Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/3138392e34352e3137362e302f32322d3232203d3e20323639393738.roa
File:                     3138392e34352e3137362e302f32322d3232203d3e20323639393738.roa (raw, json)
Hash identifier:          vb+VJgLz7A1zGTbSetT2PywxpnFnVvg0Zi23LQ6cytg=
Subject key identifier:   0A:97:C9:F2:1E:2E:B2:7C:4E:25:10:CD:93:8A:BF:BB:26:CB:1E:50
Certificate issuer:       /CN=6A3360A7AAF500169AA1D3966EF9EDFA825A544E
Certificate serial:       1B8D2554C59FC15ABF47887E1DDA16D15F66BBEB
Authority key identifier: 6A:33:60:A7:AA:F5:00:16:9A:A1:D3:96:6E:F9:ED:FA:82:5A:54:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/3138392e34352e3137362e302f32322d3232203d3e20323639393738.roa
Signing time:             Tue 04 Feb 2025 19:57:57 +0000
ROA not before:           Tue 04 Feb 2025 19:52:57 +0000
ROA not after:            Tue 03 Feb 2026 19:57:57 +0000
asID:                     269978
IP address blocks:        189.45.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 18:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8d:25:54:c5:9f:c1:5a:bf:47:88:7e:1d:da:16:d1:5f:66:bb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A3360A7AAF500169AA1D3966EF9EDFA825A544E
        Validity
            Not Before: Feb  4 19:52:57 2025 GMT
            Not After : Feb  3 19:57:57 2026 GMT
        Subject: CN=0A97C9F21E2EB27C4E2510CD938ABFBB26CB1E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:c6:f9:a9:54:41:ae:67:0b:7e:95:ce:a7:
                    74:c7:c9:42:9e:20:12:ec:24:99:9b:51:f6:6a:42:
                    5b:36:c7:a8:70:e6:f0:5b:3e:38:1d:90:ac:97:5b:
                    ab:ba:f4:e5:c4:33:1c:dc:aa:16:43:24:f9:e4:62:
                    cd:3f:fb:da:e4:77:63:9b:c4:07:80:62:77:10:18:
                    74:82:91:c2:db:b1:2b:11:cb:eb:bb:b8:39:ed:de:
                    0d:6f:6a:35:f9:93:78:b6:62:ff:16:9f:31:6e:17:
                    f0:31:09:d6:1c:dc:8e:62:99:3b:d1:88:b5:e4:d6:
                    e7:53:60:3e:4a:70:61:2c:72:4d:15:09:c9:e1:bd:
                    99:8f:9c:ef:e3:09:6b:1d:59:e7:de:0f:85:ae:1f:
                    7e:a0:19:a4:07:62:cf:22:00:7b:ec:d7:46:e1:78:
                    43:12:e6:1c:55:b7:48:f2:37:de:a4:55:95:e2:00:
                    e5:9d:02:13:18:1b:6e:fc:60:11:19:be:18:50:33:
                    81:e5:80:b2:84:ac:99:12:54:b6:0a:7b:e4:e6:dc:
                    6b:05:2d:a9:a3:0d:ff:38:c8:c7:8c:8f:0e:f5:2a:
                    2e:d8:71:c0:46:a7:82:18:65:59:ec:80:f5:24:1c:
                    a5:64:6c:de:c5:cf:f2:82:60:28:21:29:31:9b:90:
                    b7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:97:C9:F2:1E:2E:B2:7C:4E:25:10:CD:93:8A:BF:BB:26:CB:1E:50
            X509v3 Authority Key Identifier:
                keyid:6A:33:60:A7:AA:F5:00:16:9A:A1:D3:96:6E:F9:ED:FA:82:5A:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/3138392e34352e3137362e302f32322d3232203d3e20323639393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:09:47:09:80:61:60:88:57:ca:f8:90:74:9d:80:92:8a:de:
         18:30:3e:73:2e:5f:a1:82:37:b2:eb:ee:26:28:67:df:5b:cf:
         62:d7:4e:b7:02:57:72:02:60:94:2b:3f:a1:2e:9f:a2:00:fb:
         f5:63:e3:c7:f8:19:e2:e7:ed:6d:ce:0f:9a:9d:d8:87:59:27:
         41:08:6a:c0:fa:bf:73:ce:d4:86:a9:ad:ec:d0:6e:60:6b:82:
         01:95:19:46:d8:03:74:6d:2f:25:cf:c0:d3:c8:ac:c0:16:24:
         20:21:a7:9e:83:5d:10:db:da:b0:fb:34:5e:b4:42:8c:d9:f1:
         02:58:c7:dc:e2:8e:1e:4f:f8:c5:e2:33:8d:a5:c2:70:91:5f:
         c1:3b:9e:96:e6:3b:7c:9e:06:27:24:b5:5b:d7:21:85:9b:36:
         e8:fe:f6:c5:18:99:8c:3b:60:34:1b:9b:57:23:e0:d3:d9:41:
         cd:17:2c:c1:8e:81:a3:e7:3c:e7:a7:c6:dd:6f:c8:4b:5d:b6:
         af:31:3b:58:88:6a:79:76:47:84:01:8b:24:7c:a1:32:5a:1d:
         31:77:ea:d8:b8:7f:33:c7:f6:f0:e1:1e:a2:88:73:1e:b8:11:
         b8:d3:4b:1c:4c:c3:48:2c:41:b1:27:26:e9:9e:38:56:3e:a8:
         3b:04:0e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:24:31 2025 by rpki-client