Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/34352e372e3134322e302f32342d3234203d3e20323731383136.roa
File:                     34352e372e3134322e302f32342d3234203d3e20323731383136.roa (raw, json)
Hash identifier:          OttO71Y+uAw+I5OZhdVQHem1BOR5AQD7+Xy8YygYKqQ=
Subject key identifier:   C4:3C:5F:73:E8:15:8F:5C:10:0E:27:6A:F8:EC:AC:C5:84:FB:18:2C
Certificate issuer:       /CN=08BC91A7FBFD34E8D23911A2D0560C2BD184DE11
Certificate serial:       1CC00BD08FEE24E7FC2C4EEAA11B54DCFAD01267
Authority key identifier: 08:BC:91:A7:FB:FD:34:E8:D2:39:11:A2:D0:56:0C:2B:D1:84:DE:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/34352e372e3134322e302f32342d3234203d3e20323731383136.roa
Signing time:             Tue 04 Feb 2025 18:32:25 +0000
ROA not before:           Tue 04 Feb 2025 18:27:25 +0000
ROA not after:            Tue 03 Feb 2026 18:32:25 +0000
asID:                     271816
IP address blocks:        45.7.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c0:0b:d0:8f:ee:24:e7:fc:2c:4e:ea:a1:1b:54:dc:fa:d0:12:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08BC91A7FBFD34E8D23911A2D0560C2BD184DE11
        Validity
            Not Before: Feb  4 18:27:25 2025 GMT
            Not After : Feb  3 18:32:25 2026 GMT
        Subject: CN=C43C5F73E8158F5C100E276AF8ECACC584FB182C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:f0:f9:fb:a5:16:2c:19:97:84:af:b9:f8:
                    a3:03:16:28:38:e8:b2:a2:3d:86:44:46:e6:89:70:
                    11:3b:7e:bf:b9:d8:75:f9:63:15:f6:f5:17:2b:3d:
                    5c:31:4f:cb:f7:fe:a1:f4:cf:45:04:5d:0f:82:1d:
                    75:13:f4:55:6a:52:8f:97:eb:db:e8:d4:5d:1c:02:
                    48:53:3f:ae:ed:7a:ee:19:ae:85:12:cc:a7:19:fc:
                    ed:76:d3:e3:f7:cf:e7:15:89:f6:0e:2d:20:d6:6e:
                    b7:18:71:52:f4:74:6e:48:93:bb:30:87:d0:01:7b:
                    d2:31:14:b8:42:d5:5b:ef:1e:7c:fd:d8:3f:99:d7:
                    be:dc:dc:ce:2b:fc:22:d4:ed:1d:a3:50:bf:9b:39:
                    4e:5e:a1:44:c9:85:83:5e:63:09:ce:b2:2d:88:44:
                    1d:36:da:77:73:41:37:7d:76:00:a4:0c:92:2e:6b:
                    bc:17:72:a5:f3:90:cd:b7:8e:72:b8:ac:2d:88:8e:
                    88:b2:3c:12:ab:ca:fc:5a:88:ac:88:a1:01:da:22:
                    02:03:55:bc:bf:8e:70:93:f1:a2:86:78:ea:72:a4:
                    5a:96:fa:b9:8e:93:b1:f2:c4:89:58:08:dc:68:c2:
                    d8:a2:2d:4c:44:a0:74:f3:d8:d4:bf:6a:cd:fa:bc:
                    ec:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3C:5F:73:E8:15:8F:5C:10:0E:27:6A:F8:EC:AC:C5:84:FB:18:2C
            X509v3 Authority Key Identifier:
                keyid:08:BC:91:A7:FB:FD:34:E8:D2:39:11:A2:D0:56:0C:2B:D1:84:DE:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/34352e372e3134322e302f32342d3234203d3e20323731383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:71:35:bb:e9:9b:dc:2e:8f:24:9a:03:b6:9d:a8:41:8b:6e:
         10:a4:08:03:df:d2:40:c9:38:6b:6f:11:b4:e6:d0:81:cb:cc:
         71:a3:b1:ea:a2:50:20:1a:35:bb:93:95:8d:d9:f7:f9:cf:18:
         11:48:56:00:73:92:b7:88:28:84:f3:be:b1:42:33:23:39:0d:
         3c:1d:f2:2c:05:ba:f6:ce:9d:ab:b1:ee:ff:08:4e:f9:d9:ca:
         6e:c5:5c:be:83:b2:26:f5:7f:4b:85:18:0d:80:94:5a:6c:ad:
         37:b8:8c:a8:f5:ab:88:1f:30:42:65:5b:7d:b6:2b:2d:23:c6:
         6e:00:67:bf:1e:21:bc:0a:d1:82:f1:5b:75:19:d3:42:b9:93:
         3e:8f:18:6a:fb:dd:70:7a:ae:f7:39:b0:54:d1:2a:7f:f2:b8:
         c3:8c:20:d6:18:79:c0:cb:35:43:7a:ce:bc:7d:ce:26:84:9f:
         72:88:4a:ab:c9:1f:92:48:25:c0:ce:c9:15:99:ba:0c:ac:1a:
         c8:d3:21:ed:74:96:ef:ed:98:00:a4:df:cf:5d:04:f2:69:10:
         58:21:4e:1a:17:a7:01:83:d6:9f:f4:2d:07:dc:0c:b0:28:95:
         ce:f5:6e:ab:d0:d0:9a:41:2c:87:a5:81:3b:6f:75:57:43:a0:
         84:58:74:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:32:36 2025 by rpki-client