Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/34352e3233372e3136382e302f32322d3232203d3e20323636383237.roa
File:                     34352e3233372e3136382e302f32322d3232203d3e20323636383237.roa (raw, json)
Hash identifier:          mSVJ0BsOOE3ki6CPHnuRKaXOzbJYhNNaDrdD2iDkyQA=
Subject key identifier:   7D:38:79:57:CA:96:4A:C0:2C:32:F0:A2:D3:5B:81:FE:BF:3A:B4:0A
Certificate issuer:       /CN=79791EF384555781F9129D52AFAD809B3BE307E0
Certificate serial:       3A146817D8AA0B625FAAB8B0B20398F28300F2E4
Authority key identifier: 79:79:1E:F3:84:55:57:81:F9:12:9D:52:AF:AD:80:9B:3B:E3:07:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79791EF384555781F9129D52AFAD809B3BE307E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/34352e3233372e3136382e302f32322d3232203d3e20323636383237.roa
Signing time:             Tue 04 Feb 2025 18:01:07 +0000
ROA not before:           Tue 04 Feb 2025 17:56:07 +0000
ROA not after:            Tue 03 Feb 2026 18:01:07 +0000
asID:                     266827
IP address blocks:        45.237.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/79791EF384555781F9129D52AFAD809B3BE307E0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/79791EF384555781F9129D52AFAD809B3BE307E0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79791EF384555781F9129D52AFAD809B3BE307E0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:14:68:17:d8:aa:0b:62:5f:aa:b8:b0:b2:03:98:f2:83:00:f2:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79791EF384555781F9129D52AFAD809B3BE307E0
        Validity
            Not Before: Feb  4 17:56:07 2025 GMT
            Not After : Feb  3 18:01:07 2026 GMT
        Subject: CN=7D387957CA964AC02C32F0A2D35B81FEBF3AB40A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ad:ee:c7:1a:c0:5f:60:8c:b2:3c:2c:79:48:
                    13:22:52:e7:77:8e:75:fd:c2:05:d4:31:14:cd:f2:
                    55:d0:84:f6:d7:91:4f:f5:12:e0:68:b3:44:4e:0d:
                    2c:3e:19:1c:c4:b7:e3:83:e7:fc:f0:6c:61:38:a9:
                    2f:e7:40:ed:b8:36:9b:b9:f0:35:95:08:e9:f7:19:
                    69:b6:c4:a6:a5:d4:67:fa:ff:6f:82:47:e6:75:d9:
                    d3:c6:a9:35:4e:f8:48:26:9e:cb:b0:76:4f:b9:bc:
                    90:df:f3:20:8c:02:c4:d7:02:18:43:b5:e2:a6:67:
                    25:11:1a:a0:32:c0:0e:4c:f5:00:2f:1c:9b:be:3e:
                    10:1f:0d:7e:16:4d:41:f2:a8:9b:f3:72:6f:ed:d8:
                    75:a1:ad:85:4e:62:96:4a:9a:2b:40:b0:02:39:18:
                    bc:e6:0f:fe:d4:f5:91:4c:23:86:c7:e8:15:4d:ad:
                    dc:af:ce:5e:cb:08:cb:bb:8b:b5:04:92:ad:fd:ed:
                    a8:15:39:83:df:a5:53:41:14:5c:b3:18:3c:f9:29:
                    d4:20:a4:45:f0:7d:c2:14:6f:0e:69:cb:b4:79:69:
                    7d:8c:9c:1d:99:ea:be:af:7c:ab:02:0e:91:a7:6f:
                    4e:08:dc:cf:72:24:ed:30:ba:c1:8f:60:29:25:7f:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:38:79:57:CA:96:4A:C0:2C:32:F0:A2:D3:5B:81:FE:BF:3A:B4:0A
            X509v3 Authority Key Identifier:
                keyid:79:79:1E:F3:84:55:57:81:F9:12:9D:52:AF:AD:80:9B:3B:E3:07:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/79791EF384555781F9129D52AFAD809B3BE307E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79791EF384555781F9129D52AFAD809B3BE307E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/34352e3233372e3136382e302f32322d3232203d3e20323636383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:ef:cc:a7:09:14:f3:c4:13:2d:63:fe:63:fe:3a:b0:8c:e1:
         8f:de:90:14:37:73:f2:bc:f2:7e:31:97:01:ed:9d:ab:fa:d1:
         24:98:cd:22:91:72:14:98:fd:bc:50:82:d4:a4:a2:50:be:08:
         fd:4b:46:22:c6:ed:20:97:d9:19:71:6d:39:3d:e1:92:d9:c1:
         26:5c:80:7d:3e:57:d3:56:33:7e:4b:2e:3f:05:a1:e5:b8:f6:
         08:29:bf:04:cd:b0:79:e6:f9:2b:1e:68:a3:5a:c0:cc:9a:7a:
         83:cc:2b:d8:42:28:60:c0:d8:be:28:b3:64:4f:a0:65:83:0f:
         f2:9a:75:52:aa:dc:1f:bc:db:ed:d0:95:f5:5d:3e:9f:07:db:
         47:7a:a4:0a:f8:6e:fe:f3:03:25:e9:08:9c:f8:ee:4c:b1:85:
         bb:74:8f:48:10:e4:71:64:91:2d:c3:8f:49:74:09:85:6e:5a:
         5b:37:b7:da:2a:4d:db:08:34:c1:07:9d:67:c3:40:62:a0:e0:
         84:ab:49:d4:29:7a:ef:7b:a4:5d:2c:4c:b3:ba:7c:07:26:06:
         46:f2:19:d8:3d:c8:0e:f0:0b:b9:16:87:08:45:93:25:20:70:
         de:b2:2d:11:c7:68:22:fc:d7:1d:6f:2d:f7:5a:db:d7:cc:eb:
         81:4b:c9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:54:30 2025 by rpki-client