Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/34352e3139312e352e302f32342d3234203d3e20323639383039.roa
File:                     34352e3139312e352e302f32342d3234203d3e20323639383039.roa (raw, json)
Hash identifier:          vZkcZIeaZzjsC61o6nD/LgLTrnm5j+9lihMr/ExX0to=
Subject key identifier:   20:72:4C:27:0E:2D:57:23:BA:E4:46:1C:BC:A3:C4:8E:31:21:0D:EC
Certificate issuer:       /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Certificate serial:       54031A66AA53296877325B1814E85FD63353BD15
Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/34352e3139312e352e302f32342d3234203d3e20323639383039.roa
Signing time:             Tue 04 Feb 2025 20:02:44 +0000
ROA not before:           Tue 04 Feb 2025 19:57:44 +0000
ROA not after:            Tue 03 Feb 2026 20:02:44 +0000
asID:                     269809
IP address blocks:        45.191.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:03:1a:66:aa:53:29:68:77:32:5b:18:14:e8:5f:d6:33:53:bd:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
        Validity
            Not Before: Feb  4 19:57:44 2025 GMT
            Not After : Feb  3 20:02:44 2026 GMT
        Subject: CN=20724C270E2D5723BAE4461CBCA3C48E31210DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:76:16:9a:74:cb:90:31:70:4b:bd:75:8b:4f:
                    34:2c:31:89:9d:ed:af:27:a7:da:06:2f:7f:8d:f4:
                    21:65:ac:c5:3f:6d:b3:51:e4:cf:d4:52:e1:fc:23:
                    a4:74:f5:75:6e:fe:01:be:64:01:8b:9c:51:6d:09:
                    73:09:8b:ef:6c:a8:76:72:85:ff:22:8e:d0:88:d8:
                    26:16:ee:95:f4:a7:0e:38:f4:9d:2d:04:e2:19:c6:
                    cf:ce:d3:eb:38:10:47:29:61:25:b8:a6:7a:dd:06:
                    04:0e:40:07:f7:7c:c1:d2:89:20:26:34:e1:a5:12:
                    22:d1:ef:06:30:17:89:d1:18:44:cf:92:b7:ba:d0:
                    15:f2:1e:df:56:88:6d:2c:51:c7:94:45:32:07:fd:
                    29:64:c2:81:72:d3:a0:80:b9:a8:5a:23:7b:6f:f7:
                    08:a8:81:71:b1:00:4a:cb:23:9d:05:12:79:a1:2d:
                    2a:98:7a:51:dc:b2:02:06:45:79:55:ef:37:c9:9c:
                    a6:bb:89:4f:7d:6e:ed:66:02:9a:13:bc:8e:80:62:
                    67:57:48:2e:e3:1e:aa:e7:08:22:ee:03:6c:c4:84:
                    3d:04:28:6d:89:a1:f0:70:60:fb:e5:d4:d0:ef:2a:
                    af:62:c3:41:eb:38:97:e1:8c:f3:bb:5d:9e:ce:c2:
                    3a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:72:4C:27:0E:2D:57:23:BA:E4:46:1C:BC:A3:C4:8E:31:21:0D:EC
            X509v3 Authority Key Identifier:
                keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/34352e3139312e352e302f32342d3234203d3e20323639383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:58:ea:54:70:07:1e:9d:5a:f9:53:d4:1c:b3:88:a8:e8:f5:
         8b:fe:c2:e0:9a:e7:1e:02:7b:9b:a2:40:5a:b7:1b:fa:95:57:
         df:1c:04:aa:c8:58:a3:01:50:0b:8f:1a:8a:ca:c7:6e:a0:14:
         22:62:3e:62:a3:ec:c6:3b:d1:75:99:53:c7:5b:8d:7f:48:5f:
         6b:ca:8c:85:64:a9:5a:6d:fd:f6:fe:94:b5:ff:74:33:4c:82:
         cc:1b:21:b7:52:d4:b5:bb:42:fa:75:f7:a2:6a:5e:0e:3f:a0:
         c5:4b:14:be:21:33:62:f1:33:f3:3e:e1:d0:9b:aa:e2:4e:c5:
         71:ed:05:5b:1a:13:6a:51:70:49:3f:76:5e:65:3c:fa:b4:1f:
         4a:a0:be:6b:8d:8c:e9:b1:81:4c:d4:89:e8:51:8b:56:64:52:
         ea:b4:ee:90:19:02:6c:1d:8c:1d:f0:85:b9:52:89:ea:6d:70:
         91:21:bc:d0:8b:3f:2c:b9:0b:bb:2c:20:db:e5:4e:50:1a:3d:
         f9:52:18:28:0d:a4:7a:86:90:00:2a:e3:6e:a5:64:e8:02:1b:
         f3:08:a3:1e:97:0f:12:15:ee:30:53:3d:41:73:0f:23:e2:55:
         24:bb:d7:09:11:b5:d4:a1:cb:86:f7:63:a3:4d:44:98:4c:e7:
         50:ca:91:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:45:31 2025 by rpki-client