Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/34352e3233352e3132382e302f32322d3232203d3e20323635353233.roa
File:                     34352e3233352e3132382e302f32322d3232203d3e20323635353233.roa (raw, json)
Hash identifier:          BF1J+r9Yk4huk0i6ZPpyMmrrVpjrASR/pSsBXuaksXQ=
Subject key identifier:   B5:BC:2A:02:9D:92:8A:30:5B:D9:77:A3:D5:8D:3F:B9:63:16:67:11
Certificate issuer:       /CN=E72389DB363677115A40632E0F358D0066C2BC82
Certificate serial:       25A746C713930B4CD1EA2597FD4B91FA13ABB777
Authority key identifier: E7:23:89:DB:36:36:77:11:5A:40:63:2E:0F:35:8D:00:66:C2:BC:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E72389DB363677115A40632E0F358D0066C2BC82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/34352e3233352e3132382e302f32322d3232203d3e20323635353233.roa
Signing time:             Tue 04 Feb 2025 18:39:03 +0000
ROA not before:           Tue 04 Feb 2025 18:34:03 +0000
ROA not after:            Tue 03 Feb 2026 18:39:03 +0000
asID:                     265523
IP address blocks:        45.235.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/E72389DB363677115A40632E0F358D0066C2BC82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/E72389DB363677115A40632E0F358D0066C2BC82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E72389DB363677115A40632E0F358D0066C2BC82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a7:46:c7:13:93:0b:4c:d1:ea:25:97:fd:4b:91:fa:13:ab:b7:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E72389DB363677115A40632E0F358D0066C2BC82
        Validity
            Not Before: Feb  4 18:34:03 2025 GMT
            Not After : Feb  3 18:39:03 2026 GMT
        Subject: CN=B5BC2A029D928A305BD977A3D58D3FB963166711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:67:58:12:c3:11:cb:65:ce:74:10:26:0f:a7:
                    e0:80:f9:b4:7b:e9:50:44:6d:97:46:41:bc:47:4b:
                    26:ac:d1:0a:03:27:51:dc:f5:b4:6d:74:c7:ff:52:
                    40:16:09:1c:d1:1c:5c:9c:dc:04:f7:ee:be:1a:f0:
                    d3:54:dd:77:53:07:90:a8:5b:f5:04:24:f5:a8:75:
                    9f:f5:e1:3d:02:a2:80:02:59:f8:4e:8e:61:d1:05:
                    d1:15:ad:56:5d:b7:4a:84:0a:b3:c7:80:71:c2:51:
                    2e:7d:5c:c5:82:2e:ac:70:5c:fd:20:15:a5:31:f8:
                    62:bb:cc:b4:32:54:f7:f6:a1:1a:44:a6:c6:7f:ea:
                    ca:ab:42:28:35:fe:47:e6:b8:4c:16:5b:90:76:82:
                    12:b6:13:6b:81:6f:d2:35:f2:7f:b7:71:86:1f:f9:
                    78:fa:76:34:4a:3b:6b:9d:bd:28:bd:83:8a:3f:d4:
                    bd:0a:98:12:94:fa:97:39:96:67:55:25:60:63:0a:
                    d8:f9:40:c7:c0:fa:0a:b6:56:e0:ea:8e:b8:e3:79:
                    6a:b0:97:ed:a2:b3:db:e9:79:b0:e0:ec:4f:12:ea:
                    aa:8d:67:62:8b:2d:54:e9:09:07:72:cd:af:8f:25:
                    08:c1:a4:ca:39:60:95:55:d7:8c:40:f8:b0:df:d2:
                    51:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BC:2A:02:9D:92:8A:30:5B:D9:77:A3:D5:8D:3F:B9:63:16:67:11
            X509v3 Authority Key Identifier:
                keyid:E7:23:89:DB:36:36:77:11:5A:40:63:2E:0F:35:8D:00:66:C2:BC:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/E72389DB363677115A40632E0F358D0066C2BC82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E72389DB363677115A40632E0F358D0066C2BC82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E1DE3A03E0D54B52887C15D97800F42C5F0B25B6D8A9503545447CFF191530E/0/34352e3233352e3132382e302f32322d3232203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:e9:98:d8:b3:6a:00:c2:94:59:2c:32:8a:8e:9a:d4:e1:10:
         80:82:55:04:af:45:2d:a0:fb:fc:f8:9f:0b:e7:71:a2:3e:ef:
         95:1f:17:29:6a:84:0a:0b:d9:8e:00:75:8f:fb:e1:f7:f0:f2:
         64:dc:19:e8:96:02:80:67:83:d8:42:4b:63:ab:19:dd:10:78:
         23:b7:0c:e7:b9:ec:d8:79:72:11:9e:b9:d5:9d:6a:83:9f:53:
         22:4b:d4:e0:ed:69:bd:b3:7e:b0:28:90:e4:0b:2e:44:cf:2a:
         4c:cb:9e:46:9f:f6:72:35:95:71:9c:a8:f9:93:05:63:3a:99:
         dc:60:67:56:14:2d:86:2b:67:c4:67:da:f0:36:dc:8c:60:78:
         d8:b7:f7:43:20:34:5e:a2:49:58:c7:20:5d:32:d1:1a:d8:ae:
         91:92:98:92:ee:f1:60:8f:c1:26:61:a4:e7:44:4d:82:7d:74:
         27:e8:ba:f2:63:56:ba:5e:00:39:16:12:a1:d8:28:26:54:19:
         c9:83:44:a8:2e:6f:5f:1f:e7:b1:ba:de:2a:e4:10:f2:c9:a0:
         c3:97:59:02:8e:b6:e7:9e:78:62:63:9f:b7:2d:41:2f:8d:69:
         cd:5f:7b:04:b5:be:ca:45:f4:9a:17:34:7c:3e:4f:50:d4:8d:
         0a:69:98:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:08:21 2025 by rpki-client