Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73D4AC74FA72F544C7EDB1DE18DC03FD4713C042BC491FD9479312F262F4EED0/0/34352e3232392e35362e302f32322d3234203d3e20323636363932.roa
File:                     34352e3232392e35362e302f32322d3234203d3e20323636363932.roa (raw, json)
Hash identifier:          W8LQ/OgCFBwIHW1mtmZvAY3l1qn8EuYfEjUm6Xw3+J4=
Subject key identifier:   02:AE:64:E6:DA:9A:B7:26:DE:6F:FA:24:4B:38:3D:18:76:94:2D:76
Certificate issuer:       /CN=FB9D18F1F20CEBD4BF01B9B1704F55049B256872
Certificate serial:       7ABBE71307D918BAC2210A65C91F6A0DF51AFC74
Authority key identifier: FB:9D:18:F1:F2:0C:EB:D4:BF:01:B9:B1:70:4F:55:04:9B:25:68:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB9D18F1F20CEBD4BF01B9B1704F55049B256872.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73D4AC74FA72F544C7EDB1DE18DC03FD4713C042BC491FD9479312F262F4EED0/0/34352e3232392e35362e302f32322d3234203d3e20323636363932.roa
Signing time:             Tue 04 Feb 2025 18:55:59 +0000
ROA not before:           Tue 04 Feb 2025 18:50:59 +0000
ROA not after:            Tue 03 Feb 2026 18:55:59 +0000
asID:                     266692
IP address blocks:        45.229.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73D4AC74FA72F544C7EDB1DE18DC03FD4713C042BC491FD9479312F262F4EED0/0/FB9D18F1F20CEBD4BF01B9B1704F55049B256872.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73D4AC74FA72F544C7EDB1DE18DC03FD4713C042BC491FD9479312F262F4EED0/0/FB9D18F1F20CEBD4BF01B9B1704F55049B256872.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB9D18F1F20CEBD4BF01B9B1704F55049B256872.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:bb:e7:13:07:d9:18:ba:c2:21:0a:65:c9:1f:6a:0d:f5:1a:fc:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9D18F1F20CEBD4BF01B9B1704F55049B256872
        Validity
            Not Before: Feb  4 18:50:59 2025 GMT
            Not After : Feb  3 18:55:59 2026 GMT
        Subject: CN=02AE64E6DA9AB726DE6FFA244B383D1876942D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:88:b6:a8:c3:5c:18:c1:a3:b3:3e:8e:a7:12:
                    0f:96:d7:af:94:34:60:82:09:57:0f:df:8b:15:e6:
                    f0:6f:bf:99:9f:dd:f3:72:ea:08:67:e5:ab:75:2f:
                    f3:8d:92:74:60:ac:c3:1e:0d:12:51:7e:67:43:a8:
                    60:a2:e3:ec:bc:a6:dc:17:fd:b7:e5:b2:bd:2a:90:
                    5c:e2:d3:9c:d5:0c:18:9a:26:fc:96:8d:a4:9e:b3:
                    b9:6a:7b:9e:30:a2:c9:dd:83:c0:d6:f2:65:ea:7f:
                    7b:23:c9:87:fe:24:ad:f8:7e:19:b9:ca:31:f0:ea:
                    c4:53:f7:10:f7:4e:2e:76:d0:62:7c:5d:6e:9f:0a:
                    86:e6:4f:4e:5f:e3:a9:e1:4c:60:e6:ab:d9:64:90:
                    c4:09:eb:1a:72:45:37:a2:d4:60:43:21:87:93:4b:
                    97:6d:43:72:35:3e:72:da:5c:13:da:0b:0f:06:58:
                    2b:63:a2:80:79:dd:e0:14:5d:3d:d5:d9:bc:a3:39:
                    8f:34:86:82:80:c6:db:60:97:85:3e:4a:25:be:b9:
                    7a:de:49:11:49:f9:1a:68:cd:3a:80:ee:50:6b:76:
                    ea:13:80:ee:6c:ea:9e:42:ee:48:5f:e5:fd:51:dc:
                    45:36:04:c9:57:5a:a6:02:11:4b:e8:6e:c8:4e:a7:
                    a8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AE:64:E6:DA:9A:B7:26:DE:6F:FA:24:4B:38:3D:18:76:94:2D:76
            X509v3 Authority Key Identifier:
                keyid:FB:9D:18:F1:F2:0C:EB:D4:BF:01:B9:B1:70:4F:55:04:9B:25:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73D4AC74FA72F544C7EDB1DE18DC03FD4713C042BC491FD9479312F262F4EED0/0/FB9D18F1F20CEBD4BF01B9B1704F55049B256872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB9D18F1F20CEBD4BF01B9B1704F55049B256872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73D4AC74FA72F544C7EDB1DE18DC03FD4713C042BC491FD9479312F262F4EED0/0/34352e3232392e35362e302f32322d3234203d3e20323636363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:83:d4:3f:2f:f5:4c:c2:a9:69:30:1b:59:6d:f0:5a:b8:6b:
         19:53:18:b4:03:77:e2:9e:8d:ae:db:09:e4:bd:24:58:77:4f:
         69:8e:aa:f2:69:12:34:e2:da:20:f1:33:22:5d:ac:e4:8c:7a:
         3e:6f:df:80:dc:f8:0f:68:86:96:7b:6e:ac:61:c1:4c:b4:33:
         bd:da:f9:e6:9a:1e:e7:29:bf:39:e7:80:d3:4b:b2:a2:27:a9:
         dd:31:54:14:f5:b4:74:37:69:da:07:0b:10:30:b7:4b:26:1e:
         24:0d:9c:23:d9:0d:e3:46:d8:33:b4:d5:e2:da:0a:1d:5b:85:
         f6:d0:7e:62:f4:05:87:f5:9f:f5:68:ab:3d:ba:c6:e4:24:2a:
         d0:c5:26:55:5e:be:62:19:8d:6c:d9:b8:24:22:1e:03:4d:5d:
         72:cf:fb:1e:36:28:ec:4b:ce:a9:c1:3f:12:c2:82:95:b9:cf:
         6b:bc:76:1d:e1:d4:74:74:5f:b4:cb:59:21:04:c1:c8:04:64:
         ae:be:13:29:cb:49:5b:2c:80:56:1c:da:2a:cd:ca:40:f3:54:
         98:65:fb:6b:93:a8:86:fa:f6:c3:09:33:39:09:49:3c:7f:6a:
         5e:f7:3c:c6:c2:34:79:57:69:b2:a7:da:31:97:0b:81:94:5a:
         96:42:38:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:22:05 2025 by rpki-client