Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130362e302f32332d3233203d3e20323633373530.roa
File:                     34352e3137302e3130362e302f32332d3233203d3e20323633373530.roa (raw, json)
Hash identifier:          fkAiaegaE37LuEDQcxGyahc/C8q66BzpjxyIIkyCIcU=
Subject key identifier:   E3:CC:13:4C:DA:72:00:BE:1B:31:11:25:3E:E1:8F:A4:37:9B:D6:5A
Certificate issuer:       /CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Certificate serial:       128C795AF3F82B79C316DA1684BFEEBC13240525
Authority key identifier: 1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130362e302f32332d3233203d3e20323633373530.roa
Signing time:             Fri 30 May 2025 20:20:43 +0000
ROA not before:           Fri 30 May 2025 20:15:43 +0000
ROA not after:            Fri 29 May 2026 20:20:43 +0000
asID:                     263750
IP address blocks:        45.170.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 06:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:8c:79:5a:f3:f8:2b:79:c3:16:da:16:84:bf:ee:bc:13:24:05:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
        Validity
            Not Before: May 30 20:15:43 2025 GMT
            Not After : May 29 20:20:43 2026 GMT
        Subject: CN=E3CC134CDA7200BE1B3111253EE18FA4379BD65A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:27:3b:bf:b4:2f:7b:05:fa:0c:34:e9:46:4c:
                    86:9d:96:75:56:d6:6f:39:bc:49:c2:04:d3:c9:07:
                    b8:5c:d7:1c:e4:b0:00:7c:87:47:40:b0:80:ce:ab:
                    3b:c2:99:5e:9d:06:ee:cc:a6:c9:a9:0b:96:ca:c4:
                    6d:7f:e9:a4:e9:79:48:98:18:39:c1:75:fc:d9:00:
                    b0:6e:99:8a:41:aa:b0:7d:6d:65:d9:ee:2c:d1:4f:
                    79:8e:7f:1f:50:44:a6:4b:c1:03:3d:35:54:49:84:
                    63:1f:d0:d1:dc:63:c6:97:bd:91:6f:7f:cf:5f:9b:
                    90:25:c4:96:2d:13:56:2b:2c:b2:94:de:1c:68:8e:
                    d5:d2:3c:c0:72:a2:7e:63:cf:62:4b:45:4f:29:86:
                    32:8d:a8:2c:e8:17:35:66:52:20:06:26:5f:2e:81:
                    dc:b5:21:24:92:83:6d:7b:3d:a8:c0:d2:ae:fd:a5:
                    ef:31:66:50:ce:f2:ea:75:91:b6:5e:16:f1:aa:2c:
                    60:11:88:05:48:ed:11:58:3b:6a:84:51:2e:dd:8d:
                    16:4a:6e:fd:87:28:ac:38:9a:1f:38:eb:be:53:88:
                    9e:f3:60:90:42:ba:26:a8:70:e8:97:0d:90:bf:4c:
                    56:40:8b:ca:60:e0:fe:22:2d:c8:f7:bf:8b:1e:12:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CC:13:4C:DA:72:00:BE:1B:31:11:25:3E:E1:8F:A4:37:9B:D6:5A
            X509v3 Authority Key Identifier:
                keyid:1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130362e302f32332d3233203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:27:02:04:1b:2a:34:e2:eb:d7:59:a1:ce:9a:18:82:c1:74:
         0f:fb:89:fc:f6:eb:19:78:cb:a3:fc:20:c8:68:1f:c6:73:f8:
         ad:bf:32:43:b3:cc:bc:54:6c:3d:2f:61:b1:99:2f:78:47:2b:
         00:bd:e3:4f:ca:f6:83:8a:cb:e7:f4:83:0a:0f:16:44:fe:83:
         34:f9:10:17:41:5e:fd:70:09:31:74:0f:7c:0e:c8:b8:a5:73:
         0c:f9:53:50:85:c0:5b:31:f1:5b:81:7f:4a:63:cf:f8:24:45:
         31:16:70:92:0f:63:e7:bb:01:f8:21:8c:14:44:62:94:49:a5:
         3e:63:d0:d2:b8:52:04:12:46:7f:45:48:bf:c4:24:c7:c1:21:
         eb:68:98:57:21:36:85:37:7c:c8:46:99:49:41:94:7d:27:43:
         7b:4e:e8:23:d1:b7:df:77:d9:b7:f7:09:4a:2c:63:97:15:34:
         8e:e4:2f:9c:5a:71:00:f6:57:0a:e1:98:fa:c8:6f:03:7e:58:
         b2:20:98:fe:dd:08:ec:18:21:bd:e7:1c:df:b0:95:08:90:14:
         07:97:0d:4f:04:2a:e6:a7:4a:e3:a3:2a:5d:37:28:aa:5d:b5:
         6e:6d:2d:1b:34:a9:9e:fd:11:91:03:2f:89:f7:dc:9c:c0:8e:
         fd:7b:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:17:11 2025 by rpki-client