Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00B63784B60551D7D5C823E51161F7126AABF85F02B14A6DD23A6CD70B002FE4/0/34352e3137322e3232382e302f32322d3234203d3e20323637373935.roa
File:                     34352e3137322e3232382e302f32322d3234203d3e20323637373935.roa (raw, json)
Hash identifier:          Bj3kOHByV4O4PKOROG1s9NoesYCsH6RhICtv/pLBy7Y=
Subject key identifier:   2B:01:D0:02:A9:C9:9B:C4:AD:23:95:FE:18:D6:A9:6B:1B:27:1C:84
Certificate issuer:       /CN=39064E5142A5263487A079AC43BFFB42D0D3D95D
Certificate serial:       770FFDFC2465C8E93F2DBA9E58529A8687D35CA6
Authority key identifier: 39:06:4E:51:42:A5:26:34:87:A0:79:AC:43:BF:FB:42:D0:D3:D9:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39064E5142A5263487A079AC43BFFB42D0D3D95D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00B63784B60551D7D5C823E51161F7126AABF85F02B14A6DD23A6CD70B002FE4/0/34352e3137322e3232382e302f32322d3234203d3e20323637373935.roa
Signing time:             Tue 04 Feb 2025 20:01:38 +0000
ROA not before:           Tue 04 Feb 2025 19:56:38 +0000
ROA not after:            Tue 03 Feb 2026 20:01:38 +0000
asID:                     267795
IP address blocks:        45.172.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00B63784B60551D7D5C823E51161F7126AABF85F02B14A6DD23A6CD70B002FE4/0/39064E5142A5263487A079AC43BFFB42D0D3D95D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00B63784B60551D7D5C823E51161F7126AABF85F02B14A6DD23A6CD70B002FE4/0/39064E5142A5263487A079AC43BFFB42D0D3D95D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39064E5142A5263487A079AC43BFFB42D0D3D95D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0f:fd:fc:24:65:c8:e9:3f:2d:ba:9e:58:52:9a:86:87:d3:5c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39064E5142A5263487A079AC43BFFB42D0D3D95D
        Validity
            Not Before: Feb  4 19:56:38 2025 GMT
            Not After : Feb  3 20:01:38 2026 GMT
        Subject: CN=2B01D002A9C99BC4AD2395FE18D6A96B1B271C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fd:26:ef:4d:07:d9:6f:50:c0:e0:49:94:2f:
                    ec:25:2e:24:98:e8:e5:c5:09:b8:f6:b9:ce:89:26:
                    44:e2:9d:cd:d7:e0:2b:18:74:30:e4:b2:9e:5d:80:
                    52:a6:ab:3c:2e:4d:1b:bc:19:bc:5e:95:5c:40:be:
                    c0:3b:c6:40:d9:79:fe:0d:62:db:8b:c1:11:51:7d:
                    ad:63:47:cb:d9:2e:22:5b:bf:43:06:1b:30:22:01:
                    18:f8:11:49:47:76:55:27:7f:80:d7:d6:64:7e:23:
                    7b:5b:06:5f:35:9c:75:0d:e8:6b:c1:bf:9c:7e:a5:
                    db:10:af:eb:37:c0:19:30:41:b8:ca:16:a5:51:c8:
                    f2:61:1e:36:d5:81:34:ca:f9:6c:08:50:0d:10:e4:
                    9f:03:7f:6c:ee:9e:f7:30:dc:0c:d2:c0:0e:27:8b:
                    96:dc:b2:96:bf:0c:e8:ae:0f:88:70:fb:d6:15:4a:
                    46:27:54:b3:03:ab:1b:13:e5:4c:1f:46:6f:42:54:
                    95:97:61:cb:18:3c:fb:77:bf:50:91:56:e1:79:97:
                    1f:5f:24:cd:be:7a:90:38:cb:c8:7e:6d:dc:64:32:
                    62:b3:be:80:1d:99:2e:6c:df:c4:0e:0f:93:cf:6c:
                    08:c2:ad:1b:bf:68:7e:bd:c8:d5:e1:f9:a7:e0:51:
                    28:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:01:D0:02:A9:C9:9B:C4:AD:23:95:FE:18:D6:A9:6B:1B:27:1C:84
            X509v3 Authority Key Identifier:
                keyid:39:06:4E:51:42:A5:26:34:87:A0:79:AC:43:BF:FB:42:D0:D3:D9:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00B63784B60551D7D5C823E51161F7126AABF85F02B14A6DD23A6CD70B002FE4/0/39064E5142A5263487A079AC43BFFB42D0D3D95D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39064E5142A5263487A079AC43BFFB42D0D3D95D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00B63784B60551D7D5C823E51161F7126AABF85F02B14A6DD23A6CD70B002FE4/0/34352e3137322e3232382e302f32322d3234203d3e20323637373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:f7:b6:52:58:25:27:9f:3f:d7:4e:25:ea:5f:c3:22:65:e9:
         e4:6a:46:5b:4f:3c:c9:78:73:5d:f3:78:db:15:fc:a2:2c:6b:
         88:5c:4c:ad:71:2b:dd:6d:6e:a8:5a:64:95:cb:79:25:25:b9:
         ac:5f:1d:dd:4b:f8:c3:0f:47:b6:e7:fb:99:0a:83:e6:39:6e:
         0b:28:89:f1:b6:ce:d5:5a:de:77:7e:7b:8b:49:d5:72:fa:bc:
         78:59:39:1c:20:56:7c:d5:46:24:2b:e4:4b:7c:f1:7a:97:4a:
         b1:d9:92:31:e1:10:d2:59:79:4a:5c:02:0f:12:4c:36:d0:00:
         4d:98:82:2b:be:17:6c:71:f0:1e:f7:c7:5f:a7:5c:e0:1e:4e:
         2d:ce:33:2a:09:05:db:b6:63:99:80:90:43:3a:1a:2b:56:e0:
         62:62:54:da:3f:02:15:0d:13:d6:b1:f5:f2:e0:88:c5:74:c7:
         45:18:e7:8d:ae:be:d1:80:d0:76:87:34:48:66:44:05:fe:65:
         62:9f:d4:3e:c3:a1:41:c4:b6:47:22:42:29:16:15:57:44:af:
         6b:fc:0c:f1:2f:cf:1d:d0:4f:f6:f8:35:3e:03:fb:bd:ad:3f:
         d1:cb:b8:2e:92:b6:d2:0a:be:75:e9:ca:45:c2:8e:d1:c3:c8:
         d5:34:b5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:34:03 2025 by rpki-client