Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e203237393437.roa
File:                     34352e3138322e3131372e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          mSBg04UspXSj+mNH/jkXLLglMZLOxaETE0R32BxTt3E=
Subject key identifier:   69:D3:C8:A6:A7:B4:E6:8B:0F:03:16:7B:06:9A:B1:CA:F3:83:6E:96
Certificate issuer:       /CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
Certificate serial:       445CC731A74088F58CD70B75601244451A2233B4
Authority key identifier: C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 19:59:30 +0000
ROA not before:           Tue 04 Feb 2025 19:54:30 +0000
ROA not after:            Tue 03 Feb 2026 19:59:30 +0000
asID:                     27947
IP address blocks:        45.182.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5c:c7:31:a7:40:88:f5:8c:d7:0b:75:60:12:44:45:1a:22:33:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
        Validity
            Not Before: Feb  4 19:54:30 2025 GMT
            Not After : Feb  3 19:59:30 2026 GMT
        Subject: CN=69D3C8A6A7B4E68B0F03167B069AB1CAF3836E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:99:cf:b1:39:1c:dc:ab:83:a1:27:f1:a0:f4:
                    ad:7d:04:4e:61:c5:a2:18:46:d6:6d:a4:b2:19:58:
                    8f:b5:ee:99:a0:c7:03:74:2d:22:a6:62:fd:1e:83:
                    eb:a2:05:ea:87:85:9a:10:2e:f3:5d:df:04:c5:71:
                    d5:62:ee:c6:58:c0:ba:9e:87:8b:d7:dc:eb:43:ce:
                    16:5f:99:16:f6:59:fc:33:65:e8:30:34:6d:56:80:
                    79:d5:30:b6:1e:c7:5d:5d:93:3b:31:0d:e8:ae:5b:
                    21:47:c6:87:3b:f5:0e:5f:32:eb:4a:6f:bf:27:d0:
                    b7:b7:60:f0:f1:6c:df:05:ce:ab:70:91:67:0e:f6:
                    bb:9c:75:18:80:cc:f5:f9:b8:4f:77:c7:7a:3c:10:
                    e8:04:72:b8:37:7d:09:9c:31:46:b2:86:bc:87:b9:
                    96:b1:8c:ab:39:95:19:db:5c:33:b2:4d:2d:82:ff:
                    17:3a:ed:b7:eb:d6:8e:0c:c7:10:65:04:fe:3c:c5:
                    8c:8e:76:bb:fe:57:70:43:cb:80:22:e7:7a:27:2d:
                    ba:c7:9b:6e:b0:96:fb:46:3a:66:1b:26:ce:00:a2:
                    0c:79:d7:53:54:db:98:51:09:b3:d7:ed:a7:32:16:
                    fe:a9:ba:fa:34:5e:ae:eb:70:63:d9:c9:f9:26:91:
                    87:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D3:C8:A6:A7:B4:E6:8B:0F:03:16:7B:06:9A:B1:CA:F3:83:6E:96
            X509v3 Authority Key Identifier:
                keyid:C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:0d:4b:9f:dc:8b:dd:c7:19:45:84:77:18:f2:bb:4d:fe:78:
         a5:d4:33:cd:1e:d4:1a:b1:00:9d:cc:4c:8e:75:96:41:47:2b:
         22:3b:58:b7:26:d7:ab:5a:86:e0:21:a1:85:ab:a7:4d:56:94:
         0b:ef:0b:19:89:84:3f:2c:ea:af:6d:11:a3:65:85:a4:5d:bf:
         cd:4b:00:9d:0f:c0:7e:3a:72:9c:9b:59:9d:fd:e8:4f:5d:3b:
         79:a8:a3:25:37:71:49:3e:84:1f:ea:cf:95:98:ce:84:36:8b:
         3d:0f:4b:d9:8e:ee:b2:db:e9:5c:24:c1:0c:79:93:81:f3:88:
         1c:ae:c2:9b:c1:a4:90:00:1e:76:5b:5b:2a:ea:90:05:f3:1a:
         83:17:0c:77:c1:ac:56:27:2c:98:8e:dd:4b:c8:e1:3b:11:72:
         51:cc:2e:9b:2c:54:6a:39:66:9c:7a:12:3b:29:86:c5:6c:df:
         21:52:e5:c6:bf:59:82:69:3b:7a:66:a3:68:5c:89:75:74:79:
         10:b9:84:10:ae:b8:b2:81:2d:3f:33:fe:24:2d:fc:28:00:44:
         42:1c:51:cc:3f:b6:39:8c:7f:0c:3f:19:d1:12:01:5c:1e:58:
         51:0b:d4:fc:c6:46:82:02:df:01:a6:d9:c0:f1:66:ff:92:89:
         3b:83:fb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:14 2025 by rpki-client