Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e203232373234.roa
File:                     34352e3138322e3131372e302f32342d3234203d3e203232373234.roa (raw, json)
Hash identifier:          7AlF9fJbcd8gjj8xCUrGkbS7GfRYCSqXeCY02HrFJrg=
Subject key identifier:   28:D4:DB:FA:63:89:3D:3A:9A:C1:7C:63:B6:70:3C:AB:EA:38:BD:AC
Certificate issuer:       /CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
Certificate serial:       4BB10EC46FE8FC4306D7473F5EA31CD303D8B7CF
Authority key identifier: C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e203232373234.roa
Signing time:             Tue 04 Feb 2025 19:59:30 +0000
ROA not before:           Tue 04 Feb 2025 19:54:30 +0000
ROA not after:            Tue 03 Feb 2026 19:59:30 +0000
asID:                     22724
IP address blocks:        45.182.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b1:0e:c4:6f:e8:fc:43:06:d7:47:3f:5e:a3:1c:d3:03:d8:b7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
        Validity
            Not Before: Feb  4 19:54:30 2025 GMT
            Not After : Feb  3 19:59:30 2026 GMT
        Subject: CN=28D4DBFA63893D3A9AC17C63B6703CABEA38BDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:3c:a6:13:d8:17:be:80:45:82:57:ca:df:
                    30:eb:c9:9f:3a:b9:ea:dc:81:ab:61:d8:01:04:63:
                    7b:d7:a0:69:61:cd:de:ec:1e:99:3c:06:c0:c1:11:
                    e9:df:19:a9:52:4f:1b:d0:6b:ed:75:99:eb:42:32:
                    14:d9:f5:ae:49:34:0d:03:cf:d2:9d:00:58:40:2d:
                    b5:93:0f:bc:49:ae:2c:7c:79:f0:e2:1b:78:9c:10:
                    55:d2:aa:d6:3c:87:ef:7e:88:3f:d3:b2:58:be:76:
                    a0:52:a7:59:80:54:d6:71:69:70:a0:c7:7d:7a:ed:
                    b6:f8:f9:ee:7c:1e:f6:c8:a7:b4:db:b8:f4:23:ff:
                    93:fa:6e:82:98:18:25:89:e8:52:ef:13:f9:dd:c4:
                    1a:01:0e:5b:f0:f6:a8:6d:77:d8:d5:47:dd:7d:3b:
                    f4:9d:3e:eb:86:66:a1:c9:1d:97:a3:fe:30:ba:65:
                    66:29:a8:9c:7d:93:85:2c:39:af:0e:de:7f:6c:4d:
                    52:38:df:1e:e2:58:4c:3d:ea:10:8d:bc:57:6a:34:
                    16:f7:f2:64:a4:d9:22:0b:7f:27:08:19:98:27:75:
                    37:e0:0a:ba:fa:0c:44:a3:fb:48:ca:77:bc:e7:8c:
                    65:c6:df:82:30:df:f9:be:f7:56:73:c0:d1:d6:60:
                    e3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D4:DB:FA:63:89:3D:3A:9A:C1:7C:63:B6:70:3C:AB:EA:38:BD:AC
            X509v3 Authority Key Identifier:
                keyid:C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:38:65:87:41:56:61:78:f2:a0:85:6a:f4:1e:51:06:91:27:
         57:74:ed:46:0e:23:ca:0d:69:9c:65:76:4e:04:79:5a:8f:9c:
         4e:1a:7c:6b:e2:27:df:a1:30:84:4f:82:2c:55:db:43:af:54:
         9e:2a:6c:b5:fd:30:39:a3:f3:ec:2d:1c:6f:2d:d6:46:a9:39:
         69:11:bf:f0:73:0d:9b:8a:9a:9e:7c:15:f9:ab:a8:02:e3:4b:
         9b:49:93:7f:43:e5:7c:f8:dd:5f:dd:5e:25:5c:3e:d7:5c:78:
         75:7d:a3:9d:41:9c:a3:8b:1b:94:94:61:8f:ef:0b:fc:41:28:
         0a:d7:85:e0:4b:72:97:cc:51:04:70:52:17:31:5d:26:b4:73:
         da:60:c4:ec:44:50:30:b5:a5:63:78:fe:20:56:72:3d:dd:2a:
         5b:e4:06:26:24:d5:69:69:e7:39:bf:a7:4f:b1:ef:be:d7:44:
         2a:29:02:1b:d9:d0:91:eb:2e:78:b5:c7:96:ac:49:19:d3:74:
         ed:26:d9:89:4d:83:98:3a:3a:bf:57:33:af:10:f7:b9:05:d4:
         51:15:68:ab:e2:ec:52:d4:db:01:c3:d8:d2:f1:f2:67:0f:83:
         60:8b:6e:83:49:41:4a:b3:df:9a:04:08:04:57:ee:21:14:d6:
         15:eb:6a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:54 2025 by rpki-client