Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/34352e3138312e31322e302f32322d3232203d3e20323635353233.roa
File:                     34352e3138312e31322e302f32322d3232203d3e20323635353233.roa (raw, json)
Hash identifier:          ywHNZ44+hdhcbYmr/yxNRGiHOekrq4P1Ad1yV6umQj0=
Subject key identifier:   66:7C:A8:5C:1B:B4:C5:B3:E4:AF:33:BF:7F:E9:07:E7:B2:00:EA:1E
Certificate issuer:       /CN=27CE53490C8AFAC28B7A6430889E88978245BBC6
Certificate serial:       63F0F5D77AC54E85483C59B5C2BAB13391392719
Authority key identifier: 27:CE:53:49:0C:8A:FA:C2:8B:7A:64:30:88:9E:88:97:82:45:BB:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/34352e3138312e31322e302f32322d3232203d3e20323635353233.roa
Signing time:             Tue 04 Feb 2025 18:11:42 +0000
ROA not before:           Tue 04 Feb 2025 18:06:42 +0000
ROA not after:            Tue 03 Feb 2026 18:11:42 +0000
asID:                     265523
IP address blocks:        45.181.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f0:f5:d7:7a:c5:4e:85:48:3c:59:b5:c2:ba:b1:33:91:39:27:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27CE53490C8AFAC28B7A6430889E88978245BBC6
        Validity
            Not Before: Feb  4 18:06:42 2025 GMT
            Not After : Feb  3 18:11:42 2026 GMT
        Subject: CN=667CA85C1BB4C5B3E4AF33BF7FE907E7B200EA1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:e1:c3:9d:98:5e:0d:8d:82:95:6f:87:61:
                    59:ff:65:71:b3:00:2a:4b:07:f7:ee:99:a8:d9:1b:
                    94:3b:84:7e:11:c9:6a:2a:73:46:e7:80:d3:fa:3d:
                    7a:a6:e2:7f:24:11:63:71:ec:98:47:a0:a9:d6:f4:
                    7f:1f:51:a5:4f:80:16:34:46:67:39:72:71:1c:6a:
                    20:6e:f3:38:af:96:cb:21:92:44:a7:90:e8:48:33:
                    f5:79:55:15:8a:b8:3e:55:9b:b7:a9:1f:ba:05:52:
                    35:d7:eb:e3:17:5a:98:c4:a6:77:7c:a6:4b:1f:eb:
                    01:05:cd:74:28:49:b7:d2:6f:5f:57:dd:12:02:df:
                    b4:f9:de:f7:50:76:16:b5:d9:25:76:c6:c3:c4:02:
                    f3:fc:83:79:77:1a:59:6a:46:b0:48:a5:6e:44:86:
                    df:56:6e:b4:ce:87:97:ce:3f:7d:28:d8:ac:32:ac:
                    de:52:82:8c:4b:82:e8:d5:4a:50:7b:31:51:7c:c1:
                    64:b1:33:1d:dd:7d:3d:6d:39:76:ec:b8:33:6b:26:
                    52:41:b3:16:d4:5c:66:48:aa:e7:1c:44:ac:0b:2c:
                    c5:ee:6d:0b:f2:e6:cd:38:ed:41:60:e7:be:49:ea:
                    eb:f8:e2:82:03:36:48:95:c8:e2:ed:fc:13:51:c8:
                    79:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7C:A8:5C:1B:B4:C5:B3:E4:AF:33:BF:7F:E9:07:E7:B2:00:EA:1E
            X509v3 Authority Key Identifier:
                keyid:27:CE:53:49:0C:8A:FA:C2:8B:7A:64:30:88:9E:88:97:82:45:BB:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27CE53490C8AFAC28B7A6430889E88978245BBC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46A4E245CBB6370AF16DB9F4974F0814BEE0E4809254BEFA48855BD042AA87CD/0/34352e3138312e31322e302f32322d3232203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:6d:74:c9:da:a5:9d:d6:b5:47:ae:64:8c:80:8a:f7:c6:af:
         56:d1:17:88:5b:37:b1:78:c0:45:9c:a8:35:ce:36:f4:75:69:
         d5:83:a0:fc:a3:24:8f:5d:4c:4e:4a:49:cf:96:2c:a4:48:70:
         61:2a:b7:f1:b8:6f:da:4a:ae:aa:4a:2f:48:6a:45:c1:9c:f0:
         89:fa:20:11:ea:d9:a8:fe:3c:e1:06:28:59:6c:ad:05:10:86:
         29:50:0c:a3:9a:f5:79:36:ae:bd:53:4d:f0:b2:85:b9:7d:a8:
         1a:b9:72:ff:8c:c1:84:39:55:16:8d:14:f9:aa:e0:63:1a:4d:
         19:57:d2:b8:7e:42:7a:be:33:87:1b:1f:f0:c0:45:fb:c7:9d:
         dc:a9:4e:90:3b:18:9c:5d:2d:ab:c2:b6:c0:34:70:f9:ce:91:
         c4:38:c9:b1:8b:57:e8:85:db:5f:6a:70:c4:de:89:72:ea:b1:
         d3:25:2f:62:98:dd:ab:cf:db:c1:14:2b:b4:49:1a:63:01:19:
         dd:e0:a9:e6:6d:74:07:7c:e8:a6:a6:45:24:bf:1b:50:ca:54:
         2b:9d:47:6f:0e:d5:2a:b1:02:96:2c:da:47:5c:c0:08:10:b4:
         95:af:3d:12:ac:d2:54:01:04:96:90:f1:4e:c6:4d:9a:71:20:
         5b:5b:c0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:03:08 2025 by rpki-client