Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EA083DD6037FBA4223988E02BFC662A9228300C255951BF63E83A48CF255774/0/34352e3138302e3137392e302f32342d3234203d3e20323639383439.roa
File:                     34352e3138302e3137392e302f32342d3234203d3e20323639383439.roa (raw, json)
Hash identifier:          kI/ARK2IaHHqas75UgJZY28twWOsKqm8ErQ291bhLr4=
Subject key identifier:   EF:63:30:EA:53:67:98:FF:A8:8D:05:7F:2F:53:E7:EF:FA:95:E2:AC
Certificate issuer:       /CN=8ED5C3808BFF792AECD4EDEEDFCEE7337DB89C49
Certificate serial:       7F8670ED28B0D93E59DBC0DC424104B26A7FB935
Authority key identifier: 8E:D5:C3:80:8B:FF:79:2A:EC:D4:ED:EE:DF:CE:E7:33:7D:B8:9C:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8ED5C3808BFF792AECD4EDEEDFCEE7337DB89C49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EA083DD6037FBA4223988E02BFC662A9228300C255951BF63E83A48CF255774/0/34352e3138302e3137392e302f32342d3234203d3e20323639383439.roa
Signing time:             Tue 04 Feb 2025 18:00:36 +0000
ROA not before:           Tue 04 Feb 2025 17:55:36 +0000
ROA not after:            Tue 03 Feb 2026 18:00:36 +0000
asID:                     269849
IP address blocks:        45.180.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EA083DD6037FBA4223988E02BFC662A9228300C255951BF63E83A48CF255774/0/8ED5C3808BFF792AECD4EDEEDFCEE7337DB89C49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EA083DD6037FBA4223988E02BFC662A9228300C255951BF63E83A48CF255774/0/8ED5C3808BFF792AECD4EDEEDFCEE7337DB89C49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8ED5C3808BFF792AECD4EDEEDFCEE7337DB89C49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 17:23:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:86:70:ed:28:b0:d9:3e:59:db:c0:dc:42:41:04:b2:6a:7f:b9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ED5C3808BFF792AECD4EDEEDFCEE7337DB89C49
        Validity
            Not Before: Feb  4 17:55:36 2025 GMT
            Not After : Feb  3 18:00:36 2026 GMT
        Subject: CN=EF6330EA536798FFA88D057F2F53E7EFFA95E2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2e:9b:02:a0:ba:38:6f:bd:ee:1e:c6:a1:c3:
                    68:ff:e8:aa:b4:2c:cd:07:d8:97:14:f7:9d:a3:87:
                    e1:c0:c0:1b:74:65:cb:47:b9:66:63:db:e1:64:70:
                    82:ae:c5:64:0c:fd:96:be:03:bf:37:86:50:cf:d0:
                    3d:40:07:6f:33:9b:c6:f8:14:62:5d:96:5c:60:0e:
                    1f:e6:be:72:dc:0e:0b:ad:16:09:ee:c5:8d:1a:de:
                    3b:59:26:32:5e:85:99:89:62:f2:2b:fd:27:83:d4:
                    a6:b2:5b:25:c6:c9:ae:b6:9c:ee:6f:d6:0b:89:f0:
                    a7:bf:15:c7:17:2f:8b:74:ad:7b:75:dc:6a:0b:82:
                    dd:7a:2f:b2:38:fd:fd:18:15:53:8d:75:fc:dc:20:
                    52:23:5e:1e:3c:05:bc:b6:41:4f:6f:7b:f2:c7:f0:
                    a4:d8:02:a0:18:25:4a:46:05:82:4e:2c:e4:95:67:
                    ae:3f:ac:99:a3:dc:1b:59:5f:f6:f3:f7:fd:80:b6:
                    e0:c6:59:a5:c9:9a:5f:5e:16:df:59:9a:6e:f7:80:
                    89:2c:d2:bf:ab:5a:5f:9d:10:d6:4f:aa:bd:ce:a2:
                    87:02:9a:f8:3c:b9:b4:2d:48:09:87:92:ef:bf:34:
                    79:f6:ae:9c:26:6b:dd:83:18:71:16:62:3d:3c:76:
                    5a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:63:30:EA:53:67:98:FF:A8:8D:05:7F:2F:53:E7:EF:FA:95:E2:AC
            X509v3 Authority Key Identifier:
                keyid:8E:D5:C3:80:8B:FF:79:2A:EC:D4:ED:EE:DF:CE:E7:33:7D:B8:9C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EA083DD6037FBA4223988E02BFC662A9228300C255951BF63E83A48CF255774/0/8ED5C3808BFF792AECD4EDEEDFCEE7337DB89C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8ED5C3808BFF792AECD4EDEEDFCEE7337DB89C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EA083DD6037FBA4223988E02BFC662A9228300C255951BF63E83A48CF255774/0/34352e3138302e3137392e302f32342d3234203d3e20323639383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:5a:63:13:64:e2:c3:ac:71:a5:29:cf:c3:19:46:c6:a7:49:
         cc:bd:4b:68:06:a4:eb:a0:9d:2d:fb:16:55:57:5d:fa:31:5a:
         ec:52:f6:b0:28:c6:31:e9:33:63:5e:2c:54:90:64:49:bf:21:
         76:94:fa:ea:cb:5d:7f:9a:44:d3:2d:00:79:c3:25:e5:8e:6a:
         ee:93:9f:14:eb:fa:2d:a4:42:c9:c8:d3:c0:28:be:18:99:d4:
         ca:9c:8c:9c:95:7f:fb:3c:7e:78:a6:4e:de:b0:86:a5:0c:20:
         73:d2:35:1e:da:68:ca:05:51:80:16:31:9d:3b:b1:fb:67:73:
         10:d6:83:29:f9:ea:5f:66:32:6e:34:e0:77:1b:51:ba:89:24:
         06:4e:ae:38:0b:4e:4c:f6:62:6b:04:55:0e:37:6f:dd:37:3a:
         10:5d:d7:36:16:fb:6f:9d:ce:07:8e:1c:28:0a:4c:13:1c:94:
         63:68:0d:36:25:56:33:a3:6d:ec:de:5b:cf:7e:0d:96:8d:9a:
         5b:8c:e0:8c:88:b4:b9:2d:e4:c0:93:e0:d6:39:0d:6d:f5:73:
         a5:fb:70:cc:7f:de:a6:35:bd:b8:96:5e:8c:9a:75:bc:03:0a:
         24:29:c1:f1:85:36:55:6c:df:95:30:c3:98:75:21:5f:bf:ce:
         c4:09:d8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:53:38 2025 by rpki-client