Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32342d3234203d3e20323636393031.roa
File:                     34352e3136312e3130382e302f32342d3234203d3e20323636393031.roa (raw, json)
Hash identifier:          sQDbSdTAmq8/ZnUGrofA/QEuKQ6zlAaqLM8ey6hKefc=
Subject key identifier:   01:F7:D9:59:5B:17:22:9C:E7:CF:F4:09:C7:D5:BF:E7:14:A7:45:09
Certificate issuer:       /CN=DB5A38E075D530ECB516C04071D54A6B1DD78CFC
Certificate serial:       51291368E46BD70DC8D09E5B4E8D5EC339C770D1
Authority key identifier: DB:5A:38:E0:75:D5:30:EC:B5:16:C0:40:71:D5:4A:6B:1D:D7:8C:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32342d3234203d3e20323636393031.roa
Signing time:             Tue 04 Feb 2025 18:23:20 +0000
ROA not before:           Tue 04 Feb 2025 18:18:20 +0000
ROA not after:            Tue 03 Feb 2026 18:23:20 +0000
asID:                     266901
IP address blocks:        45.161.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:29:13:68:e4:6b:d7:0d:c8:d0:9e:5b:4e:8d:5e:c3:39:c7:70:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB5A38E075D530ECB516C04071D54A6B1DD78CFC
        Validity
            Not Before: Feb  4 18:18:20 2025 GMT
            Not After : Feb  3 18:23:20 2026 GMT
        Subject: CN=01F7D9595B17229CE7CFF409C7D5BFE714A74509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:26:66:c6:16:89:19:29:00:d0:31:02:08:a8:
                    01:1e:4e:2a:8f:1c:59:9e:cb:2c:37:a7:de:64:e7:
                    63:0c:2d:cb:a3:76:f5:ec:ad:dd:cd:0c:33:4c:23:
                    2c:14:24:b5:49:9f:45:2e:2e:b8:7f:c7:f5:2a:e3:
                    f4:10:5a:f5:6d:bf:04:2a:aa:ad:16:fd:5c:34:f1:
                    03:0c:6b:33:62:7d:b0:82:76:83:24:ee:ba:70:90:
                    f9:b7:94:33:ac:39:93:74:f5:c6:1c:51:78:5c:32:
                    e8:85:56:87:d6:dc:21:dc:0f:66:21:3f:9e:8d:20:
                    ac:2b:31:ff:88:bb:42:17:65:12:61:ca:5a:87:4e:
                    c7:ac:40:02:1c:f4:da:09:24:c0:40:bd:33:26:7c:
                    72:d6:13:a7:32:1d:5e:5d:53:55:e5:74:df:9b:2a:
                    ed:bf:b2:7e:5f:fb:7b:d6:9a:07:72:6e:6d:c2:20:
                    2d:01:7d:aa:8d:07:3d:7d:cb:c8:b5:45:00:15:fb:
                    ef:4c:ef:c9:52:81:2b:ad:d5:74:62:e0:e6:bd:2e:
                    ec:50:9a:68:67:a3:a5:00:ee:28:02:d4:c7:f9:31:
                    4c:ce:13:05:b9:62:55:8f:41:d8:b3:e0:94:51:45:
                    88:3b:e6:06:92:31:da:e0:8d:c8:2f:5e:e9:5d:3f:
                    57:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F7:D9:59:5B:17:22:9C:E7:CF:F4:09:C7:D5:BF:E7:14:A7:45:09
            X509v3 Authority Key Identifier:
                keyid:DB:5A:38:E0:75:D5:30:EC:B5:16:C0:40:71:D5:4A:6B:1D:D7:8C:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32342d3234203d3e20323636393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:24:15:a8:5a:a3:0c:0e:ee:5f:d3:f8:00:aa:7e:92:a3:e7:
         d2:3c:4c:76:ee:00:45:8a:3f:3c:8e:ab:4c:df:a3:13:54:ea:
         2d:fa:81:3a:dc:35:b7:38:6c:03:81:67:82:4e:45:6c:de:03:
         f4:07:41:a1:be:de:cd:d1:15:ea:dd:9f:c7:25:74:ac:a1:52:
         8d:e6:2e:97:fa:d2:c2:f1:26:a0:c7:b5:54:e9:eb:f6:f7:58:
         28:f2:65:16:30:17:72:fa:b3:34:c7:95:4c:f3:9f:1a:2b:3f:
         13:55:66:b3:7b:31:ea:bc:55:0f:96:6e:ba:cb:28:8d:40:4a:
         59:87:ad:99:82:37:41:87:02:19:82:80:6d:84:44:46:3c:16:
         41:46:1d:83:55:89:3d:60:3d:c1:e7:fa:34:41:a1:e6:09:07:
         31:69:a1:c7:34:80:f8:92:75:a6:8a:d4:a3:57:7f:b7:34:54:
         47:f6:8d:2c:a8:1c:d9:80:cf:e2:9f:7b:ef:49:3a:71:95:4f:
         64:5c:62:a5:8b:f8:b1:d1:0f:17:f0:95:fa:e1:a6:14:11:37:
         51:e1:ba:f5:35:94:49:fb:79:35:a1:ad:71:76:c1:94:4a:22:
         16:06:12:81:73:99:8d:84:e5:fb:6c:aa:04:b9:cf:ea:f3:f8:
         ec:0d:b2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:15:44 2025 by rpki-client