Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/34352e352e36302e302f32322d3234203d3e20323632313834.roa
File:                     34352e352e36302e302f32322d3234203d3e20323632313834.roa (raw, json)
Hash identifier:          Ao69vdAU9GPHhC+nCha2Nkmu1M6tLLv5vFEub4I4TYk=
Subject key identifier:   30:33:63:64:4D:55:30:2F:D1:61:E3:F6:00:1A:8A:EE:43:0D:C3:7A
Certificate issuer:       /CN=56CC624428BCED9F377BAC95D562A585D509F1B4
Certificate serial:       3454027DE41F9830F1D0AB2B42B066BADADD852F
Authority key identifier: 56:CC:62:44:28:BC:ED:9F:37:7B:AC:95:D5:62:A5:85:D5:09:F1:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/34352e352e36302e302f32322d3234203d3e20323632313834.roa
Signing time:             Tue 04 Feb 2025 19:56:43 +0000
ROA not before:           Tue 04 Feb 2025 19:51:43 +0000
ROA not after:            Tue 03 Feb 2026 19:56:43 +0000
asID:                     262184
IP address blocks:        45.5.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:54:02:7d:e4:1f:98:30:f1:d0:ab:2b:42:b0:66:ba:da:dd:85:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56CC624428BCED9F377BAC95D562A585D509F1B4
        Validity
            Not Before: Feb  4 19:51:43 2025 GMT
            Not After : Feb  3 19:56:43 2026 GMT
        Subject: CN=303363644D55302FD161E3F6001A8AEE430DC37A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:05:5f:14:e2:27:96:98:94:6c:10:b8:3b:
                    f9:4f:cb:39:4b:91:00:28:c5:97:13:2d:2d:41:c2:
                    7b:73:ce:e1:8c:a8:71:98:1a:28:de:32:8a:58:5b:
                    39:df:5d:05:5f:b2:fe:12:f7:08:a2:39:d7:a5:72:
                    ba:a8:30:4c:b8:14:b9:51:99:88:66:92:6f:1b:d4:
                    29:70:ef:19:96:b0:57:35:ad:d8:ec:4a:f5:59:e4:
                    8e:c9:a6:1e:a9:1b:c9:ce:5f:b8:d9:1f:dd:08:39:
                    4c:0f:03:cb:94:80:00:56:d6:d8:77:52:a7:bc:fd:
                    c1:a8:cd:62:36:42:8c:e3:27:b6:0d:23:8a:95:3f:
                    aa:9d:bd:23:09:56:69:15:b6:12:ed:5a:90:8e:e1:
                    6f:ed:f3:ba:ed:57:31:29:ee:79:ae:b5:fa:4a:e1:
                    83:85:19:7d:41:4d:43:7d:78:2b:07:24:dc:96:7b:
                    42:ac:38:6d:0c:93:a7:f6:77:c1:63:35:ed:e6:22:
                    df:7d:64:6c:7a:2c:ef:89:9d:3b:5c:fb:6e:7d:43:
                    20:79:f9:51:17:e0:7e:e0:9e:93:50:95:7f:c8:46:
                    23:be:01:f8:6a:fd:6a:15:d1:50:91:90:d8:4a:6c:
                    92:8f:c1:8c:d8:82:fc:2c:50:d9:e7:12:d0:d4:de:
                    cc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:33:63:64:4D:55:30:2F:D1:61:E3:F6:00:1A:8A:EE:43:0D:C3:7A
            X509v3 Authority Key Identifier:
                keyid:56:CC:62:44:28:BC:ED:9F:37:7B:AC:95:D5:62:A5:85:D5:09:F1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/34352e352e36302e302f32322d3234203d3e20323632313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:74:cb:e4:93:e6:42:e2:d0:04:09:6f:5d:cc:0b:9c:68:2a:
         e4:63:56:9f:61:bf:19:fb:c0:01:7a:4d:8e:89:f2:62:7d:90:
         83:0f:ff:fb:c2:db:40:e6:cd:4d:18:99:34:79:69:44:75:92:
         3d:bc:7b:54:3f:84:70:c6:9c:02:98:17:97:46:51:27:34:e8:
         3e:b9:cf:6a:4e:a8:ee:90:41:9a:63:a7:3c:ff:a7:39:e7:9e:
         d9:2a:78:b2:2e:e0:24:e8:5f:4b:72:b6:d2:d9:90:d4:16:29:
         c2:eb:dd:eb:54:c7:e0:43:a5:18:19:de:da:d8:c8:e9:a1:41:
         6f:01:51:c7:80:84:2b:ae:43:6c:cd:6b:65:6c:0f:28:b8:af:
         15:68:36:d4:d1:35:bb:35:f1:84:f9:21:1e:81:e5:fa:36:e7:
         9c:4e:ee:70:ed:ad:ad:fe:89:87:17:68:4f:62:53:a4:9f:d4:
         8c:bb:24:27:97:f5:46:1d:e8:f3:b5:58:c1:a1:a1:39:27:55:
         14:2b:21:97:97:71:b5:32:5d:8a:95:4e:b3:6c:f5:d7:82:28:
         62:24:9d:89:3c:f3:a4:3f:49:47:78:80:98:ab:87:5b:e2:da:
         21:b2:f2:dc:64:fb:36:89:ff:83:4a:17:ec:55:33:fc:f7:14:
         be:e4:50:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:52:11 2025 by rpki-client