Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/34352e3233382e3139312e302f32342d3234203d3e20323635353531.roa
File:                     34352e3233382e3139312e302f32342d3234203d3e20323635353531.roa (raw, json)
Hash identifier:          u/47eDPo4nH30DJjeuaG4CL6WKcq9nU5/rxM6fLdjIs=
Subject key identifier:   DE:00:19:70:6D:59:0C:9F:69:50:6F:52:51:83:9D:5C:7A:AE:55:7C
Certificate issuer:       /CN=22E20380327B2CB679071D7FE9AC4DBFA317A166
Certificate serial:       79221DBAD7F1A7E82289DD12B974103184C30201
Authority key identifier: 22:E2:03:80:32:7B:2C:B6:79:07:1D:7F:E9:AC:4D:BF:A3:17:A1:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/34352e3233382e3139312e302f32342d3234203d3e20323635353531.roa
Signing time:             Tue 04 Feb 2025 18:13:07 +0000
ROA not before:           Tue 04 Feb 2025 18:08:07 +0000
ROA not after:            Tue 03 Feb 2026 18:13:07 +0000
asID:                     265551
IP address blocks:        45.238.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:22:1d:ba:d7:f1:a7:e8:22:89:dd:12:b9:74:10:31:84:c3:02:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22E20380327B2CB679071D7FE9AC4DBFA317A166
        Validity
            Not Before: Feb  4 18:08:07 2025 GMT
            Not After : Feb  3 18:13:07 2026 GMT
        Subject: CN=DE0019706D590C9F69506F5251839D5C7AAE557C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:3b:11:e3:da:a7:00:e8:e6:47:93:28:66:
                    43:19:9d:70:c3:e9:64:0a:ca:cf:cf:0e:3a:b0:32:
                    9e:97:29:ff:74:29:c5:66:6c:8f:2a:93:03:c2:1d:
                    21:65:5c:f7:9a:7a:bf:f7:56:e8:25:fb:b8:f1:cf:
                    12:79:8a:19:ca:c8:6e:b0:b3:96:a8:6c:f4:44:7b:
                    80:39:13:ee:b4:9d:70:be:c2:38:67:54:c6:ef:49:
                    b2:d9:6e:ba:63:a6:91:44:41:2f:ae:c6:fe:5b:65:
                    75:e3:0c:ba:8a:50:45:9e:29:04:67:55:ad:a9:62:
                    68:a7:4d:1b:92:a2:cc:50:19:49:c1:45:07:57:ae:
                    da:33:95:ed:73:79:c6:96:70:d9:ce:7d:6c:e3:83:
                    83:93:72:4d:47:cf:6c:aa:86:36:0e:2f:0f:d6:45:
                    f3:3b:c1:2c:55:be:0f:de:89:9c:4f:3a:88:82:bf:
                    5c:01:b5:e7:77:5e:3d:42:9a:3a:93:2d:48:4c:aa:
                    22:28:b9:f0:a9:ee:b9:3c:d1:b8:4d:4e:2f:5c:ac:
                    a4:ad:83:84:9f:a8:54:fe:83:2b:65:28:b6:92:b8:
                    a3:c7:ce:63:24:d8:6b:fe:63:72:56:cf:f6:e4:d4:
                    a5:c8:82:59:56:4d:1a:6d:8b:b9:1c:14:a1:94:cc:
                    b6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:00:19:70:6D:59:0C:9F:69:50:6F:52:51:83:9D:5C:7A:AE:55:7C
            X509v3 Authority Key Identifier:
                keyid:22:E2:03:80:32:7B:2C:B6:79:07:1D:7F:E9:AC:4D:BF:A3:17:A1:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/34352e3233382e3139312e302f32342d3234203d3e20323635353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:1f:75:fa:c5:2b:12:6e:5c:0f:e7:99:f3:05:2a:71:89:26:
         46:7b:2b:b8:94:b4:44:37:39:d7:a7:64:ba:1e:36:4e:58:6c:
         4e:92:ba:ac:4b:1f:5f:3b:50:f5:45:0d:d7:41:a5:e9:c5:c4:
         15:3d:df:f1:57:b3:10:f8:8c:a8:7c:84:51:cd:83:d9:7a:0a:
         10:7f:91:c5:0d:a5:28:c3:0b:7f:87:4f:9e:fd:03:73:11:75:
         fa:10:f4:cc:d8:ec:b3:88:2d:0e:fe:55:81:db:58:21:c0:03:
         24:77:fd:26:69:09:d0:a8:85:ab:b9:95:a6:10:8e:df:54:55:
         cd:87:33:c3:9e:51:d4:7d:4e:ab:0d:24:fe:14:e8:8f:af:09:
         95:de:4e:da:2a:e4:de:45:39:75:dd:f3:22:ed:50:78:77:d3:
         b1:91:85:af:b7:4d:f8:dc:42:a5:f1:5b:4b:bc:62:14:d0:ff:
         9f:48:f0:65:6e:e8:b7:e6:4c:75:8a:32:08:e1:80:5a:5f:de:
         b5:7b:c2:b7:ac:d7:36:66:2e:4a:12:2d:59:80:67:8f:db:a5:
         7a:6e:9b:8f:ae:e9:14:09:0d:4d:93:0a:03:01:61:0a:32:23:
         26:1c:59:3b:5c:90:6e:9d:ac:84:a7:a7:4e:c2:49:7a:f3:0c:
         ff:45:fb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:32:37 2025 by rpki-client