Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33362e302f32342d3234203d3e20323637373432.roa
File:                     34352e3136392e33362e302f32342d3234203d3e20323637373432.roa (raw, json)
Hash identifier:          7BKRGQZFjbsw8dgOHs1VPBWjyGwyfOglfc6tKoH4sak=
Subject key identifier:   F4:86:47:7B:52:EB:4B:A7:CF:75:E0:7D:91:64:D9:BD:0A:8B:18:A7
Certificate issuer:       /CN=99A57CEBEE8726CF20BD670F637543047A024742
Certificate serial:       6A6B1C9EFFBEAF9049C1DBB353AA63235388054A
Authority key identifier: 99:A5:7C:EB:EE:87:26:CF:20:BD:67:0F:63:75:43:04:7A:02:47:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A57CEBEE8726CF20BD670F637543047A024742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33362e302f32342d3234203d3e20323637373432.roa
Signing time:             Thu 29 May 2025 14:20:21 +0000
ROA not before:           Thu 29 May 2025 14:15:21 +0000
ROA not after:            Thu 28 May 2026 14:20:21 +0000
asID:                     267742
IP address blocks:        45.169.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/99A57CEBEE8726CF20BD670F637543047A024742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/99A57CEBEE8726CF20BD670F637543047A024742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A57CEBEE8726CF20BD670F637543047A024742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6b:1c:9e:ff:be:af:90:49:c1:db:b3:53:aa:63:23:53:88:05:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A57CEBEE8726CF20BD670F637543047A024742
        Validity
            Not Before: May 29 14:15:21 2025 GMT
            Not After : May 28 14:20:21 2026 GMT
        Subject: CN=F486477B52EB4BA7CF75E07D9164D9BD0A8B18A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5d:83:1a:3c:41:94:7e:2e:d9:c5:5b:b5:d0:
                    f1:a4:b2:0e:4f:3a:4a:f1:d2:02:ab:b4:38:40:d0:
                    6e:27:f9:ba:07:89:66:3a:60:fb:14:ea:59:86:48:
                    25:95:d0:da:73:7d:20:c4:e6:5d:17:65:13:8c:22:
                    50:92:c6:71:98:8f:83:3f:e6:25:37:de:da:1e:3c:
                    73:25:f9:dc:3a:7c:89:8c:09:c6:30:c2:ac:4e:c4:
                    56:ea:1f:4d:9f:a5:2a:79:59:7a:88:a4:32:e4:a2:
                    23:b4:73:2d:5c:80:35:88:a3:6c:41:78:6f:53:7b:
                    cb:a0:b4:77:a9:78:f8:b5:f1:b0:2d:c2:b2:83:fa:
                    02:86:7e:ad:37:0f:57:c9:3a:4b:74:0c:5c:a6:f0:
                    27:e1:6e:7b:05:84:3d:ea:bf:73:99:77:ed:a6:8a:
                    62:23:60:6c:1d:6c:1c:5b:c5:cb:1d:c8:86:51:f3:
                    db:0c:68:d4:11:e6:9d:2e:d3:e0:76:22:22:6b:e3:
                    d9:01:17:67:31:1b:71:5f:ff:e6:d1:af:88:0b:e7:
                    fd:4a:e5:ea:0b:c5:79:eb:74:f2:b4:32:2b:ea:8a:
                    f8:41:ff:92:85:52:e0:a8:9d:98:8b:42:73:bb:61:
                    20:f7:2b:cd:5b:f1:05:ac:61:40:9b:24:f9:f5:85:
                    e2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:86:47:7B:52:EB:4B:A7:CF:75:E0:7D:91:64:D9:BD:0A:8B:18:A7
            X509v3 Authority Key Identifier:
                keyid:99:A5:7C:EB:EE:87:26:CF:20:BD:67:0F:63:75:43:04:7A:02:47:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/99A57CEBEE8726CF20BD670F637543047A024742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A57CEBEE8726CF20BD670F637543047A024742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33362e302f32342d3234203d3e20323637373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:29:76:ce:14:9a:cf:ec:ea:ea:fe:02:3f:16:cf:19:b5:8b:
         e4:5b:8a:8e:2c:01:62:0e:e4:71:41:6b:db:fc:af:e6:d3:9d:
         00:58:2b:74:68:cc:a1:c9:11:0d:e1:d7:36:25:1a:67:97:10:
         0e:24:b6:ec:58:e0:41:85:5a:3d:67:4c:57:76:0e:dc:2a:c1:
         9c:40:8d:26:36:66:f6:d1:e1:a4:63:df:05:ff:3a:5c:a1:71:
         1e:85:93:b7:d2:78:cd:a6:f9:b7:11:93:ec:64:70:37:1c:69:
         2a:8e:4f:a1:5d:ec:b8:b5:06:6a:ae:54:39:77:78:f8:68:4d:
         fe:10:ce:51:61:0e:3b:ef:fd:a4:86:92:61:bb:44:ed:a7:c0:
         a1:7a:19:d5:8b:53:0f:a1:fd:71:0f:25:43:b4:c1:6e:bf:43:
         08:e5:38:b6:08:f7:f6:0e:e0:82:4e:31:df:86:59:2f:15:15:
         45:5d:3f:8a:c5:21:00:cc:a8:8a:16:39:93:09:af:9e:c8:87:
         06:6d:e9:5f:8e:5f:52:81:7f:3e:c9:5b:da:ab:78:d3:43:15:
         cf:31:f4:a7:ce:ad:2e:40:32:87:2e:38:d7:bf:c2:f6:f9:c5:
         be:e4:68:66:0d:c8:26:b6:07:c6:d5:c6:0a:ae:87:fb:75:07:
         f4:ed:dd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:04:59 2025 by rpki-client