Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3234392e302f32342d3234203d3e20323639373832.roa
File:                     34352e3138342e3234392e302f32342d3234203d3e20323639373832.roa (raw, json)
Hash identifier:          RZOS9yqwFrE94xs2+E86k1ncrfq5xm3PDpq1LE20NpM=
Subject key identifier:   6F:C3:C1:AF:84:3F:FF:C9:35:B2:DB:7F:FC:FF:49:35:0F:FB:30:00
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       63564D66BD53089CB65B7F7213503077B400A64B
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3234392e302f32342d3234203d3e20323639373832.roa
Signing time:             Tue 04 Feb 2025 18:15:54 +0000
ROA not before:           Tue 04 Feb 2025 18:10:54 +0000
ROA not after:            Tue 03 Feb 2026 18:15:54 +0000
asID:                     269782
IP address blocks:        45.184.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:56:4d:66:bd:53:08:9c:b6:5b:7f:72:13:50:30:77:b4:00:a6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Feb  4 18:10:54 2025 GMT
            Not After : Feb  3 18:15:54 2026 GMT
        Subject: CN=6FC3C1AF843FFFC935B2DB7FFCFF49350FFB3000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:03:91:30:b4:e5:c4:6e:37:3b:69:fd:f1:
                    78:30:b5:11:35:b6:4f:8c:fa:40:f2:80:2c:8b:e1:
                    81:bb:f0:18:f8:33:bc:ab:a1:b6:da:f3:b2:24:98:
                    40:47:1c:3f:21:d5:6f:71:d7:10:f6:82:13:64:e7:
                    99:e8:5d:4d:b8:95:06:e2:30:39:fa:b7:7f:e0:c7:
                    a4:ac:0e:94:1c:2b:7e:92:ed:c9:99:ec:cc:b6:fc:
                    bb:5a:38:59:68:f1:c8:45:22:7e:00:96:bd:72:ee:
                    a0:8f:5c:18:64:72:c3:ca:c6:23:bb:ab:37:e0:ca:
                    e2:16:ba:a6:e6:89:dc:89:de:82:99:06:5e:58:5c:
                    5b:bd:e7:f9:84:ec:f7:b4:77:27:7a:60:04:45:4a:
                    f9:d9:fd:41:a4:70:5c:ea:3c:f8:7d:e8:5e:6b:59:
                    6d:c5:82:66:44:64:d6:99:1e:34:53:94:91:f9:d9:
                    12:23:a6:cb:63:f9:9d:66:48:10:9b:b8:6c:41:9d:
                    d4:11:ce:02:4d:43:b9:d8:1c:cb:d6:b5:e6:a4:13:
                    b4:1a:f8:0f:52:dc:2b:a8:6a:33:d5:42:6f:f3:82:
                    02:fe:51:73:57:77:05:0c:47:54:1c:39:ff:5e:38:
                    d7:8a:22:22:d7:c8:9e:d7:83:a1:a7:c6:53:26:d4:
                    70:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C3:C1:AF:84:3F:FF:C9:35:B2:DB:7F:FC:FF:49:35:0F:FB:30:00
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3234392e302f32342d3234203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:8a:b8:ae:27:28:74:db:0f:cc:79:c5:a5:91:87:40:a5:b3:
         db:ec:50:56:8c:b1:a9:55:2e:fc:14:4d:03:69:47:a4:39:2c:
         8e:38:16:a9:80:37:fc:e8:d9:13:12:24:ad:42:fb:67:73:bb:
         27:8a:c7:b6:88:6f:53:ef:15:14:f2:aa:00:16:bf:9d:ee:e1:
         5f:5e:da:47:b8:b1:e3:2d:09:a7:a9:4d:04:9e:78:3b:e0:ad:
         ba:a5:ae:54:54:f7:4b:ec:db:f2:4a:95:c2:ef:67:c7:b8:98:
         73:b0:66:8c:85:d0:0c:f3:f1:08:e2:5d:7f:68:11:0e:55:4c:
         75:1b:59:e7:9f:3a:bb:1c:a4:ba:8c:8c:6e:4d:00:15:05:ae:
         b5:63:9d:d7:50:ad:e6:49:de:2a:8f:60:b8:f8:6d:88:50:90:
         3a:49:66:b1:52:b7:ef:3f:eb:6a:a3:3c:18:c5:b6:60:15:3f:
         34:6f:e4:ec:1c:f4:30:cc:f8:a1:f4:d0:6e:ff:2d:98:0c:76:
         93:51:c4:32:90:96:58:cf:74:e6:c3:70:d3:45:47:88:c0:39:
         b3:9b:48:80:e3:26:68:37:c3:c0:85:9b:b3:db:56:4c:02:e6:
         31:61:8a:33:3f:e1:af:09:6a:06:eb:9d:c7:9a:a4:94:6a:67:
         04:84:c5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:33:48 2025 by rpki-client