Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232352e302f32342d3234203d3e20323730303532.roa
File:                     3133382e35392e3232352e302f32342d3234203d3e20323730303532.roa (raw, json)
Hash identifier:          iGOfyGzg413IaSsdZgKRxrnpNCBMHXxPAks1LNUW+WQ=
Subject key identifier:   7C:08:B2:F6:9D:DC:DD:CD:21:87:A4:70:66:66:1D:46:19:E7:05:53
Certificate issuer:       /CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
Certificate serial:       222FED32D0DDA4C707B832F68ACE543A9C68C498
Authority key identifier: 69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232352e302f32342d3234203d3e20323730303532.roa
Signing time:             Sun 27 Apr 2025 15:16:18 +0000
ROA not before:           Sun 27 Apr 2025 15:11:18 +0000
ROA not after:            Sun 26 Apr 2026 15:16:18 +0000
asID:                     270052
IP address blocks:        138.59.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2f:ed:32:d0:dd:a4:c7:07:b8:32:f6:8a:ce:54:3a:9c:68:c4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
        Validity
            Not Before: Apr 27 15:11:18 2025 GMT
            Not After : Apr 26 15:16:18 2026 GMT
        Subject: CN=7C08B2F69DDCDDCD2187A47066661D4619E70553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:2b:4c:c3:d3:3d:c8:b8:16:7a:da:cb:97:
                    c1:2b:71:51:13:94:2b:37:46:14:dd:39:e7:41:3a:
                    da:02:b8:55:f9:c0:95:72:13:e5:1b:5f:9a:6f:f4:
                    2e:bc:33:19:11:b2:6a:df:24:5d:f6:57:db:05:41:
                    69:ab:af:2a:0e:67:0a:05:e4:84:d9:3e:df:26:bc:
                    cc:98:19:10:fa:d8:1b:54:a7:9f:29:18:ba:1d:13:
                    d2:2c:24:a7:f4:29:e3:62:82:0c:31:e3:f2:83:d9:
                    ad:04:86:20:01:fb:e2:8d:05:11:fe:95:07:7b:e9:
                    13:5d:a7:af:cb:b8:7d:3a:fd:48:98:03:9e:91:42:
                    b3:f3:35:e9:d0:d0:fd:81:4b:b1:22:11:7a:ec:d1:
                    2f:b6:d0:e3:a2:e2:15:89:a4:76:28:18:36:ae:d6:
                    20:4b:c7:c3:ba:21:22:7d:9f:4f:a0:72:ae:a7:74:
                    fc:4c:dc:91:9d:40:af:55:9f:8e:33:95:a1:f6:c1:
                    40:be:8f:60:35:38:e5:62:39:a6:1c:82:1a:c8:84:
                    d8:ff:23:30:f3:9a:44:76:06:c6:5d:c3:55:08:a5:
                    83:65:2e:8b:80:5b:5e:c3:7b:82:68:25:e9:81:f7:
                    78:0e:0d:1f:66:59:0f:43:58:51:10:23:28:a5:10:
                    33:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:08:B2:F6:9D:DC:DD:CD:21:87:A4:70:66:66:1D:46:19:E7:05:53
            X509v3 Authority Key Identifier:
                keyid:69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232352e302f32342d3234203d3e20323730303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:8e:17:2d:6a:2c:65:04:6e:4b:31:94:b1:c3:53:ca:19:70:
         43:ed:f3:8b:ad:29:20:9f:47:5e:73:06:2e:81:32:e2:83:1f:
         38:0f:6f:9d:e8:3c:51:3b:c2:6c:1b:f0:64:de:3e:fc:49:c0:
         0b:6a:01:f1:8c:08:7b:06:e5:27:5d:cd:65:89:dd:a2:20:28:
         0c:e3:0d:fe:df:d6:7e:ce:16:74:76:af:ed:28:55:79:08:57:
         35:ee:35:81:bd:a3:d7:f2:96:42:1f:c8:87:df:b2:32:f4:f9:
         d2:7d:3d:3d:b4:c8:0b:0d:2b:c8:4c:1f:74:03:67:5d:c0:f3:
         2b:b6:80:de:38:30:58:ca:ad:5e:95:6d:46:23:5d:e4:ea:14:
         c7:a8:ca:52:87:c9:46:36:b8:5a:fd:7a:0c:16:c2:93:77:48:
         3e:80:37:23:73:ed:8e:4b:46:71:fd:d5:f3:c1:f2:dd:50:48:
         c7:44:77:8d:4e:99:43:1e:08:7b:2e:9c:e9:96:07:5c:de:57:
         cb:07:f2:1b:0d:83:09:0b:a0:46:68:20:ee:ff:5f:75:be:92:
         82:e7:1a:44:3c:55:64:c1:a3:27:84:b3:b3:5c:59:65:f9:38:
         14:fa:ce:e2:e3:d3:0b:fe:e8:8a:f5:56:59:ff:0b:7c:27:e0:
         92:a6:7d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:59 2025 by rpki-client on console.sobornost.net