Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230342e302f32332d3233203d3e20313938363336.roa
File:                     34352e342e3230342e302f32332d3233203d3e20313938363336.roa (raw, json)
Hash identifier:          Vrrrcw6loqOhCpY2Pbo5lcFRqb436xU2gDXp+xokG7Y=
Subject key identifier:   58:CD:37:7E:5F:E1:21:69:7A:57:6D:02:71:84:28:7E:F9:52:A8:CF
Certificate issuer:       /CN=B4CF94EC7154D2BC51066D5BB556A7589514A5C6
Certificate serial:       7D0FA9DD746870D18FC6F14C28593752C2D19E87
Authority key identifier: B4:CF:94:EC:71:54:D2:BC:51:06:6D:5B:B5:56:A7:58:95:14:A5:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230342e302f32332d3233203d3e20313938363336.roa
Signing time:             Tue 04 Feb 2025 18:21:55 +0000
ROA not before:           Tue 04 Feb 2025 18:16:55 +0000
ROA not after:            Tue 03 Feb 2026 18:21:55 +0000
asID:                     198636
IP address blocks:        45.4.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0f:a9:dd:74:68:70:d1:8f:c6:f1:4c:28:59:37:52:c2:d1:9e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4CF94EC7154D2BC51066D5BB556A7589514A5C6
        Validity
            Not Before: Feb  4 18:16:55 2025 GMT
            Not After : Feb  3 18:21:55 2026 GMT
        Subject: CN=58CD377E5FE121697A576D027184287EF952A8CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:76:f1:b0:61:b7:41:af:e7:fd:cf:5f:19:
                    c3:69:8a:82:7b:52:2f:46:b1:10:5f:f2:6e:d7:d3:
                    5b:99:63:2d:04:c1:40:2c:69:ee:f9:1b:51:ef:6d:
                    4d:d7:58:46:c5:be:80:b0:e3:53:42:35:b9:1e:4c:
                    bc:38:e7:43:7d:7f:30:46:94:c5:16:b2:09:ef:90:
                    e1:4b:ac:61:d7:08:43:54:a2:2e:b1:e0:3f:3f:c4:
                    73:8d:0a:e4:71:45:5e:e6:a4:c0:06:f5:10:1f:49:
                    7f:b4:c4:2a:cb:2d:43:21:35:6b:79:9d:b3:9e:7d:
                    0c:6d:a9:51:71:fe:1b:99:1e:8c:e7:f1:f5:3b:cf:
                    2d:42:93:03:22:98:2b:bc:1d:62:42:32:7d:94:98:
                    a7:d5:3e:77:d6:ee:c2:a2:ec:7a:c2:08:a0:27:b5:
                    65:32:2c:c9:0c:1e:85:ea:6b:af:d6:6c:74:9e:38:
                    69:a9:9a:80:1e:f8:7e:c7:fd:1a:f1:74:f4:29:17:
                    86:c6:e3:0b:c2:fd:03:0c:15:47:fe:6d:37:3b:5a:
                    96:74:aa:90:0d:12:2b:fc:42:52:80:13:74:ec:54:
                    56:70:6c:de:7b:da:19:0d:4f:ac:70:28:a7:8d:06:
                    9b:39:ef:8e:bb:45:54:29:9d:44:76:d2:52:65:d5:
                    45:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CD:37:7E:5F:E1:21:69:7A:57:6D:02:71:84:28:7E:F9:52:A8:CF
            X509v3 Authority Key Identifier:
                keyid:B4:CF:94:EC:71:54:D2:BC:51:06:6D:5B:B5:56:A7:58:95:14:A5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230342e302f32332d3233203d3e20313938363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:9c:fa:80:53:e6:81:73:4e:ca:92:32:a3:5e:1d:b1:59:fd:
         4e:93:8b:c0:82:0e:c6:c2:da:8e:16:7f:c6:5c:ac:e6:75:6a:
         68:5d:02:57:59:e1:e7:17:3d:fa:46:6f:78:e1:c3:82:e7:e8:
         c4:e6:27:62:1a:c5:66:5a:b1:9d:de:18:db:ee:62:7a:62:b6:
         eb:45:7a:1d:19:07:0c:73:d8:59:a5:ed:16:62:ab:6d:f0:30:
         c0:e3:93:dd:86:d2:0a:13:de:6d:ed:24:30:44:b5:f6:cb:83:
         45:9c:bd:88:19:3b:f1:f3:d8:14:55:0d:2e:68:79:ab:6a:a0:
         b3:02:f5:80:82:35:d7:40:25:c2:4b:4e:ec:6d:c8:b2:9a:26:
         e1:be:e9:b0:e1:ec:08:0a:b1:a9:4e:23:82:d0:10:91:cb:2a:
         f9:36:cc:62:45:8f:85:6f:ec:e5:3f:87:74:2f:6a:1a:ea:f0:
         a5:3b:6c:db:5a:9f:c8:cd:a0:88:35:f2:77:e1:9d:82:95:54:
         e6:1c:77:91:83:0e:af:5b:15:1d:4b:bb:13:9a:40:b4:69:da:
         74:2e:bb:c0:05:fd:9f:cd:95:4f:c5:16:a6:d4:a5:20:29:a0:
         e0:01:fc:18:9d:b7:77:3e:db:22:1f:71:4e:11:18:14:da:f2:
         3d:52:7e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:27:28 2025 by rpki-client