Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139362e302f32342d3234203d3e20323639383538.roa
File:                     34352e3138392e3139362e302f32342d3234203d3e20323639383538.roa (raw, json)
Hash identifier:          hAF4R+hD0YTTUSsp8hohgdmpSs18UeLNslce1gQ0WDo=
Subject key identifier:   10:A7:B5:46:AE:85:8E:B8:B8:37:B0:30:D3:C1:76:98:35:77:8D:3F
Certificate issuer:       /CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
Certificate serial:       07DCA0A8AFAD31B450259CDF6596B5DA7FE8D598
Authority key identifier: 0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139362e302f32342d3234203d3e20323639383538.roa
Signing time:             Tue 04 Feb 2025 18:39:32 +0000
ROA not before:           Tue 04 Feb 2025 18:34:32 +0000
ROA not after:            Tue 03 Feb 2026 18:39:32 +0000
asID:                     269858
IP address blocks:        45.189.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:dc:a0:a8:af:ad:31:b4:50:25:9c:df:65:96:b5:da:7f:e8:d5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
        Validity
            Not Before: Feb  4 18:34:32 2025 GMT
            Not After : Feb  3 18:39:32 2026 GMT
        Subject: CN=10A7B546AE858EB8B837B030D3C1769835778D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:f8:53:a1:c8:f7:98:dc:be:e8:c0:0e:26:
                    1f:d8:3f:dd:03:4e:23:0d:c8:af:e2:23:d4:91:4d:
                    9a:d9:9e:a0:f1:24:40:c8:4b:01:1c:28:42:df:c7:
                    60:e3:a5:0d:4c:fb:0a:3e:81:1a:39:79:47:ef:d1:
                    ce:2f:29:34:33:8c:55:4c:64:d8:4b:54:d6:bf:4b:
                    9d:26:ff:16:8c:d5:50:71:99:68:4b:7a:07:d9:b3:
                    a9:4e:97:07:f8:9f:9e:4c:67:92:1f:19:4c:61:6b:
                    5e:37:e7:e3:cd:b2:4d:68:de:0c:d9:9e:d8:cf:33:
                    6d:69:73:da:1b:96:f1:58:81:23:ad:02:47:6b:01:
                    07:22:a4:a3:1b:4c:17:5e:3c:1b:cf:d3:f8:b6:73:
                    27:0e:d9:af:f2:36:00:0e:3b:b4:b1:98:5a:8d:5b:
                    8e:a6:17:1c:06:04:cf:5c:6f:a5:af:23:cc:30:eb:
                    07:8e:8c:4a:c6:f6:ab:83:14:58:f0:7b:df:42:f5:
                    8b:99:2d:f9:58:52:9e:a3:f4:e5:46:50:22:d0:ec:
                    70:15:18:a0:0f:cc:be:0d:49:9e:2d:4b:3c:db:b1:
                    0f:3e:06:d4:99:eb:3a:a8:91:c0:ec:49:d5:51:4b:
                    e1:ad:f3:88:9e:aa:bc:9c:31:b7:71:6a:9a:bb:ff:
                    72:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A7:B5:46:AE:85:8E:B8:B8:37:B0:30:D3:C1:76:98:35:77:8D:3F
            X509v3 Authority Key Identifier:
                keyid:0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139362e302f32342d3234203d3e20323639383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:90:16:20:c2:ef:b6:de:20:d6:d0:d3:86:a1:97:09:ac:a6:
         e5:cf:81:6a:12:94:7b:db:85:7d:e9:ab:d6:3a:8c:7f:ab:5b:
         20:a4:58:c7:23:27:84:c3:a7:0a:24:43:2d:ff:63:f1:75:15:
         f8:69:b9:42:90:8b:1f:2b:38:81:b2:f0:71:6f:09:69:0e:a3:
         52:c4:bc:a4:62:12:85:b6:d1:86:66:84:28:2c:b5:0f:ae:b8:
         da:9b:dc:84:44:ea:d1:b4:6d:2a:ec:f5:63:21:67:fe:a0:b7:
         e6:72:61:e0:e1:61:29:5a:2e:6b:5d:5e:48:63:7b:4b:46:52:
         e3:8f:2c:e5:3d:1e:dd:78:82:65:3d:cd:41:a2:40:59:93:67:
         a4:db:8f:9b:4f:4a:ac:ea:c4:61:fc:27:92:81:01:8e:f7:98:
         78:d6:8b:8d:f5:48:bc:41:c9:66:31:33:f3:32:22:25:3a:19:
         b0:3b:d8:15:5e:a6:32:1d:40:8f:f8:a9:cd:e3:db:c3:33:3c:
         d5:26:bf:50:ba:7f:cd:e6:92:17:03:1b:94:3b:51:87:55:cc:
         1a:2c:05:9b:17:4f:89:64:cd:3f:c2:18:46:9a:2f:b6:ba:dd:
         57:89:41:ae:eb:8a:80:62:81:2a:59:7d:28:04:3c:a3:05:d9:
         1f:cc:f4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:05:53 2025 by rpki-client