Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130372e302f32342d3234203d3e20323633373530.roa
File:                     34352e3137302e3130372e302f32342d3234203d3e20323633373530.roa (raw, json)
Hash identifier:          H/0Is+Hi/oUwo9E7SgolHBFHLxRqh2CzhGqK68efUik=
Subject key identifier:   F4:98:71:79:7C:30:A3:8C:04:6E:6F:14:2C:5E:F4:2B:B2:8A:73:70
Certificate issuer:       /CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Certificate serial:       77B956A17C82A331B91ACEFD5559A14560604216
Authority key identifier: 1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130372e302f32342d3234203d3e20323633373530.roa
Signing time:             Fri 30 May 2025 20:20:42 +0000
ROA not before:           Fri 30 May 2025 20:15:42 +0000
ROA not after:            Fri 29 May 2026 20:20:42 +0000
asID:                     263750
IP address blocks:        45.170.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 06:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b9:56:a1:7c:82:a3:31:b9:1a:ce:fd:55:59:a1:45:60:60:42:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
        Validity
            Not Before: May 30 20:15:42 2025 GMT
            Not After : May 29 20:20:42 2026 GMT
        Subject: CN=F49871797C30A38C046E6F142C5EF42BB28A7370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:16:29:e4:17:bc:26:e4:7c:65:bb:76:e7:d8:
                    56:e0:28:98:c2:e1:c8:cd:53:56:3b:e2:08:6c:d9:
                    50:cf:6c:fc:bf:db:94:99:f7:08:e4:13:bf:17:39:
                    a9:92:13:46:4c:6a:40:b9:f7:8f:ff:49:e1:cd:01:
                    ad:59:db:9f:32:62:24:5a:c2:86:c1:7c:cb:81:13:
                    c0:4f:ad:85:ab:88:27:bb:d8:6d:07:68:63:ed:a3:
                    1f:74:bb:75:ad:0a:1c:0e:b9:fd:4f:16:9e:6c:2e:
                    60:a0:50:49:69:c9:64:8f:98:9d:bf:e9:5a:ee:4d:
                    e3:f7:00:bb:b1:b4:36:73:2c:8d:c2:41:a8:28:2c:
                    e1:33:e4:80:76:4b:f6:f9:89:bc:60:f2:14:4f:6b:
                    d1:bf:ec:10:6b:be:f4:79:b2:01:2f:43:01:2a:e9:
                    11:2f:9e:e2:e8:50:9b:69:cb:98:e7:fc:f8:48:52:
                    9d:9e:84:fd:a7:0a:b4:38:bf:27:59:12:2e:96:fb:
                    8e:b1:d1:ef:5d:8c:3e:20:48:41:2c:cd:c9:2b:e8:
                    b8:c1:d6:e4:fb:11:6f:e2:89:76:d7:96:b3:a2:d3:
                    33:7b:2f:f4:04:41:d0:b0:59:96:17:9b:a2:09:09:
                    6f:38:98:62:10:1a:05:72:71:b8:01:b8:c8:15:3d:
                    67:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:98:71:79:7C:30:A3:8C:04:6E:6F:14:2C:5E:F4:2B:B2:8A:73:70
            X509v3 Authority Key Identifier:
                keyid:1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130372e302f32342d3234203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:08:56:6d:ed:b6:e8:3a:51:aa:11:c9:62:7e:1b:a0:4c:a8:
         84:06:97:0a:68:b1:1b:52:a0:0d:05:32:df:71:33:b7:f9:a3:
         65:10:8d:98:37:76:87:24:e7:4f:93:f9:f9:28:9c:43:f3:09:
         e6:d5:59:2e:4b:52:80:a1:12:a6:78:68:d1:f9:31:94:4c:65:
         e1:39:52:8c:4a:a9:05:ab:84:c2:b7:61:82:0c:ed:78:ea:bf:
         72:67:2b:f5:5a:04:4b:2e:84:6f:a2:1f:9d:e5:b7:34:b2:e0:
         35:fd:a8:7f:93:8f:f7:87:df:ef:60:ec:d1:15:fb:c6:0b:dd:
         3a:19:8e:12:0a:a1:cb:f0:0b:44:d7:dd:40:7b:0e:16:af:8e:
         ce:45:63:ef:93:0f:2a:be:c6:c4:52:a7:46:b7:3c:4b:c1:5e:
         f8:9d:5a:7c:51:61:8d:8b:f5:1f:64:d2:eb:e9:6e:ab:68:39:
         19:2b:32:82:5e:9b:20:94:37:15:35:81:1b:a4:20:0d:52:8c:
         23:dc:a1:19:2a:51:7b:c6:a8:c6:49:1f:a6:9c:ea:9b:4b:36:
         03:1e:39:56:6b:e8:b4:4a:f8:4c:31:5c:8c:c6:99:a8:b9:59:
         be:b1:84:fe:a4:8b:8a:a8:be:66:91:0d:27:6d:8f:f8:77:a6:
         64:da:6f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:18:44 2025 by rpki-client