Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66E721B71A74200CD52E7DC175181B488BEF7523541CD60C2B24DACDB54088EA/0/34352e3138312e3232342e302f32322d3234203d3e20323639373338.roa
File:                     34352e3138312e3232342e302f32322d3234203d3e20323639373338.roa (raw, json)
Hash identifier:          SuylEbgnM5YA64FiAwVamMX+LxG71KzRv8Nu5GjX7+w=
Subject key identifier:   F5:90:1A:BE:F3:E9:A1:67:1C:DE:27:33:C6:99:63:BD:AB:20:07:D0
Certificate issuer:       /CN=77E2A219521149A9ACFA935AA2B306003A25D8B7
Certificate serial:       6DFBDD4A1C754FBA5D427BDF66B044E2F19DCE97
Authority key identifier: 77:E2:A2:19:52:11:49:A9:AC:FA:93:5A:A2:B3:06:00:3A:25:D8:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77E2A219521149A9ACFA935AA2B306003A25D8B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66E721B71A74200CD52E7DC175181B488BEF7523541CD60C2B24DACDB54088EA/0/34352e3138312e3232342e302f32322d3234203d3e20323639373338.roa
Signing time:             Tue 04 Feb 2025 18:04:03 +0000
ROA not before:           Tue 04 Feb 2025 17:59:03 +0000
ROA not after:            Tue 03 Feb 2026 18:04:03 +0000
asID:                     269738
IP address blocks:        45.181.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/66E721B71A74200CD52E7DC175181B488BEF7523541CD60C2B24DACDB54088EA/0/77E2A219521149A9ACFA935AA2B306003A25D8B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/66E721B71A74200CD52E7DC175181B488BEF7523541CD60C2B24DACDB54088EA/0/77E2A219521149A9ACFA935AA2B306003A25D8B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77E2A219521149A9ACFA935AA2B306003A25D8B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fb:dd:4a:1c:75:4f:ba:5d:42:7b:df:66:b0:44:e2:f1:9d:ce:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77E2A219521149A9ACFA935AA2B306003A25D8B7
        Validity
            Not Before: Feb  4 17:59:03 2025 GMT
            Not After : Feb  3 18:04:03 2026 GMT
        Subject: CN=F5901ABEF3E9A1671CDE2733C69963BDAB2007D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:59:29:b2:82:39:65:5d:3f:23:c3:ef:e6:73:
                    5a:cd:0d:c5:46:43:13:7e:7f:2c:69:50:5d:b5:a0:
                    89:c6:3a:59:b1:e2:63:50:2a:4b:74:a6:c2:0c:fd:
                    a8:b1:fc:22:03:54:47:90:a0:bc:91:67:f2:55:78:
                    8d:5c:82:e4:8f:3e:c0:f2:3c:8c:9e:7a:54:c7:e3:
                    1e:3e:e5:52:cf:37:fa:5f:37:3d:11:8c:9b:53:42:
                    96:ae:5b:29:10:3b:90:02:f8:2c:54:8f:c8:e2:ed:
                    48:83:8a:75:ed:a3:87:29:f6:95:da:9e:37:69:65:
                    94:ef:a2:a9:77:7d:b0:b2:6a:f2:e3:f4:0f:36:f1:
                    37:58:68:96:fa:f1:de:19:89:6d:d7:52:09:93:be:
                    c7:9e:6c:a7:71:ff:18:3c:ef:2b:b7:2d:22:eb:5d:
                    d0:77:a5:6c:6d:8b:e5:86:7a:64:c1:ac:b0:54:1f:
                    9b:f2:f8:e1:d1:37:4c:fc:de:e4:96:af:7c:45:e3:
                    fb:56:44:6d:b1:50:7f:19:24:84:21:05:6f:f9:fc:
                    37:4a:58:10:22:67:3d:60:cb:cb:51:c0:91:ec:8d:
                    5e:24:fd:fb:29:87:6c:70:b7:3a:77:63:af:74:dd:
                    6c:0b:68:6a:0b:ed:3b:47:82:ee:4d:bc:8d:92:0b:
                    f4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:90:1A:BE:F3:E9:A1:67:1C:DE:27:33:C6:99:63:BD:AB:20:07:D0
            X509v3 Authority Key Identifier:
                keyid:77:E2:A2:19:52:11:49:A9:AC:FA:93:5A:A2:B3:06:00:3A:25:D8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66E721B71A74200CD52E7DC175181B488BEF7523541CD60C2B24DACDB54088EA/0/77E2A219521149A9ACFA935AA2B306003A25D8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77E2A219521149A9ACFA935AA2B306003A25D8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66E721B71A74200CD52E7DC175181B488BEF7523541CD60C2B24DACDB54088EA/0/34352e3138312e3232342e302f32322d3234203d3e20323639373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:15:7c:ea:1b:56:d0:f3:62:32:9a:b3:20:94:d1:2f:46:a5:
         ed:23:a5:d5:6a:c1:af:d0:62:01:93:0c:56:81:ed:71:26:77:
         5c:3c:9f:35:4b:9b:5a:ff:ae:10:07:cc:79:48:54:40:20:e5:
         c2:09:58:91:ec:f0:45:12:f1:02:5e:91:e5:ca:98:c2:ba:23:
         07:ea:e3:4d:28:54:d6:db:82:dd:33:25:ca:7a:db:a9:85:36:
         93:1e:d7:7c:42:95:6c:ec:e7:9d:da:59:4e:c9:53:b3:ef:93:
         66:d0:b8:49:0c:0b:4b:cd:a4:9b:fa:71:19:ee:b1:40:6f:68:
         f5:30:52:24:e1:75:6e:51:ba:68:e6:ed:97:20:40:d5:50:03:
         a3:43:7e:f1:18:a7:d2:82:59:38:8c:75:90:0d:64:19:88:d4:
         b6:48:a9:f7:64:cc:cd:71:89:5a:39:26:49:02:1d:e0:8e:5d:
         d1:57:4a:d9:09:f8:59:c6:0b:90:df:58:0e:dc:37:39:4d:e3:
         7e:88:73:35:61:e1:43:ce:61:49:e5:e8:bb:f6:83:ae:1f:6e:
         fb:a4:59:53:00:f9:82:08:1d:85:b0:10:54:0f:a6:a1:1c:40:
         03:dc:0c:ee:9f:7d:2a:7f:c2:e9:20:be:bc:a4:95:7e:8e:5b:
         f3:67:d4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:54 2025 by rpki-client