Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/34352e3138332e34342e302f32322d3234203d3e203634313136.roa
File:                     34352e3138332e34342e302f32322d3234203d3e203634313136.roa (raw, json)
Hash identifier:          gGHOkhqV43NHsCoCbBjtcBeBEFEIKRhRbHq2cNCfJnM=
Subject key identifier:   24:39:FD:12:79:BE:75:FB:B0:74:16:2C:9B:FB:2A:76:E4:0F:BA:56
Certificate issuer:       /CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
Certificate serial:       6EAD5952808BB3CA270DA892A42B32C252AB2885
Authority key identifier: 0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/34352e3138332e34342e302f32322d3234203d3e203634313136.roa
Signing time:             Tue 04 Feb 2025 18:24:47 +0000
ROA not before:           Tue 04 Feb 2025 18:19:47 +0000
ROA not after:            Tue 03 Feb 2026 18:24:47 +0000
asID:                     64116
IP address blocks:        45.183.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 07:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ad:59:52:80:8b:b3:ca:27:0d:a8:92:a4:2b:32:c2:52:ab:28:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
        Validity
            Not Before: Feb  4 18:19:47 2025 GMT
            Not After : Feb  3 18:24:47 2026 GMT
        Subject: CN=2439FD1279BE75FBB074162C9BFB2A76E40FBA56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ca:e3:c1:00:0d:86:7e:d1:44:d4:da:b1:a6:
                    7a:87:39:9d:3f:eb:85:b6:c2:18:89:b9:b1:f4:e7:
                    47:65:71:0a:58:63:db:bd:69:cf:c6:7e:10:bc:2f:
                    ec:6d:51:da:be:73:de:4b:15:4e:ac:48:1c:93:d8:
                    77:82:69:3a:d8:ac:04:3f:2d:43:06:14:93:e9:34:
                    56:7f:13:49:61:da:36:92:a3:1d:d2:8f:c8:ca:54:
                    9f:64:60:21:82:31:68:00:08:be:3e:de:d1:f3:f5:
                    c5:1a:35:4c:69:c2:97:10:c6:06:5c:47:b8:bc:f0:
                    4e:d2:62:1e:82:1b:75:c7:90:9a:06:f6:55:6b:61:
                    c9:a8:b5:85:ef:59:93:52:60:4b:c6:d9:f8:9c:fe:
                    6f:78:99:ee:5c:10:a0:ec:da:22:fc:23:34:0c:92:
                    aa:84:34:1e:ef:6c:5a:28:6f:a0:0f:fa:03:2d:b6:
                    da:2e:04:2d:d0:ac:37:c6:9a:c7:e6:06:78:5a:80:
                    13:25:36:f2:df:fb:5a:92:c8:1c:66:2f:18:ba:d3:
                    92:18:7a:5a:1f:f5:78:12:80:7e:af:f0:2b:17:b8:
                    15:70:2f:c4:19:c6:af:ed:0b:7c:8d:b9:cf:e0:fc:
                    5f:e1:f5:8c:51:59:8a:ef:f1:cd:cf:33:58:27:5c:
                    d6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:39:FD:12:79:BE:75:FB:B0:74:16:2C:9B:FB:2A:76:E4:0F:BA:56
            X509v3 Authority Key Identifier:
                keyid:0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/34352e3138332e34342e302f32322d3234203d3e203634313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:90:15:ef:09:a3:7e:24:28:e2:ac:49:d3:63:6d:4e:2c:48:
         c0:6e:60:04:49:9b:7d:41:08:1d:22:21:fb:60:54:19:b9:2f:
         60:2a:12:02:a2:15:f7:52:2b:65:f6:2d:a2:16:2b:f8:80:98:
         05:59:2c:fc:81:ba:b4:50:8d:57:58:2b:38:3b:ca:25:6c:a2:
         01:74:f5:2c:3b:f5:1f:a4:0c:2c:84:78:71:ab:b0:d3:26:f3:
         b6:7d:32:8a:83:e9:6c:b3:08:27:b7:54:69:2f:d5:eb:8c:d6:
         aa:2d:34:da:26:97:c4:1f:f7:96:af:f9:0e:ad:1b:1e:22:cc:
         e5:d7:80:b0:8e:50:d2:47:13:39:5f:34:15:5d:0e:72:40:7d:
         2c:11:2f:f7:a7:4c:13:5f:04:57:f1:48:fa:1c:b7:14:e2:ec:
         a9:87:b8:0d:5c:d1:98:24:32:cf:39:3f:a0:9b:52:1d:1c:ce:
         6d:08:52:c9:10:a5:4f:a3:f3:c6:70:b5:6a:c1:16:2d:eb:34:
         63:39:45:b4:b0:a3:ba:dc:f4:ff:5e:50:89:fc:24:b4:02:b2:
         4c:b9:bd:45:41:78:ae:77:64:4d:cc:b3:36:fb:f8:c7:bb:2a:
         5d:05:af:e3:2d:fe:ee:55:a3:b1:38:4c:4d:2e:83:a0:e9:4a:
         e5:8c:98:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:32 2025 by rpki-client