Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/34352e3132372e3139322e302f32322d3232203d3e20323632313931.roa
File:                     34352e3132372e3139322e302f32322d3232203d3e20323632313931.roa (raw, json)
Hash identifier:          dWpGi+mRY5opJ/eRpLTQj7PsgvT7aC9bn8PBA/XGjl8=
Subject key identifier:   AE:B9:85:B6:56:35:BA:B1:66:2D:2B:E4:F6:52:49:06:4D:E8:69:BB
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       0653BCDA842C8DE16CB62EA77BC7D4D887CADC04
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/34352e3132372e3139322e302f32322d3232203d3e20323632313931.roa
Signing time:             Thu 29 May 2025 14:20:20 +0000
ROA not before:           Thu 29 May 2025 14:15:20 +0000
ROA not after:            Thu 28 May 2026 14:20:20 +0000
asID:                     262191
IP address blocks:        45.127.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 23:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:53:bc:da:84:2c:8d:e1:6c:b6:2e:a7:7b:c7:d4:d8:87:ca:dc:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: May 29 14:15:20 2025 GMT
            Not After : May 28 14:20:20 2026 GMT
        Subject: CN=AEB985B65635BAB1662D2BE4F65249064DE869BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:ca:84:85:52:34:4f:67:5a:5f:6b:b4:9c:
                    80:d3:c7:4c:7a:d0:60:ef:7c:8a:2f:60:e1:06:a3:
                    ca:3f:be:88:1e:1d:f5:d6:64:58:d8:20:dd:1f:36:
                    4f:05:ad:71:e4:0a:df:7c:46:a0:e5:97:5b:13:b8:
                    d0:cb:13:38:d2:aa:ae:f6:21:88:9e:af:e5:ff:4e:
                    25:2e:03:62:c8:9b:71:d0:21:03:a7:46:ec:6c:b1:
                    44:ab:4b:7c:59:d6:25:a2:6c:2a:29:03:ce:fa:0f:
                    d9:a4:3e:45:d7:c0:70:08:e0:58:74:3a:e8:e7:aa:
                    2b:d0:a3:be:40:a3:29:9b:ae:f6:27:4a:94:a9:7e:
                    51:a7:96:fa:1a:65:e8:c0:70:1f:1f:9a:d9:8b:49:
                    e1:75:bb:b5:f0:bc:e7:15:30:2c:a3:21:3a:b7:51:
                    84:da:a5:0e:bc:a2:2e:84:bc:0f:e8:5f:6c:e1:c4:
                    c1:81:ff:99:a9:2c:89:cb:df:83:ca:e9:82:07:cb:
                    f3:5a:10:bd:3b:8d:e6:e6:bc:b0:61:0c:18:f1:39:
                    d4:d8:bc:8c:38:90:fb:8c:d0:fd:16:0c:b1:77:37:
                    24:b5:b1:ad:72:42:de:f9:4b:f4:20:96:e0:dc:ac:
                    e8:e6:45:58:5e:01:4d:25:b2:20:ce:14:3f:39:08:
                    4a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B9:85:B6:56:35:BA:B1:66:2D:2B:E4:F6:52:49:06:4D:E8:69:BB
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/34352e3132372e3139322e302f32322d3232203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.127.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:d1:81:09:19:f7:96:0f:f4:3e:f8:c4:55:6b:0f:95:6e:86:
         91:b0:2c:f3:d8:29:66:8c:4f:95:72:5f:7b:29:66:56:a6:34:
         04:b4:17:e8:bf:af:44:3d:d4:00:7f:88:b0:f5:b8:a6:f9:17:
         ad:32:1c:a4:ac:43:05:ca:55:04:be:32:f0:56:da:4d:e3:02:
         cf:97:c7:2a:54:1c:c8:53:cb:69:16:28:28:c1:26:5a:c4:83:
         69:57:4d:af:ea:61:65:b1:2c:2b:6c:d2:c9:52:34:ca:b2:b9:
         59:22:1c:a9:7b:68:c0:60:76:3b:8b:09:7f:10:35:29:20:90:
         b8:99:4d:a6:fc:79:2d:18:11:11:7f:79:4d:0b:31:04:05:1b:
         33:3f:fd:93:6e:92:1d:5b:9d:ab:2a:c6:51:96:60:cc:dc:6f:
         5a:94:1e:58:77:82:e5:1b:f4:a9:40:19:20:06:7d:3f:1e:4f:
         50:9a:cd:fc:d5:72:9d:02:b9:37:6e:a5:eb:53:47:bc:4d:00:
         c5:09:d3:3a:80:c7:c1:b5:85:d3:07:1b:22:7f:d3:63:9f:83:
         0a:ac:c8:59:bf:57:36:f5:09:e1:d7:59:1d:f7:d7:9e:ec:4b:
         80:51:54:21:db:8e:f1:2d:98:6c:ac:54:3a:17:af:18:e7:56:
         04:b4:dd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:03:15 2025 by rpki-client