Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/34352e3232362e32382e302f32322d3234203d3e20323635383638.roa
File:                     34352e3232362e32382e302f32322d3234203d3e20323635383638.roa (raw, json)
Hash identifier:          68A8ge4z0XFCVFGr6yzPoHWsLYlN/iPDWWBH3kCtWDs=
Subject key identifier:   D5:E3:85:05:12:E5:5F:FD:4B:8C:AB:36:EA:FC:BC:90:F0:1C:CE:BE
Certificate issuer:       /CN=550F60A736CB45E447499B31D8249CBB97AEB73E
Certificate serial:       0D177898CEF30518D16F8C3D83F12A20490375AB
Authority key identifier: 55:0F:60:A7:36:CB:45:E4:47:49:9B:31:D8:24:9C:BB:97:AE:B7:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550F60A736CB45E447499B31D8249CBB97AEB73E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/34352e3232362e32382e302f32322d3234203d3e20323635383638.roa
Signing time:             Tue 04 Feb 2025 17:59:18 +0000
ROA not before:           Tue 04 Feb 2025 17:54:18 +0000
ROA not after:            Tue 03 Feb 2026 17:59:18 +0000
asID:                     265868
IP address blocks:        45.226.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/550F60A736CB45E447499B31D8249CBB97AEB73E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/550F60A736CB45E447499B31D8249CBB97AEB73E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550F60A736CB45E447499B31D8249CBB97AEB73E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:17:78:98:ce:f3:05:18:d1:6f:8c:3d:83:f1:2a:20:49:03:75:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550F60A736CB45E447499B31D8249CBB97AEB73E
        Validity
            Not Before: Feb  4 17:54:18 2025 GMT
            Not After : Feb  3 17:59:18 2026 GMT
        Subject: CN=D5E3850512E55FFD4B8CAB36EAFCBC90F01CCEBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:bf:0a:f8:cc:4a:c4:ed:a4:fa:c5:83:01:
                    80:1c:33:01:c2:93:a1:8b:81:c3:e4:60:ed:be:f3:
                    8c:fe:4b:3f:80:46:7e:30:ef:26:44:b8:3c:95:18:
                    a7:27:48:81:2f:d5:cb:f3:64:f7:ce:e9:50:b1:7b:
                    1c:78:32:1b:b0:35:49:1d:b1:bd:72:df:a0:52:e9:
                    9e:28:f5:07:c5:28:08:18:00:80:e0:2b:50:39:30:
                    8b:b9:4d:2c:d2:93:a8:73:3a:28:b8:c1:9d:96:60:
                    cc:ad:24:90:88:c6:fb:c5:de:fc:9e:e8:20:3a:7c:
                    fe:91:37:76:e9:62:ee:b9:0e:5e:6a:b9:5d:b7:1a:
                    ab:7b:81:f1:5f:6e:f3:30:9c:cd:b9:20:b9:01:ab:
                    f8:ae:f8:0b:05:05:49:82:76:ae:de:2a:83:70:80:
                    7b:a2:24:d0:a2:e1:aa:21:0b:41:0b:13:a9:a2:54:
                    b9:cd:e2:64:b3:8f:c7:c5:86:16:27:9a:b3:b5:08:
                    2c:f8:ca:1b:88:df:a7:42:3a:ed:8d:ed:4d:7a:00:
                    77:a2:6f:d0:b9:b8:6d:89:62:74:bf:6a:79:0b:2f:
                    a6:a3:f9:83:a9:b0:f0:c2:b1:62:a5:b0:30:ee:71:
                    cb:f9:f3:03:a0:80:f3:74:0b:f6:3e:d1:af:eb:35:
                    32:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E3:85:05:12:E5:5F:FD:4B:8C:AB:36:EA:FC:BC:90:F0:1C:CE:BE
            X509v3 Authority Key Identifier:
                keyid:55:0F:60:A7:36:CB:45:E4:47:49:9B:31:D8:24:9C:BB:97:AE:B7:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/550F60A736CB45E447499B31D8249CBB97AEB73E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550F60A736CB45E447499B31D8249CBB97AEB73E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/34352e3232362e32382e302f32322d3234203d3e20323635383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:ab:88:67:0e:94:9b:45:ff:2b:3f:be:90:0c:aa:ff:27:bf:
         b3:9e:c5:25:ae:61:da:7d:e0:8e:f2:10:01:5b:6f:cf:c0:61:
         33:aa:af:15:e2:73:67:2b:39:04:c1:c7:f7:77:4e:55:8f:d6:
         84:13:f0:8a:8d:d4:79:aa:2b:df:01:77:5b:c9:8a:cc:a4:2e:
         8e:04:6e:88:9d:8a:67:73:89:dd:c2:ee:10:23:00:8c:fd:b4:
         9b:d1:5b:ee:58:f2:fb:5a:7b:87:19:df:56:ee:3c:44:65:e9:
         28:11:f0:dc:02:20:aa:12:75:46:cf:fc:c2:94:07:85:21:85:
         cb:27:67:6b:9c:9c:69:76:13:43:92:85:b9:c5:e6:fb:a5:50:
         7e:f2:6b:25:14:3e:83:bf:40:17:ca:fd:d0:13:f5:8a:bf:75:
         eb:07:d1:48:ef:c8:b9:7d:3b:ea:96:f6:f3:74:9a:34:85:90:
         3c:d5:27:38:6a:61:64:9d:5a:67:86:b7:0f:03:86:47:69:c9:
         9e:fe:d0:46:d4:50:9b:7d:f3:3e:98:56:2d:a3:e1:d5:d5:d0:
         99:10:94:93:91:15:19:4b:9d:26:6c:0d:58:85:0c:ba:37:74:
         23:92:67:b5:e3:b2:dd:9a:2a:00:1b:13:d9:dd:52:c9:81:c3:
         34:92:32:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:08:50 2025 by rpki-client