Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34312e302f32342d3234203d3e203233323433.roa
File:                     34352e3232392e34312e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          SBUAuduWJI8rVe7Rb2qQhw0eYMd4PGi+JvpX0SwG/wA=
Subject key identifier:   1F:5C:48:71:FA:6F:4B:E0:5E:74:F8:98:B7:8E:E3:B0:D0:73:46:89
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       0E737B98AA5713F7B27314EFF3435787395C8594
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34312e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:06:32 +0000
ROA not before:           Tue 04 Feb 2025 18:01:32 +0000
ROA not after:            Tue 03 Feb 2026 18:06:32 +0000
asID:                     23243
IP address blocks:        45.229.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:73:7b:98:aa:57:13:f7:b2:73:14:ef:f3:43:57:87:39:5c:85:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:32 2025 GMT
            Not After : Feb  3 18:06:32 2026 GMT
        Subject: CN=1F5C4871FA6F4BE05E74F898B78EE3B0D0734689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:47:00:30:04:3d:3a:f3:c0:71:2b:9b:1b:ef:
                    02:ef:a1:6d:5e:cd:cc:35:15:ea:2b:8a:44:97:33:
                    67:6c:0e:2d:79:e3:0e:61:5f:d8:c1:f5:c8:72:0a:
                    85:9e:76:40:e8:17:79:a9:af:91:6a:bd:ab:33:98:
                    5d:f4:74:8e:ae:1d:47:e1:78:cb:e1:29:37:54:72:
                    d8:6b:f4:21:ae:d8:d0:95:78:ff:bb:57:49:94:53:
                    05:05:31:64:27:c1:c8:cd:da:bf:c3:5d:29:f0:01:
                    b0:0a:ee:63:f3:bf:1e:96:68:46:73:29:39:77:a1:
                    58:e2:9a:20:f4:ca:28:0a:7f:47:f1:27:a6:53:ee:
                    08:a2:e4:d7:d6:b0:d3:12:60:2f:12:62:80:55:1b:
                    de:f7:8f:fc:24:48:7d:64:f0:ff:df:73:d7:36:c8:
                    c0:b9:b9:20:3a:0e:a1:71:bc:33:d2:54:1b:86:c6:
                    c8:6f:44:18:74:61:bc:44:a2:22:80:91:d6:7c:c1:
                    c8:1b:2b:95:d3:67:e0:69:c1:10:53:ea:1c:fd:13:
                    25:a1:52:63:4f:1c:7f:51:20:70:f9:24:3d:66:3b:
                    f8:18:a2:1b:e6:6f:39:7e:01:40:a7:fd:b2:ee:e3:
                    3d:d4:96:f6:ae:29:c8:18:bd:72:87:17:00:03:51:
                    e7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5C:48:71:FA:6F:4B:E0:5E:74:F8:98:B7:8E:E3:B0:D0:73:46:89
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34312e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:8c:7d:c9:31:6d:e4:64:9f:b6:d5:ba:c1:2c:7b:10:f8:27:
         31:82:6d:23:1e:5e:fa:9c:a7:d2:e7:2a:a0:5a:74:6b:59:6d:
         8b:1b:7d:00:30:82:69:1d:e6:42:4d:11:63:b5:4d:39:e2:63:
         e2:d5:b6:bb:2e:6a:2f:de:ad:b5:e8:b8:98:e8:1d:77:ff:ae:
         f7:a0:df:38:7c:f1:1a:43:12:49:31:77:15:ec:e5:ce:17:e4:
         dc:d0:3b:78:6d:87:b8:ca:12:46:07:7c:c3:09:08:a8:ae:95:
         ae:32:60:c0:36:01:8f:6d:00:11:49:b9:6e:9d:7a:4b:d1:7d:
         f9:6b:77:df:fb:9b:6f:68:0e:b3:09:67:66:71:87:a5:db:09:
         cc:07:0c:7e:d9:68:d1:99:0e:9c:14:45:e1:7e:f9:ce:63:b0:
         7f:e5:8a:83:5e:89:26:e6:a8:3c:24:4a:1f:05:af:e9:da:fc:
         c9:d2:e7:6f:25:a9:45:29:4b:ed:78:81:80:02:ec:f5:8c:92:
         d6:d1:a5:f3:fe:4a:e3:4e:91:87:62:e4:23:3d:10:df:94:c6:
         25:35:85:a3:1c:01:97:88:72:23:a7:ae:1d:44:3e:35:e1:c3:
         e6:b9:41:48:78:43:bb:7b:30:af:33:03:ce:ec:32:5e:84:0d:
         0a:b1:07:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:12 2025 by rpki-client