Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/34352e3136382e3233392e302f32342d3234203d3e20323635353330.roa
File:                     34352e3136382e3233392e302f32342d3234203d3e20323635353330.roa (raw, json)
Hash identifier:          Puu7VuuNR0pB34xcFU1UKAuLBklnY2vG+Ia1Q8eK2U0=
Subject key identifier:   CE:F1:5B:7D:74:FC:E9:E2:95:3B:35:84:CC:C7:50:E7:C1:FF:A8:01
Certificate issuer:       /CN=9A758BF09145BEC830A7EE000666C15B37354654
Certificate serial:       41D9F9A9C6A74A0526F087497FC91131A20511B8
Authority key identifier: 9A:75:8B:F0:91:45:BE:C8:30:A7:EE:00:06:66:C1:5B:37:35:46:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A758BF09145BEC830A7EE000666C15B37354654.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/34352e3136382e3233392e302f32342d3234203d3e20323635353330.roa
Signing time:             Tue 04 Feb 2025 18:41:00 +0000
ROA not before:           Tue 04 Feb 2025 18:36:00 +0000
ROA not after:            Tue 03 Feb 2026 18:41:00 +0000
asID:                     265530
IP address blocks:        45.168.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/9A758BF09145BEC830A7EE000666C15B37354654.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/9A758BF09145BEC830A7EE000666C15B37354654.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A758BF09145BEC830A7EE000666C15B37354654.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d9:f9:a9:c6:a7:4a:05:26:f0:87:49:7f:c9:11:31:a2:05:11:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A758BF09145BEC830A7EE000666C15B37354654
        Validity
            Not Before: Feb  4 18:36:00 2025 GMT
            Not After : Feb  3 18:41:00 2026 GMT
        Subject: CN=CEF15B7D74FCE9E2953B3584CCC750E7C1FFA801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cf:d8:9f:ce:e0:4c:1d:fe:ca:a1:d2:cf:95:
                    46:cd:0b:62:60:db:22:fe:80:05:3c:9e:15:2d:1f:
                    69:d5:f3:76:41:eb:98:ae:96:0c:28:8f:2d:89:7b:
                    3c:ad:fc:7e:fa:94:5f:f6:ea:76:f6:1e:f6:0c:33:
                    51:27:ea:a3:06:b9:3d:07:60:97:c1:a2:90:1a:29:
                    d4:c8:2f:b6:e3:49:4a:b9:a9:5e:e0:cb:69:bc:30:
                    7c:d7:4a:5b:be:73:f0:2e:b9:46:c4:29:e3:5e:6b:
                    30:ec:31:64:dd:aa:82:89:33:f6:64:89:3b:37:28:
                    9a:54:77:aa:aa:58:3b:8c:d9:37:83:be:a4:dd:7e:
                    86:7f:c5:3f:6c:5a:72:ca:04:70:1a:e8:6b:70:28:
                    c4:f1:6a:0d:58:26:e0:c3:d0:a9:68:d3:77:8b:08:
                    53:1d:94:c7:46:60:07:84:6a:d1:00:42:6f:0d:ce:
                    93:0d:85:de:c5:63:02:6e:7a:fe:6a:a9:06:c6:54:
                    78:e2:c3:10:fa:1e:24:b9:9f:69:f5:c9:94:86:7f:
                    71:f4:7e:d3:38:33:87:88:49:4b:25:a7:20:cc:a0:
                    1b:43:36:fe:74:2c:77:93:1d:0b:a3:51:5a:6e:d5:
                    1c:9d:b7:16:66:a0:19:16:3a:97:bf:63:20:cd:4e:
                    bd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F1:5B:7D:74:FC:E9:E2:95:3B:35:84:CC:C7:50:E7:C1:FF:A8:01
            X509v3 Authority Key Identifier:
                keyid:9A:75:8B:F0:91:45:BE:C8:30:A7:EE:00:06:66:C1:5B:37:35:46:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/9A758BF09145BEC830A7EE000666C15B37354654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A758BF09145BEC830A7EE000666C15B37354654.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/34352e3136382e3233392e302f32342d3234203d3e20323635353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:0e:d8:e6:19:25:a7:86:61:c2:48:cc:6f:b9:b2:e3:74:e1:
         5e:c2:be:e9:4d:0d:24:89:c0:80:6d:ca:20:44:0b:93:40:57:
         b6:33:27:94:c5:2a:34:28:84:28:12:d5:a7:f6:6e:60:31:2a:
         3e:1c:26:7e:82:e2:3a:3a:2e:43:ff:e3:05:d1:97:34:be:3d:
         75:6c:89:fd:35:93:c3:55:c2:66:75:7a:cf:56:ae:34:37:7d:
         ec:78:86:13:33:b0:ff:59:70:7b:f6:cc:c3:74:5c:ff:b8:b7:
         85:7c:96:61:13:e6:26:39:7a:c5:2d:41:62:6e:b0:3b:6c:52:
         a5:b3:80:9d:8e:ac:ae:bc:00:64:93:7c:62:4f:9e:7f:61:cb:
         49:83:22:70:3e:7d:86:c9:df:39:7d:67:5e:6a:4f:d9:6b:66:
         ab:b8:6d:2b:ea:e3:79:7f:e0:98:40:e2:23:d0:d8:5b:9c:3c:
         1c:05:02:c0:7c:a1:89:51:18:c0:22:a5:98:99:f6:73:4d:d4:
         0f:f9:26:b1:db:ef:48:99:90:c0:94:65:7e:af:45:f1:40:14:
         9f:f8:f3:74:8a:c9:1a:40:89:5a:1e:0d:fd:af:da:64:37:6b:
         91:f5:2a:8a:bf:7b:45:9f:57:fe:4d:1a:36:bc:52:14:dd:8c:
         0d:7b:25:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:13:23 2025 by rpki-client