Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/34352e3139312e34382e302f32322d3234203d3e20323632323133.roa
File:                     34352e3139312e34382e302f32322d3234203d3e20323632323133.roa (raw, json)
Hash identifier:          C8HfC958RoMYZLyJD/qWNgZx5v04BPizwv+ILT9q9n8=
Subject key identifier:   63:71:0D:B2:E6:33:1E:C6:11:4D:0B:2A:9C:1F:C0:78:55:48:44:5D
Certificate issuer:       /CN=5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D
Certificate serial:       06EEC27657EE006DCC6AA60C00E4E43837E5FB6F
Authority key identifier: 5E:20:38:E8:41:92:BA:FB:E7:BC:D3:AC:CA:5B:C5:B4:3E:61:DA:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/34352e3139312e34382e302f32322d3234203d3e20323632323133.roa
Signing time:             Tue 04 Feb 2025 18:44:12 +0000
ROA not before:           Tue 04 Feb 2025 18:39:12 +0000
ROA not after:            Tue 03 Feb 2026 18:44:12 +0000
asID:                     262213
IP address blocks:        45.191.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 15:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ee:c2:76:57:ee:00:6d:cc:6a:a6:0c:00:e4:e4:38:37:e5:fb:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D
        Validity
            Not Before: Feb  4 18:39:12 2025 GMT
            Not After : Feb  3 18:44:12 2026 GMT
        Subject: CN=63710DB2E6331EC6114D0B2A9C1FC0785548445D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:37:15:64:4c:13:67:e5:43:67:7b:f0:3d:
                    ae:60:37:26:be:61:69:77:94:cf:00:61:ab:db:4d:
                    3e:c1:b7:91:e3:78:84:38:a4:68:4d:64:dc:4d:63:
                    15:b1:d9:cc:ae:d0:ce:fa:99:ca:31:70:ff:96:a9:
                    ae:29:88:7c:fb:b9:f4:45:52:98:76:c8:1b:ba:0d:
                    44:5a:3d:bb:1e:a8:f6:a4:eb:c3:fb:79:87:42:56:
                    09:93:91:9c:ea:39:f8:4e:75:ed:df:df:f9:35:83:
                    f6:07:98:33:82:dd:0e:40:cc:9a:d9:f5:b4:f3:7c:
                    a6:2d:98:8b:c2:e8:cf:6a:3b:4a:d4:19:56:67:97:
                    91:d5:63:51:5d:a6:0a:16:38:12:82:1e:b1:50:c3:
                    78:3d:ef:f3:0e:73:04:74:a7:92:bd:29:84:ef:c0:
                    2d:0f:7a:72:eb:34:0e:d7:71:c1:e4:fe:af:b0:05:
                    ec:31:33:d4:08:01:bb:02:b0:69:eb:4d:98:8f:4f:
                    2e:08:56:8b:c0:e4:e0:e9:35:bb:56:b2:d4:c9:8c:
                    cb:2c:05:da:7f:3d:c6:10:a3:a6:47:7e:ea:9b:24:
                    6c:87:5d:9a:5e:6e:45:dc:c9:dc:5c:75:e0:5b:09:
                    ac:6d:34:cf:e3:b9:1d:dd:40:04:5e:1d:08:4d:a0:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:71:0D:B2:E6:33:1E:C6:11:4D:0B:2A:9C:1F:C0:78:55:48:44:5D
            X509v3 Authority Key Identifier:
                keyid:5E:20:38:E8:41:92:BA:FB:E7:BC:D3:AC:CA:5B:C5:B4:3E:61:DA:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/34352e3139312e34382e302f32322d3234203d3e20323632323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:71:f2:2b:56:ab:a8:94:de:70:9b:ad:d4:d9:7b:c2:ec:20:
         d4:b6:af:02:f1:f3:81:69:18:0d:39:70:05:28:a1:ff:c1:a0:
         a8:d5:11:14:40:ac:a2:65:42:e1:b7:a7:b3:a3:93:82:ae:88:
         2d:28:bd:2f:60:c3:4b:21:e9:61:51:4c:ea:6b:99:d9:cc:bb:
         78:96:46:c4:bd:e4:fe:57:22:a7:b4:da:5e:5c:b5:94:04:84:
         b1:2f:c0:ae:e1:4e:c4:59:fd:ce:f0:08:0e:49:62:f2:bc:ac:
         34:35:86:7d:a2:61:e6:df:ef:f5:d8:c8:ce:0f:0c:ba:bd:94:
         e6:2c:f1:5e:3a:ed:27:76:6a:f1:50:2e:fb:26:f1:09:ad:f6:
         58:9e:21:11:c0:49:8b:38:1f:a8:08:83:c5:e7:32:b0:a1:3c:
         c4:51:0f:b3:15:43:fd:3a:e5:c6:55:9f:91:4e:ec:e9:2d:c8:
         2c:69:8a:6a:5c:ce:46:6f:d0:d0:7a:3f:2d:d0:72:31:e7:22:
         b5:20:fb:af:b8:f0:aa:c6:d1:57:cb:fe:43:66:21:16:a8:96:
         35:8b:65:0f:8a:a5:08:41:a2:b3:59:13:bc:c3:76:d9:91:1c:
         12:c5:60:49:f3:b2:c1:58:3b:7c:69:b9:83:cd:ef:51:b5:be:
         84:d7:07:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:27 2025 by rpki-client