Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50661D415731C2B2F31FB028826DAE3DD53AA2530443D44BF1927BE11FC42D96/0/34352e3136392e3134382e302f32322d3234203d3e20323637373436.roa
File:                     34352e3136392e3134382e302f32322d3234203d3e20323637373436.roa (raw, json)
Hash identifier:          GY2fU1SFjUgP0Weth8lIQAGstNHl9hhxlpijrEQdcPk=
Subject key identifier:   4B:57:FB:68:FD:DA:25:FB:FF:99:B6:0E:1C:EB:0C:75:34:E3:CD:DC
Certificate issuer:       /CN=D45789B47CFCD6E508D392D9421A61E6253431B2
Certificate serial:       436B30EF3F6A8D3B2C5997DBEEC53422A890C007
Authority key identifier: D4:57:89:B4:7C:FC:D6:E5:08:D3:92:D9:42:1A:61:E6:25:34:31:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D45789B47CFCD6E508D392D9421A61E6253431B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50661D415731C2B2F31FB028826DAE3DD53AA2530443D44BF1927BE11FC42D96/0/34352e3136392e3134382e302f32322d3234203d3e20323637373436.roa
Signing time:             Tue 04 Feb 2025 18:14:34 +0000
ROA not before:           Tue 04 Feb 2025 18:09:34 +0000
ROA not after:            Tue 03 Feb 2026 18:14:34 +0000
asID:                     267746
IP address blocks:        45.169.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50661D415731C2B2F31FB028826DAE3DD53AA2530443D44BF1927BE11FC42D96/0/D45789B47CFCD6E508D392D9421A61E6253431B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50661D415731C2B2F31FB028826DAE3DD53AA2530443D44BF1927BE11FC42D96/0/D45789B47CFCD6E508D392D9421A61E6253431B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D45789B47CFCD6E508D392D9421A61E6253431B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6b:30:ef:3f:6a:8d:3b:2c:59:97:db:ee:c5:34:22:a8:90:c0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45789B47CFCD6E508D392D9421A61E6253431B2
        Validity
            Not Before: Feb  4 18:09:34 2025 GMT
            Not After : Feb  3 18:14:34 2026 GMT
        Subject: CN=4B57FB68FDDA25FBFF99B60E1CEB0C7534E3CDDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b8:e9:9b:86:7c:8e:30:d5:7f:6f:3f:d5:a1:
                    98:9f:6a:e1:10:d6:b5:83:27:f5:3d:3b:d6:d0:ae:
                    59:b8:72:e8:50:b9:44:e9:24:c5:23:d2:f8:17:eb:
                    03:23:e6:7e:77:fc:8b:ed:6e:18:f2:c3:5c:db:f4:
                    82:45:22:c4:17:91:2b:3c:6a:b9:d8:33:c8:9b:b4:
                    27:7d:57:ca:58:b4:dc:d8:fe:59:6c:d8:39:54:00:
                    9e:6e:d5:81:13:1a:57:67:e2:7b:a9:71:0a:9f:f8:
                    d5:42:35:13:59:e1:3d:cd:b9:ee:16:87:68:f0:22:
                    e6:f2:52:dc:7d:93:e4:c0:8c:5d:70:98:da:26:70:
                    4a:09:f8:8c:9a:d8:35:37:c4:e4:11:df:a1:bb:5a:
                    84:43:09:c5:4d:6c:38:4d:60:ad:8e:7d:e7:b3:1a:
                    80:23:f9:90:70:5e:90:d1:43:99:b8:9d:84:41:6b:
                    3c:50:3b:38:70:26:24:78:88:48:78:cc:a8:1e:0e:
                    c3:23:e5:11:d4:d2:98:be:4c:98:ec:a0:27:48:d0:
                    0a:c6:59:02:a2:98:fc:06:92:b3:d6:98:31:51:25:
                    b0:0d:de:53:62:24:e9:51:aa:ba:17:81:8e:93:ff:
                    1e:b2:a6:0e:7e:69:4d:5b:35:96:fe:62:e6:8f:80:
                    2f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:57:FB:68:FD:DA:25:FB:FF:99:B6:0E:1C:EB:0C:75:34:E3:CD:DC
            X509v3 Authority Key Identifier:
                keyid:D4:57:89:B4:7C:FC:D6:E5:08:D3:92:D9:42:1A:61:E6:25:34:31:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50661D415731C2B2F31FB028826DAE3DD53AA2530443D44BF1927BE11FC42D96/0/D45789B47CFCD6E508D392D9421A61E6253431B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D45789B47CFCD6E508D392D9421A61E6253431B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50661D415731C2B2F31FB028826DAE3DD53AA2530443D44BF1927BE11FC42D96/0/34352e3136392e3134382e302f32322d3234203d3e20323637373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:6b:4f:70:62:10:72:50:f4:49:4b:50:78:63:90:44:2e:a6:
         2c:cf:54:89:f6:58:b3:be:16:f1:76:5d:54:b0:ef:66:b4:68:
         4b:01:5b:98:5a:87:ec:4b:2a:73:14:97:84:8b:86:35:22:27:
         35:23:31:1f:db:d3:af:38:94:5d:49:97:bf:9a:ee:5f:a0:05:
         10:30:61:6f:c1:12:0d:1c:11:41:3a:08:12:b3:6c:59:eb:c0:
         d3:a8:ac:62:d1:28:4b:76:0a:35:89:16:a7:24:98:1c:a0:4e:
         54:70:c4:eb:65:83:a0:6b:21:90:ed:27:de:fd:71:e9:35:88:
         59:9b:c4:6c:37:89:34:bb:47:74:a3:65:49:b2:dd:a8:9d:b1:
         cd:20:03:2e:7d:06:5c:ec:88:58:4a:ad:d1:92:3a:8d:87:d9:
         5b:ad:af:72:d5:4e:6d:81:c6:b3:ee:5d:f9:93:cf:69:5e:74:
         c2:fe:7a:f7:ef:e8:a9:74:9d:51:e8:12:a7:cc:c3:7e:ce:f3:
         a4:62:b7:ff:c1:87:b6:b9:15:f7:a5:ff:0f:ac:d1:4b:ae:53:
         1f:d0:f9:2d:6a:3d:d0:a5:c6:61:b4:87:f1:38:29:54:4f:77:
         d8:a2:5b:ea:f4:28:c4:59:0e:72:ca:5b:77:75:ef:2a:81:bf:
         5e:c6:25:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:16 2025 by rpki-client