Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33372e302f32342d3234203d3e20323632313931.roa
File:                     34352e3136392e33372e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          kphUW6oeF8inetAE/C7C3gGwfO2aXmY0sdELFgj1zBA=
Subject key identifier:   7D:7C:67:63:E7:5B:8E:FD:15:80:D5:BC:56:B2:A6:06:05:42:BB:93
Certificate issuer:       /CN=99A57CEBEE8726CF20BD670F637543047A024742
Certificate serial:       6D435604EC92C7D0FA7ED753C1B7D857820A78E6
Authority key identifier: 99:A5:7C:EB:EE:87:26:CF:20:BD:67:0F:63:75:43:04:7A:02:47:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A57CEBEE8726CF20BD670F637543047A024742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33372e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 18:53:14 +0000
ROA not before:           Tue 04 Feb 2025 18:48:14 +0000
ROA not after:            Tue 03 Feb 2026 18:53:14 +0000
asID:                     262191
IP address blocks:        45.169.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/99A57CEBEE8726CF20BD670F637543047A024742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/99A57CEBEE8726CF20BD670F637543047A024742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A57CEBEE8726CF20BD670F637543047A024742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:43:56:04:ec:92:c7:d0:fa:7e:d7:53:c1:b7:d8:57:82:0a:78:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A57CEBEE8726CF20BD670F637543047A024742
        Validity
            Not Before: Feb  4 18:48:14 2025 GMT
            Not After : Feb  3 18:53:14 2026 GMT
        Subject: CN=7D7C6763E75B8EFD1580D5BC56B2A6060542BB93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:83:d2:c2:49:2a:63:a1:6d:9e:89:a7:b0:b2:
                    1d:4c:88:23:f7:f4:1a:fd:ee:a5:29:16:69:eb:02:
                    27:97:9d:6e:8a:28:e0:30:84:f7:9f:0b:d4:d2:b8:
                    7c:51:1b:44:ea:14:e3:74:71:a1:f9:30:06:81:7a:
                    40:28:36:48:a4:01:6a:e7:ff:8e:06:85:5b:ea:76:
                    38:94:39:a0:4f:69:ee:f2:d3:fb:82:f1:f3:55:b3:
                    5e:6d:a7:d9:77:ec:d1:04:a8:2a:7e:5a:d2:9e:69:
                    c8:e0:7a:0e:8d:cc:d2:08:81:5a:1b:1e:78:a3:a7:
                    b1:76:60:e8:e3:fd:0b:ff:7e:84:09:0d:92:ec:f5:
                    51:56:9c:cc:f9:ec:88:bb:3a:30:3c:f1:00:c2:31:
                    1a:29:6f:ea:f0:c8:c5:2a:95:6f:a7:83:43:5c:15:
                    d6:25:7b:27:f1:4b:b7:ae:7e:e2:a1:af:89:c6:28:
                    7d:0f:bb:3d:1f:00:fe:d1:cb:e9:71:a7:c2:99:99:
                    22:a6:f2:ca:b3:8d:db:b4:37:3d:51:24:9a:2b:b7:
                    8f:52:c4:a6:17:21:84:0a:99:f7:bb:ae:42:27:0c:
                    ba:20:f9:2f:9b:b8:f4:f6:ad:65:9b:29:f5:8c:d1:
                    38:94:4b:e4:2a:85:d1:81:74:23:80:81:87:78:df:
                    f8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7C:67:63:E7:5B:8E:FD:15:80:D5:BC:56:B2:A6:06:05:42:BB:93
            X509v3 Authority Key Identifier:
                keyid:99:A5:7C:EB:EE:87:26:CF:20:BD:67:0F:63:75:43:04:7A:02:47:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/99A57CEBEE8726CF20BD670F637543047A024742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A57CEBEE8726CF20BD670F637543047A024742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33372e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:72:9a:dc:4e:c1:8a:1c:fa:ec:99:70:d5:d5:17:1d:60:3b:
         94:f3:42:81:77:71:83:64:9d:1c:a7:0b:12:c7:c7:59:f9:06:
         4a:09:06:90:4f:d0:42:cd:a9:7e:db:00:87:0a:1c:19:d0:02:
         7e:70:1b:05:6f:c3:5f:b3:46:a8:84:a7:73:16:2e:91:25:7f:
         34:e8:cb:f5:99:6c:58:cf:b5:9d:04:ae:c3:d7:78:5d:e4:5b:
         e5:f7:59:3a:74:fb:23:6c:8d:68:f9:3e:fb:b6:f0:68:10:84:
         b1:e0:f1:36:38:37:3e:2a:f5:28:14:c5:5f:3e:c9:70:87:45:
         db:d3:04:81:0b:90:37:3d:ca:5e:c2:b4:6d:e3:a6:ad:92:33:
         7c:f6:83:50:fd:13:d8:8a:ee:33:7b:99:ca:e1:b4:c8:b0:4f:
         d0:7a:b5:37:ed:91:0b:ce:73:10:e4:06:92:91:d5:8e:86:49:
         2c:94:ee:fa:ee:8c:23:2b:46:4f:2c:69:90:e0:21:03:e7:fc:
         c4:6a:c9:cd:87:88:e5:0f:04:a3:24:9e:eb:19:d7:2d:dd:33:
         92:90:cf:8c:b7:57:55:90:24:d3:a3:61:10:35:2f:34:9b:7b:
         5f:05:28:92:82:fb:53:ce:29:ec:2c:72:1d:ef:6c:c7:d6:1e:
         c4:d1:66:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:04 2025 by rpki-client