Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136342e302f32332d3233203d3e20323635363035.roa
File:                     34352e3138382e3136342e302f32332d3233203d3e20323635363035.roa (raw, json)
Hash identifier:          P/VCQNw3goMnqwcOgT1ZhET6Q0IOXHY1nBKRQWa1fsU=
Subject key identifier:   CD:CA:7F:63:CD:1B:49:76:B9:38:B3:D3:89:36:99:67:2F:33:D5:A9
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       2891C771CC3FB8FD70E1BAFE03308098AF0137BC
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136342e302f32332d3233203d3e20323635363035.roa
Signing time:             Tue 04 Feb 2025 18:20:28 +0000
ROA not before:           Tue 04 Feb 2025 18:15:28 +0000
ROA not after:            Tue 03 Feb 2026 18:20:28 +0000
asID:                     265605
IP address blocks:        45.188.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl
                          rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:91:c7:71:cc:3f:b8:fd:70:e1:ba:fe:03:30:80:98:af:01:37:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Feb  4 18:15:28 2025 GMT
            Not After : Feb  3 18:20:28 2026 GMT
        Subject: CN=CDCA7F63CD1B4976B938B3D3893699672F33D5A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:53:f3:7b:ad:6d:ed:d5:76:1c:d7:dc:e0:3d:
                    b6:83:e3:8e:58:75:7f:f0:da:68:c6:bb:f0:f3:1a:
                    88:25:26:00:25:d4:e8:9f:90:8a:34:0f:f1:f2:91:
                    97:cc:6a:bc:95:bf:9b:97:1d:f8:87:f1:5f:11:36:
                    a0:3c:be:75:3b:4d:08:aa:df:fa:d9:34:04:27:94:
                    b5:46:db:54:f9:d7:30:44:66:c4:2d:60:58:b4:c1:
                    1a:50:8c:14:e8:de:51:77:d6:95:bb:b6:cb:38:fe:
                    4a:1e:e8:62:4f:ed:e4:5d:eb:5e:cb:96:af:09:68:
                    81:b7:51:f3:d7:e8:a5:64:b5:91:d6:1a:23:2a:5b:
                    62:68:3c:e2:84:10:5d:3b:66:b3:79:28:72:1e:a2:
                    1a:3a:09:8b:b7:9d:38:cd:fd:77:ad:dd:81:ec:96:
                    ee:17:45:90:03:c8:06:14:01:cf:54:29:f0:d2:1b:
                    8b:b6:ed:06:8d:3e:13:6d:0a:55:fd:6e:09:a1:ee:
                    a6:21:da:66:8a:16:9f:f0:73:dd:b0:f9:de:f5:b5:
                    16:f8:b1:55:ed:1f:fe:6a:d6:5c:d3:ad:78:dc:ab:
                    63:fd:4c:07:6d:ef:85:85:cd:7c:31:e6:40:66:f0:
                    41:cd:ab:f1:99:d3:d3:99:b4:52:38:04:14:88:a7:
                    77:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CA:7F:63:CD:1B:49:76:B9:38:B3:D3:89:36:99:67:2F:33:D5:A9
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136342e302f32332d3233203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:f1:6a:55:40:07:6b:36:fb:e8:c8:b0:e6:8a:e7:a3:22:d2:
         58:05:f9:13:14:5c:6e:58:d9:0e:1d:14:0f:d3:a0:4d:1f:03:
         c4:f2:91:c4:34:84:42:b7:b6:9c:6c:e6:80:d9:8d:93:c1:75:
         c6:4d:b9:fc:26:50:b5:b5:46:ed:5b:42:dc:45:da:44:b2:de:
         67:31:c9:5b:e1:0b:9e:64:9c:fc:4a:5e:6b:1d:80:28:da:ef:
         94:31:6d:e0:b9:95:9d:f3:01:6a:d7:6a:64:4c:62:f0:88:8f:
         37:9a:66:95:c8:26:a5:83:25:26:a0:4e:6d:47:6b:2a:51:cc:
         d1:4f:7e:ba:a1:54:19:07:f7:30:ed:33:df:8d:0a:b6:be:c2:
         84:08:b1:cd:53:39:f8:28:9f:b6:58:51:cb:bc:30:d7:5d:93:
         07:46:99:a5:e6:42:08:b3:fe:d7:2d:5b:b8:d2:cf:ef:2a:63:
         9d:48:fa:75:d3:bc:f9:8e:2f:f4:45:8f:70:4e:63:ea:be:a6:
         62:8d:f0:a3:ed:b5:b2:e6:0e:1f:69:91:1b:df:bf:17:74:d9:
         58:13:92:91:d0:ef:10:73:33:b7:5f:d4:57:ae:5d:bf:0a:4c:
         82:f4:ca:24:20:e2:10:31:b7:66:82:c2:62:af:77:bc:89:eb:
         b8:48:b6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:04:34 2025 by rpki-client