Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/34352e3232392e3139322e302f32332d3233203d3e20323637373537.roa
File:                     34352e3232392e3139322e302f32332d3233203d3e20323637373537.roa (raw, json)
Hash identifier:          UjR/D99LKlYlLg/4hQekqltNOp0itwCuIOSjUqgiLts=
Subject key identifier:   77:F0:74:80:80:A6:72:02:21:49:53:57:DD:8D:AE:87:BB:67:43:77
Certificate issuer:       /CN=096026F2035C01DFDDA491A54F0110D751D4B655
Certificate serial:       4848122BBACC036054B06DDB76EA353A555B2B65
Authority key identifier: 09:60:26:F2:03:5C:01:DF:DD:A4:91:A5:4F:01:10:D7:51:D4:B6:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/34352e3232392e3139322e302f32332d3233203d3e20323637373537.roa
Signing time:             Tue 04 Feb 2025 18:07:59 +0000
ROA not before:           Tue 04 Feb 2025 18:02:59 +0000
ROA not after:            Tue 03 Feb 2026 18:07:59 +0000
asID:                     267757
IP address blocks:        45.229.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 05:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:48:12:2b:ba:cc:03:60:54:b0:6d:db:76:ea:35:3a:55:5b:2b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096026F2035C01DFDDA491A54F0110D751D4B655
        Validity
            Not Before: Feb  4 18:02:59 2025 GMT
            Not After : Feb  3 18:07:59 2026 GMT
        Subject: CN=77F0748080A6720221495357DD8DAE87BB674377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:40:f5:11:e5:8d:ae:ef:2c:c2:ec:45:d9:
                    eb:0b:78:13:3f:81:2a:5f:3c:24:e6:01:3b:94:8a:
                    9b:33:1e:e5:9e:d7:65:79:5d:97:a7:96:63:47:d5:
                    65:1b:dc:27:2d:01:3a:8d:8c:1b:1d:0a:b6:c6:4a:
                    8d:08:a5:32:16:22:6a:a3:39:09:d4:e5:af:4c:25:
                    bb:74:f3:23:ad:22:90:39:be:9c:13:81:5f:d0:d3:
                    55:6a:0c:13:a6:88:70:94:44:54:07:00:82:34:22:
                    d8:b3:48:82:52:14:39:f6:fd:08:02:b6:d2:8f:66:
                    f2:91:5b:62:c0:5e:ac:fa:8e:33:17:10:4b:fc:b9:
                    88:b9:b6:a9:d9:d2:3d:45:a4:4f:6c:12:60:7c:34:
                    e3:f6:6c:6c:54:be:a1:f0:21:25:f7:0f:ab:49:78:
                    ea:32:9c:2e:db:2d:90:97:a3:b8:98:83:58:b6:5d:
                    72:a1:12:b7:3a:a7:0a:83:f1:35:9d:9b:8e:0f:3b:
                    0f:8c:22:73:4f:5b:c1:83:ab:c1:39:be:15:2b:33:
                    a0:93:bc:ce:3f:a4:5b:dd:8a:6f:0c:d8:1b:70:d7:
                    01:6e:32:46:b2:98:a7:5e:13:67:98:7f:32:ae:f5:
                    c1:62:77:8d:41:90:fb:fd:7e:5f:42:5e:fc:2e:2f:
                    b7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F0:74:80:80:A6:72:02:21:49:53:57:DD:8D:AE:87:BB:67:43:77
            X509v3 Authority Key Identifier:
                keyid:09:60:26:F2:03:5C:01:DF:DD:A4:91:A5:4F:01:10:D7:51:D4:B6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/34352e3232392e3139322e302f32332d3233203d3e20323637373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:41:6c:58:2b:fe:4b:b1:13:04:32:2e:3d:51:fb:3a:9f:d1:
         ca:92:d9:bf:c3:7c:a1:02:85:c0:6e:39:bb:80:48:42:00:df:
         bb:3c:9b:86:23:c9:90:21:3b:5c:b7:db:b3:e7:ce:1d:4e:6b:
         f3:b8:76:54:4e:e4:7d:e8:72:fc:38:a4:e9:d1:58:29:b5:67:
         40:73:77:e3:41:43:82:fb:cb:af:1e:c1:0f:7e:54:d9:fb:6c:
         2e:6d:27:be:c8:a2:41:1e:e8:75:78:3a:9a:5a:0a:02:01:ba:
         f1:e7:b5:56:b7:e5:3d:d4:19:85:c9:2c:07:b8:07:45:dd:fa:
         eb:00:28:4d:7a:bb:b5:20:ec:09:ca:e8:02:f8:d6:a9:82:8e:
         7c:30:b2:42:aa:0b:70:30:07:f7:d8:da:c6:ea:3f:61:9b:af:
         7a:8f:b3:96:26:cc:d8:cf:8f:45:54:1f:93:f7:3f:ac:3c:02:
         fb:57:d9:e8:ae:a6:5b:3d:55:e9:7b:30:ec:7c:e7:7e:13:df:
         47:07:a8:04:4b:24:95:4d:26:84:bb:0e:0c:98:f9:95:c7:51:
         30:ca:93:9c:95:28:4a:90:8c:f8:c8:1e:cf:23:1c:d3:b5:00:
         28:f9:b3:c5:a6:76:b1:11:e8:ea:ca:d9:fa:e0:cb:e0:58:92:
         f2:9f:30:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:36:07 2025 by rpki-client