:10:9f:1f:cd:03:
                    25:0f:24:2d:3d:00:ba:b8:57:78:f8:e2:0a:03:e2:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BE:52:61:EE:14:F4:8E:CB:18:CC:92:EE:CC:39:9C:56:C9:2D:35
            X509v3 Authority Key Identifier:
                keyid:69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232342e302f32342d3234203d3e20323730303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:b3:f5:56:72:44:44:bb:dd:e9:da:b8:13:30:60:70:f2:f3:
         b2:b4:0d:39:7d:24:50:63:df:ce:ba:3c:9b:77:88:ad:35:8e:
         2b:5f:28:6d:06:05:c1:33:b6:d5:5f:f6:1c:fc:6c:da:49:fc:
         d5:eb:b9:a0:f5:df:73:8b:43:de:36:b3:e0:95:c9:4e:13:51:
         73:66:28:05:62:3a:e1:11:c6:1e:8c:08:ac:64:47:47:b6:ed:
         ea:cc:1b:64:2c:9a:a1:7c:44:48:60:01:9b:0a:65:3f:a2:e6:
         d7:ed:78:98:0f:a2:bf:e5:89:05:72:63:58:d8:ff:48:30:ad:
         04:1b:10:6f:44:e6:7a:28:3a:e1:6c:e8:54:a7:e8:54:b8:f7:
         6e:0a:c6:fc:c3:5f:76:5d:44:dc:6f:55:9a:b6:20:fc:09:0a:
         dd:6f:52:81:1f:c1:4f:b1:44:4f:b4:ce:e5:e2:56:74:e6:e9:
         0f:cf:a4:dd:f1:c8:54:10:69:28:d7:a7:65:1c:0a:34:fc:0c:
         b4:4e:1c:af:02:3d:da:06:81:b0:a3:42:62:23:b9:d6:6e:ed:
         1d:4f:c6:26:b8:ea:d7:23:86:c1:9c:1b:b8:16:63:ab:df:b2:
         e7:00:23:ff:1f:f4:74:c2:07:ba:4b:3d:02:24:3b:65:18:6c:
         46:e0:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:59 2025 by rpki-client on console.sobornost.net