Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/34352e3136342e3137322e302f32322d3234203d3e20323637373035.roa
File:                     34352e3136342e3137322e302f32322d3234203d3e20323637373035.roa (raw, json)
Hash identifier:          yZWkzdnI2yE2GWAW0fR8ozyK+67wGcmDL/+BxkZFYOM=
Subject key identifier:   BA:A8:19:88:30:0C:83:2D:49:C0:0D:1D:39:FB:96:28:ED:7F:E6:58
Certificate issuer:       /CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336
Certificate serial:       7EFF337ADBE11F64033E7B20E8078B8F64A78DE3
Authority key identifier: 00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/34352e3136342e3137322e302f32322d3234203d3e20323637373035.roa
Signing time:             Tue 04 Feb 2025 18:40:12 +0000
ROA not before:           Tue 04 Feb 2025 18:35:12 +0000
ROA not after:            Tue 03 Feb 2026 18:40:12 +0000
asID:                     267705
IP address blocks:        45.164.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ff:33:7a:db:e1:1f:64:03:3e:7b:20:e8:07:8b:8f:64:a7:8d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336
        Validity
            Not Before: Feb  4 18:35:12 2025 GMT
            Not After : Feb  3 18:40:12 2026 GMT
        Subject: CN=BAA81988300C832D49C00D1D39FB9628ED7FE658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:f0:b8:44:79:d9:4c:4c:8e:f4:f4:18:c2:
                    db:e8:00:ba:8e:22:b2:b1:77:ea:b1:ac:72:ed:9f:
                    b0:ee:5b:84:ef:31:1a:46:8b:2f:a3:b1:f7:df:3d:
                    c4:75:c8:03:a5:29:0c:b3:56:74:6f:b9:16:df:e4:
                    6f:0b:e1:62:94:8c:95:12:26:4e:63:ff:1d:06:53:
                    1a:e2:4a:82:4b:18:61:41:22:f4:c5:4b:ec:d6:d3:
                    ce:0d:17:cd:71:c8:9d:77:8e:63:73:ee:af:4a:11:
                    8d:98:db:66:ee:c4:89:95:38:ad:37:33:02:6b:ed:
                    37:59:0f:60:52:1c:d7:13:29:de:d3:b7:0d:f5:f3:
                    5f:05:6e:f4:11:2e:b2:33:9b:58:08:e8:36:73:39:
                    a1:be:dd:7f:08:87:bb:dc:de:43:48:db:d3:75:82:
                    5a:85:97:3a:b9:22:14:5e:e4:72:1f:97:a1:36:26:
                    49:9a:9b:6d:a6:b8:91:bb:ba:42:5f:4c:18:d1:fc:
                    bc:92:36:a5:d0:f6:12:28:f0:36:b0:66:50:29:c1:
                    a0:e4:28:1e:4b:69:e1:6a:78:62:4d:b1:08:b4:25:
                    c9:ff:d1:c6:7c:ed:c2:db:4f:5e:1c:f0:46:c9:bb:
                    9b:40:00:18:1c:99:f0:d1:22:92:90:bd:33:c1:41:
                    11:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A8:19:88:30:0C:83:2D:49:C0:0D:1D:39:FB:96:28:ED:7F:E6:58
            X509v3 Authority Key Identifier:
                keyid:00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/34352e3136342e3137322e302f32322d3234203d3e20323637373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:cf:47:d6:54:4c:28:1a:26:84:a2:b6:67:db:30:ac:b1:ef:
         de:fe:9f:23:c7:4b:a2:8a:aa:9a:11:3e:c8:61:6d:53:86:aa:
         65:9f:0e:fc:d7:2c:b6:2f:0d:3c:39:57:2e:65:8b:8c:f9:c6:
         f7:8e:47:87:e1:9d:60:97:2b:08:f6:10:a4:2b:6c:ca:d1:8f:
         8b:e8:1e:89:04:90:f4:7a:ac:42:ed:af:d3:d3:be:ed:85:2d:
         c7:4e:8d:c1:c5:15:b4:18:79:62:dd:5a:fd:ff:20:86:aa:cf:
         6d:4d:8f:75:70:3c:15:36:60:e7:67:e6:c0:f7:86:70:50:c4:
         26:a8:09:ec:08:cc:19:dc:8d:a4:31:a3:23:cb:38:09:82:b0:
         4a:d8:d7:52:cd:42:ad:c0:8c:d4:b4:2f:7c:f1:ba:45:74:f3:
         fc:83:12:b9:9b:ea:f6:80:03:42:e1:45:0a:34:bb:58:96:35:
         72:1d:2c:8b:5d:6d:eb:be:8f:3b:88:ba:b7:04:d7:dc:55:47:
         bd:e7:3c:af:f9:fd:89:9f:1a:b0:2a:70:08:0e:a8:cc:d0:ad:
         9e:8f:2d:97:59:4a:0b:8d:cd:9d:6c:dc:0e:34:a6:bf:82:a1:
         01:0e:37:64:c7:78:f4:47:90:50:c4:c0:11:f3:7b:c1:3c:bb:
         f1:eb:48:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:12 2025 by rpki-client