Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235332e302f32342d3234203d3e20323039323732.roa
File:                     34352e3232372e3235332e302f32342d3234203d3e20323039323732.roa (raw, json)
Hash identifier:          kRdWLxVTp4yjemqKrAESx/H57QjhlyFjL5ZDjmQ4AZ8=
Subject key identifier:   DF:4E:4C:CB:FB:DA:75:FC:FC:8E:EF:E6:00:38:9A:D0:E6:F6:23:F9
Certificate issuer:       /CN=0A2E8494F1EE6E9343EF823748A436EA77B86231
Certificate serial:       282A8949AB129478A90166B051765785C9B75380
Authority key identifier: 0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235332e302f32342d3234203d3e20323039323732.roa
Signing time:             Tue 18 Feb 2025 16:40:00 +0000
ROA not before:           Tue 18 Feb 2025 16:35:00 +0000
ROA not after:            Tue 17 Feb 2026 16:40:00 +0000
asID:                     209272
IP address blocks:        45.227.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.crl
                          rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 12:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2a:89:49:ab:12:94:78:a9:01:66:b0:51:76:57:85:c9:b7:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2E8494F1EE6E9343EF823748A436EA77B86231
        Validity
            Not Before: Feb 18 16:35:00 2025 GMT
            Not After : Feb 17 16:40:00 2026 GMT
        Subject: CN=DF4E4CCBFBDA75FCFC8EEFE600389AD0E6F623F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:39:0a:81:db:10:fb:fc:63:10:fd:61:18:ff:
                    55:b3:36:cd:49:3b:42:4c:fc:63:76:d0:eb:c3:4e:
                    24:07:cd:dd:01:9c:89:1e:61:e3:72:50:ea:57:c9:
                    c4:3c:b8:a0:98:1d:fc:9c:11:22:4b:38:45:c1:a5:
                    6a:7f:a9:59:8e:6e:1c:b8:6d:72:45:02:ca:99:b6:
                    8c:37:50:26:67:cb:35:63:45:1c:1a:82:6c:28:b9:
                    f2:2f:0d:0a:1d:eb:5b:87:82:0c:4b:91:81:b4:58:
                    ba:53:8d:cd:50:9b:e9:06:62:e3:e1:df:94:b4:30:
                    21:0a:30:aa:af:b1:7e:f5:bd:4b:09:0c:89:39:33:
                    63:a1:f3:af:c6:56:8e:05:d7:fa:a3:49:2b:06:e8:
                    49:07:f3:24:1d:88:53:cc:fd:b4:57:c9:7e:72:b6:
                    5d:80:b9:e8:4b:f6:c0:bc:5e:24:21:ed:83:bc:c8:
                    1c:07:b6:1a:07:c6:f8:8b:a3:38:c6:cb:72:47:91:
                    73:f5:1c:df:de:c3:79:8d:69:26:74:bd:f1:89:55:
                    9f:63:1f:a8:2f:b4:14:2c:7e:c8:47:f5:6c:8d:e8:
                    0e:93:dd:17:1e:12:20:bc:e8:be:18:39:57:45:b0:
                    d0:81:55:68:87:4f:38:2c:e9:27:66:dd:b1:c1:7a:
                    12:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4E:4C:CB:FB:DA:75:FC:FC:8E:EF:E6:00:38:9A:D0:E6:F6:23:F9
            X509v3 Authority Key Identifier:
                keyid:0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235332e302f32342d3234203d3e20323039323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:02:bf:80:85:ec:da:3b:71:02:80:7e:d2:8a:13:1b:67:75:
         82:f4:7a:ff:8b:0d:45:5e:fa:5d:9b:95:06:6a:ba:04:ac:7d:
         05:d1:5b:54:58:bb:bf:c0:44:79:b7:8e:bd:30:67:95:7a:28:
         cc:87:13:f2:4a:2c:d8:78:f6:b1:2b:a2:54:df:e4:b0:24:10:
         db:41:c8:47:60:f1:24:5a:8e:39:dd:16:76:16:fa:f7:f4:32:
         4a:a6:03:06:1d:3e:cf:7f:95:e1:89:e3:f2:40:b3:23:46:0c:
         d6:99:18:b4:71:62:e9:e4:f8:43:ea:23:e4:c6:22:f6:16:9b:
         60:9d:9e:15:d1:7f:83:a2:cb:ad:a0:3c:4b:39:c8:db:89:b4:
         44:ef:24:14:73:9b:6f:b7:41:3b:6b:15:63:1e:46:6b:52:90:
         69:81:4a:fb:81:ee:ce:7f:72:d1:f7:65:09:01:72:a9:d1:9f:
         7e:d4:39:3a:a6:1e:6e:f2:01:69:81:fe:2a:c4:14:08:1b:2f:
         ee:ad:9f:b3:5b:06:e5:91:1d:a4:64:82:e1:b8:5a:e3:24:ed:
         3a:87:92:68:47:74:82:28:64:d5:17:2a:a3:9f:48:88:d5:29:
         2c:67:5c:f3:d4:d9:07:e7:7f:62:87:77:87:cf:7d:5e:be:0b:
         80:0d:d4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:32:08 2025 by rpki-client