Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/34352e3139312e38382e302f32322d3234203d3e20323639383837.roa
File:                     34352e3139312e38382e302f32322d3234203d3e20323639383837.roa (raw, json)
Hash identifier:          VDT/XY5NOZj/gSvmmK+cJE3i1st0eAmM04AIslpJwgQ=
Subject key identifier:   CD:91:AF:2D:C0:7B:74:02:90:C6:1D:6E:9F:E0:B8:69:1C:4A:4D:14
Certificate issuer:       /CN=9F12506BED8DAFE7AD724FA19BA1A600CB9F1459
Certificate serial:       16D9F74540A015E497C7503E27B2161F50388ABC
Authority key identifier: 9F:12:50:6B:ED:8D:AF:E7:AD:72:4F:A1:9B:A1:A6:00:CB:9F:14:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/34352e3139312e38382e302f32322d3234203d3e20323639383837.roa
Signing time:             Tue 04 Feb 2025 20:04:03 +0000
ROA not before:           Tue 04 Feb 2025 19:59:03 +0000
ROA not after:            Tue 03 Feb 2026 20:04:03 +0000
asID:                     269887
IP address blocks:        45.191.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d9:f7:45:40:a0:15:e4:97:c7:50:3e:27:b2:16:1f:50:38:8a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F12506BED8DAFE7AD724FA19BA1A600CB9F1459
        Validity
            Not Before: Feb  4 19:59:03 2025 GMT
            Not After : Feb  3 20:04:03 2026 GMT
        Subject: CN=CD91AF2DC07B740290C61D6E9FE0B8691C4A4D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:c0:e3:a3:43:a4:40:3f:55:c5:ed:f3:0f:
                    7f:e1:a1:31:07:73:8a:1d:cc:f4:59:78:65:e9:37:
                    cc:fc:38:68:ac:ed:69:ba:c1:82:78:19:c7:81:50:
                    6a:d2:40:3e:58:78:f3:b5:6d:58:18:f7:00:02:cc:
                    99:b0:af:91:d6:da:ef:1e:5b:aa:f0:62:6c:76:67:
                    38:a0:f3:e6:f3:8c:1d:59:95:4a:10:87:5a:e2:35:
                    33:08:5f:6c:a3:dd:aa:9c:bb:b1:77:ee:78:43:f1:
                    04:7e:f8:c4:1a:90:8d:9d:7c:8e:62:cb:bb:1b:ed:
                    63:b4:77:61:ad:57:97:d5:b3:57:de:c3:8f:c2:2a:
                    98:36:40:36:2e:2c:00:c4:1f:53:9b:50:4b:ee:b4:
                    a6:7d:87:ca:55:36:2d:cf:1b:e9:c4:a6:69:a9:bc:
                    90:e1:e8:7b:31:94:ba:02:e0:2e:27:14:e9:e2:ba:
                    cc:e8:67:07:3b:80:75:71:e0:c7:9f:d4:48:64:8d:
                    8b:31:f3:0d:9c:a5:a6:5c:d7:2d:fc:10:b0:c5:43:
                    91:90:33:9a:a9:12:49:fd:5c:9f:dc:10:db:73:c7:
                    6c:3e:4e:60:15:21:ca:6e:a2:09:11:f4:80:c8:74:
                    69:69:b1:a6:6f:e7:75:19:d0:0f:fa:a0:f4:e6:51:
                    d4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:91:AF:2D:C0:7B:74:02:90:C6:1D:6E:9F:E0:B8:69:1C:4A:4D:14
            X509v3 Authority Key Identifier:
                keyid:9F:12:50:6B:ED:8D:AF:E7:AD:72:4F:A1:9B:A1:A6:00:CB:9F:14:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/34352e3139312e38382e302f32322d3234203d3e20323639383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:f0:8d:03:64:d1:d2:6f:ed:c0:0b:d1:44:33:2e:40:45:90:
         98:41:b1:6a:87:16:40:bf:d0:0e:ce:8b:c9:22:14:2d:9b:7e:
         6e:ca:56:a0:1f:9f:bc:61:25:65:1f:b6:34:a6:06:2d:93:0d:
         4c:5b:0e:95:9c:8e:02:90:9f:cd:d5:21:f7:15:dd:bc:bb:2d:
         0d:51:d2:76:5a:ab:f5:d0:e8:75:fe:74:49:c7:a5:76:c7:2c:
         3a:f6:3e:17:7d:a4:8a:19:0f:39:9d:6c:af:42:e2:5f:50:95:
         22:73:61:3d:22:1c:95:e2:87:fe:98:b6:a0:2c:6b:e3:4e:7a:
         f2:44:a2:05:d4:f5:84:10:40:34:f5:14:77:c0:fe:09:d5:10:
         97:c2:d4:33:b1:1b:00:da:77:a4:73:0b:c9:22:36:c4:86:0a:
         9a:71:fa:4c:a0:12:8c:a8:8d:50:a5:82:98:20:ed:0f:b4:ed:
         fb:90:94:8b:59:e5:04:a3:40:f4:db:4d:02:97:e9:18:57:b3:
         2a:9a:d2:10:91:9d:4e:3d:31:94:20:ab:29:a0:d2:cf:cc:d3:
         17:a7:0b:2f:87:d0:b0:de:5f:5c:3c:7c:2e:73:1e:2b:0f:a8:
         c6:e9:b4:10:2b:4c:7d:fe:75:68:aa:31:49:4e:91:4e:8f:24:
         e4:0b:c5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:18 2025 by rpki-client