Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/34352e372e3134302e302f32342d3234203d3e20323731383136.roa
File:                     34352e372e3134302e302f32342d3234203d3e20323731383136.roa (raw, json)
Hash identifier:          UvmjTTtLSwZcj9dHB88b6xzVKk8Tykovv+yomNpBzYA=
Subject key identifier:   DD:50:69:C2:AC:68:59:49:9F:0D:A6:F1:76:CF:D9:0B:E4:16:4A:F3
Certificate issuer:       /CN=08BC91A7FBFD34E8D23911A2D0560C2BD184DE11
Certificate serial:       68EBB18F630D194D044E710AB52F8E9A3325BFC2
Authority key identifier: 08:BC:91:A7:FB:FD:34:E8:D2:39:11:A2:D0:56:0C:2B:D1:84:DE:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/34352e372e3134302e302f32342d3234203d3e20323731383136.roa
Signing time:             Tue 04 Feb 2025 18:32:25 +0000
ROA not before:           Tue 04 Feb 2025 18:27:25 +0000
ROA not after:            Tue 03 Feb 2026 18:32:25 +0000
asID:                     271816
IP address blocks:        45.7.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:eb:b1:8f:63:0d:19:4d:04:4e:71:0a:b5:2f:8e:9a:33:25:bf:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08BC91A7FBFD34E8D23911A2D0560C2BD184DE11
        Validity
            Not Before: Feb  4 18:27:25 2025 GMT
            Not After : Feb  3 18:32:25 2026 GMT
        Subject: CN=DD5069C2AC6859499F0DA6F176CFD90BE4164AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:84:16:9e:94:ab:58:8b:55:aa:21:fe:24:
                    19:4a:f6:f0:40:4b:88:b7:d1:d7:63:92:99:4e:a7:
                    35:de:9a:e0:a4:0a:2a:48:18:03:fd:26:93:e3:ca:
                    3b:da:4e:03:87:79:1d:32:1f:74:c0:14:9e:76:0e:
                    88:9f:4b:c3:6e:0c:22:19:6b:71:7c:88:af:87:46:
                    8a:16:27:60:7a:25:d8:d7:db:83:9a:e7:11:ef:c3:
                    70:46:df:e5:42:69:3f:5d:ce:a1:76:91:b4:15:39:
                    24:a6:10:d2:59:53:68:aa:f8:92:61:e3:28:4b:83:
                    8f:55:21:d7:ea:6d:8c:00:62:61:91:9b:20:c4:4a:
                    b4:2b:6d:8a:67:bd:0b:ee:a2:86:75:36:8e:42:f4:
                    72:1c:af:18:f5:b3:dd:dc:94:2b:27:5b:ef:0a:5f:
                    18:74:e2:1c:8b:f2:7d:4d:d3:8c:d9:eb:73:1c:7b:
                    38:19:9c:a7:4c:d2:1d:72:99:5a:cd:08:69:08:ec:
                    89:18:b2:08:4f:87:40:51:c7:8f:d5:92:cc:3b:11:
                    6f:90:94:ab:14:8a:fc:dc:41:ac:8f:6a:3c:34:e1:
                    5a:82:9d:36:77:10:fb:b6:8c:6b:bc:1e:cb:e9:e2:
                    fa:ea:2a:13:08:ae:8c:37:6c:53:a4:59:a8:0f:b1:
                    44:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:50:69:C2:AC:68:59:49:9F:0D:A6:F1:76:CF:D9:0B:E4:16:4A:F3
            X509v3 Authority Key Identifier:
                keyid:08:BC:91:A7:FB:FD:34:E8:D2:39:11:A2:D0:56:0C:2B:D1:84:DE:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/34352e372e3134302e302f32342d3234203d3e20323731383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:51:87:5d:60:14:8a:11:f6:53:05:ef:59:67:3b:26:68:74:
         3c:8d:05:c2:16:9c:15:2d:07:ba:9d:37:d0:23:b5:2d:9e:e0:
         6f:df:74:51:b1:44:1a:ac:80:10:95:9e:70:f1:32:f6:98:30:
         45:20:81:7f:12:f1:f0:84:f6:c4:fc:4b:bc:19:1a:63:d0:be:
         3c:fc:92:1a:8c:6d:3a:7c:0b:0e:43:7e:53:72:75:19:6e:c7:
         6c:9f:16:74:32:3e:2d:66:9c:2c:c0:07:f0:26:02:a9:d1:97:
         57:97:e3:f4:02:0c:00:bf:39:f0:68:a5:c0:f5:e0:d1:60:39:
         91:2e:fc:8d:4a:99:a2:80:6e:65:f4:8b:78:fc:9f:94:e5:0b:
         fa:65:ab:c4:70:69:6f:f7:77:b1:37:35:8a:34:09:42:6a:a4:
         c9:d5:dc:7d:19:41:90:05:4d:6a:58:81:bd:dc:45:7b:b3:fc:
         41:a5:25:14:95:e7:f1:57:32:9b:3a:03:98:5e:55:fd:56:01:
         6d:8b:00:a0:70:a2:0b:38:d1:89:c1:68:3d:3b:2a:bc:1a:cd:
         b1:e4:9e:94:8d:6c:ed:7a:2f:f7:5d:05:26:eb:f6:8a:c0:01:
         4b:70:55:32:d5:7f:2e:5b:2e:31:ab:67:b8:29:0f:9b:83:52:
         9e:85:2a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:36 2025 by rpki-client