Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232372e302f32342d3234203d3e20323730303532.roa
File:                     3133382e35392e3232372e302f32342d3234203d3e20323730303532.roa (raw, json)
Hash identifier:          m+nr9Ti4Dgs+ZtYRmk0ji7fq/TlesLeIOMkd1uwzjDc=
Subject key identifier:   55:46:CC:9D:27:E4:0C:B0:BD:59:16:26:9E:F4:B7:42:8C:11:68:48
Certificate issuer:       /CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
Certificate serial:       5010D367E196D526DC3DE75D9AEA27CE2335699E
Authority key identifier: 69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232372e302f32342d3234203d3e20323730303532.roa
Signing time:             Sun 27 Apr 2025 15:16:16 +0000
ROA not before:           Sun 27 Apr 2025 15:11:16 +0000
ROA not after:            Sun 26 Apr 2026 15:16:16 +0000
asID:                     270052
IP address blocks:        138.59.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:10:d3:67:e1:96:d5:26:dc:3d:e7:5d:9a:ea:27:ce:23:35:69:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
        Validity
            Not Before: Apr 27 15:11:16 2025 GMT
            Not After : Apr 26 15:16:16 2026 GMT
        Subject: CN=5546CC9D27E40CB0BD5916269EF4B7428C116848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:18:be:e2:f9:85:4e:91:9a:77:03:90:3b:9c:
                    95:b8:1a:a4:e4:43:64:79:b5:fc:aa:da:42:f1:cd:
                    36:41:5a:89:b5:f9:47:3b:0b:6c:93:3c:d5:bc:2f:
                    4a:01:c2:d7:3d:6f:b6:21:fb:10:9f:37:cd:ae:de:
                    32:49:91:16:a4:cb:fd:45:1a:67:3b:27:6d:57:8f:
                    3a:b0:80:bc:ad:e7:35:75:6b:8f:f1:18:68:16:62:
                    8e:31:4d:63:21:22:41:3f:7a:07:c0:a9:3e:a9:80:
                    8f:ee:dc:66:ff:76:11:99:d6:11:86:cb:54:b2:4b:
                    67:4d:b2:ed:a8:57:c6:9a:71:76:c8:03:fa:a7:c9:
                    ca:bb:b6:3a:1e:51:b1:cc:47:fd:ea:ad:89:00:9d:
                    01:3a:d3:7b:2d:7f:3e:18:cb:e7:13:1c:b7:0e:ae:
                    c1:d7:97:6f:be:c9:2c:33:a1:7b:e9:77:00:77:6b:
                    3d:da:a4:a9:6b:5c:e3:a7:bc:47:aa:4a:91:8c:0b:
                    a7:4c:22:1d:19:55:64:f6:f3:6d:64:2e:3f:74:99:
                    d8:d7:93:14:18:31:a5:05:38:41:00:e8:da:17:a0:
                    39:84:f9:d0:42:ca:47:68:a7:d1:9a:ff:e9:5e:86:
                    94:9f:ac:77:cb:0e:b5:05:83:7c:b9:e3:ff:61:4c:
                    40:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:46:CC:9D:27:E4:0C:B0:BD:59:16:26:9E:F4:B7:42:8C:11:68:48
            X509v3 Authority Key Identifier:
                keyid:69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232372e302f32342d3234203d3e20323730303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:93:cd:3b:6e:b2:53:83:17:d1:2a:3b:0e:74:d2:14:b3:f8:
         5e:82:f3:d1:23:57:f9:1b:f9:fb:43:96:8e:c3:91:a3:ad:db:
         36:e7:85:ba:84:d9:12:d3:aa:8e:82:bc:8b:63:ce:83:a3:a8:
         e6:3f:c2:38:22:9f:9a:36:68:38:66:72:71:b9:57:f8:a0:b6:
         2d:60:84:35:66:c5:c2:3a:05:fb:45:28:04:f8:fb:59:b4:f0:
         6f:9a:16:33:0f:34:29:90:0b:36:26:76:4f:c6:bb:91:66:6e:
         c4:8c:bd:86:59:f0:37:e9:ac:e3:e9:23:b9:7c:ab:f2:f0:e9:
         2a:5e:50:38:69:db:b0:86:22:a4:20:b9:5f:ba:aa:93:7f:01:
         0a:13:08:ae:bb:04:98:fe:05:e3:e7:51:b2:e5:6a:e7:b3:31:
         53:dc:e2:04:5c:ef:7c:fa:ac:6a:05:c0:61:f5:96:69:48:5c:
         6c:01:93:8a:19:56:ed:1f:07:ea:cc:7b:25:4d:ea:6b:64:6d:
         2b:d1:7b:8c:b9:cc:83:a0:c7:92:9d:11:da:d0:4b:40:13:ba:
         87:a1:98:a0:15:8a:11:ee:2c:8e:8d:ba:3d:59:b2:d3:95:d0:
         c2:b5:80:e9:f9:40:1a:d9:f5:a3:4c:88:7f:1a:27:e0:27:96:
         94:76:3a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:59 2025 by rpki-client on console.sobornost.net