Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/34352e372e3133322e302f32322d3232203d3e20323637383537.roa
File:                     34352e372e3133322e302f32322d3232203d3e20323637383537.roa (raw, json)
Hash identifier:          YX1T91khgavvwRIlitBNTLSPQFsddLobE98XyqJSi/Q=
Subject key identifier:   78:55:0E:C3:6A:FF:FA:A1:56:15:43:68:D7:42:8C:F2:7E:E7:B6:65
Certificate issuer:       /CN=04C9538FA5038299A42B9882163AF36632AD588F
Certificate serial:       7F342A3A0ACF101D7419B41BD6EF5BF2EC05BC58
Authority key identifier: 04:C9:53:8F:A5:03:82:99:A4:2B:98:82:16:3A:F3:66:32:AD:58:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04C9538FA5038299A42B9882163AF36632AD588F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/34352e372e3133322e302f32322d3232203d3e20323637383537.roa
Signing time:             Tue 04 Feb 2025 18:07:09 +0000
ROA not before:           Tue 04 Feb 2025 18:02:09 +0000
ROA not after:            Tue 03 Feb 2026 18:07:09 +0000
asID:                     267857
IP address blocks:        45.7.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/04C9538FA5038299A42B9882163AF36632AD588F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/04C9538FA5038299A42B9882163AF36632AD588F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04C9538FA5038299A42B9882163AF36632AD588F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:34:2a:3a:0a:cf:10:1d:74:19:b4:1b:d6:ef:5b:f2:ec:05:bc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C9538FA5038299A42B9882163AF36632AD588F
        Validity
            Not Before: Feb  4 18:02:09 2025 GMT
            Not After : Feb  3 18:07:09 2026 GMT
        Subject: CN=78550EC36AFFFAA156154368D7428CF27EE7B665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:55:b8:ec:22:de:a5:2f:f6:ca:f9:f8:70:
                    a1:3b:ae:ce:25:54:7f:96:4d:63:e4:fc:98:c3:e2:
                    3b:d6:8e:b0:77:2d:d3:02:09:f9:12:8e:36:7e:6d:
                    4a:7e:f3:b5:6d:ca:76:7f:c5:a1:1b:b5:11:41:d3:
                    60:04:f6:c4:54:b6:e8:e6:ab:26:8e:e1:1f:69:f0:
                    c1:50:ce:d5:71:e6:51:4c:2d:a6:61:8b:de:60:ec:
                    9f:4e:0c:1c:3e:19:62:aa:0b:54:d4:cd:95:1d:31:
                    48:39:e8:aa:0f:8c:cc:c3:ce:d2:90:13:8b:88:4e:
                    1f:6c:84:c5:08:85:f5:c7:ed:c6:b7:0a:2c:6d:b5:
                    45:5e:2d:41:4b:9b:e4:3d:7d:20:24:d6:dd:fc:a6:
                    8c:be:9e:9a:0a:06:e3:e8:9d:0f:8f:da:88:19:7d:
                    06:87:33:75:0e:0b:2e:a2:52:ab:4c:a0:5d:01:bf:
                    60:d2:12:c5:0a:09:01:7b:62:fa:ab:cb:bc:cf:b6:
                    47:33:e2:36:40:17:c6:15:32:6e:c1:c5:0a:82:5d:
                    a2:78:9b:a1:62:03:09:27:30:7a:38:41:11:d6:01:
                    e8:e4:71:bf:7d:c5:a5:2f:bc:dd:65:6e:ca:2f:f5:
                    d5:43:05:ee:62:25:ec:f3:4a:4c:e1:65:75:f0:d2:
                    7c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:55:0E:C3:6A:FF:FA:A1:56:15:43:68:D7:42:8C:F2:7E:E7:B6:65
            X509v3 Authority Key Identifier:
                keyid:04:C9:53:8F:A5:03:82:99:A4:2B:98:82:16:3A:F3:66:32:AD:58:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/04C9538FA5038299A42B9882163AF36632AD588F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04C9538FA5038299A42B9882163AF36632AD588F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/34352e372e3133322e302f32322d3232203d3e20323637383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:ce:d1:28:4c:1e:21:7a:4e:7d:68:df:f7:c4:59:5c:76:76:
         86:96:09:86:98:4a:33:60:32:75:10:ab:e3:72:ed:a8:1e:13:
         a7:b7:75:36:d1:90:11:f8:ed:f2:0f:97:b4:6b:16:fc:c2:28:
         78:23:e2:ca:c1:b3:8c:30:ea:5b:80:fc:10:e2:e3:ad:83:0e:
         94:d2:be:b0:06:d2:52:29:11:a1:0e:36:83:2f:b8:1b:40:70:
         c9:f4:64:e9:51:a8:eb:2d:19:82:bf:ca:c0:b0:c4:44:72:66:
         e1:a0:b0:62:fa:e1:b1:73:c9:5e:69:8f:12:2b:14:0d:b2:c6:
         7d:cc:5a:bd:9a:33:0e:b9:da:cb:79:fe:38:33:63:b4:17:59:
         3e:25:49:09:be:df:0b:ff:55:64:0e:a2:98:3c:d3:d8:37:be:
         a9:64:8c:7b:31:f2:e1:3f:63:18:57:7e:56:2b:4e:0d:ae:b4:
         65:ef:ad:2c:ab:60:27:9d:85:c5:9b:0d:df:eb:75:e5:97:2e:
         25:c9:ab:1b:7c:e5:6b:ce:df:17:2e:b7:0d:be:80:8e:3b:e9:
         f5:9f:bb:29:5a:f4:5a:70:db:c1:8c:a0:8d:20:7f:8d:81:62:
         7b:bc:3d:f5:75:a4:e1:5f:52:4e:a5:13:12:bc:3b:8c:28:7e:
         29:b2:a3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:55:30 2025 by rpki-client