Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/755BB8ACB1385B9A0D39210AE1D35DD48A53B47DAF1C0F262B517284238F35C4/0/34352e3138372e38382e302f32342d3234203d3e20323639383631.roa
File:                     34352e3138372e38382e302f32342d3234203d3e20323639383631.roa (raw, json)
Hash identifier:          oe0Pt2Q7eYn77StM+N7PSZ3Zga1eUKSF/Ff2/0uYM6Q=
Subject key identifier:   0B:13:E8:66:A3:BC:22:9E:86:4C:B9:A5:BA:4D:4A:25:68:0E:D7:D3
Certificate issuer:       /CN=195615E1EE8472516BA90E14851EB900E8802074
Certificate serial:       264B50097063CB3A716BF4B6DD26843F52D20C61
Authority key identifier: 19:56:15:E1:EE:84:72:51:6B:A9:0E:14:85:1E:B9:00:E8:80:20:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/195615E1EE8472516BA90E14851EB900E8802074.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/755BB8ACB1385B9A0D39210AE1D35DD48A53B47DAF1C0F262B517284238F35C4/0/34352e3138372e38382e302f32342d3234203d3e20323639383631.roa
Signing time:             Tue 04 Feb 2025 18:50:23 +0000
ROA not before:           Tue 04 Feb 2025 18:45:23 +0000
ROA not after:            Tue 03 Feb 2026 18:50:23 +0000
asID:                     269861
IP address blocks:        45.187.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/755BB8ACB1385B9A0D39210AE1D35DD48A53B47DAF1C0F262B517284238F35C4/0/195615E1EE8472516BA90E14851EB900E8802074.crl
                          rsync://repository.lacnic.net/rpki/lacnic/755BB8ACB1385B9A0D39210AE1D35DD48A53B47DAF1C0F262B517284238F35C4/0/195615E1EE8472516BA90E14851EB900E8802074.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/195615E1EE8472516BA90E14851EB900E8802074.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4b:50:09:70:63:cb:3a:71:6b:f4:b6:dd:26:84:3f:52:d2:0c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195615E1EE8472516BA90E14851EB900E8802074
        Validity
            Not Before: Feb  4 18:45:23 2025 GMT
            Not After : Feb  3 18:50:23 2026 GMT
        Subject: CN=0B13E866A3BC229E864CB9A5BA4D4A25680ED7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:86:96:97:5e:b7:bb:20:d0:0e:5e:1d:ba:38:
                    9e:e2:ad:fc:9d:6b:47:09:e3:89:3a:10:4d:20:7c:
                    58:e1:41:16:35:cf:ce:4c:7f:97:a7:15:8d:b1:7d:
                    3b:06:74:ba:22:71:ed:28:16:14:fb:fa:81:d6:7c:
                    4e:a9:2c:b3:a9:69:4d:4b:60:36:a8:4f:88:b5:7a:
                    c7:f5:bd:56:1e:2f:8e:00:50:c4:67:9d:d0:65:a1:
                    91:7c:d1:9d:80:03:7d:8d:04:0b:5b:a0:17:c0:1e:
                    d0:86:3a:b1:7b:72:da:b2:b2:8d:86:3d:52:0c:f3:
                    9e:c9:46:56:85:61:c5:be:13:9b:4d:91:fb:3b:49:
                    c7:8b:fe:48:04:2f:fe:5e:cf:ee:c8:cb:09:a3:24:
                    ea:4c:0a:3e:ed:8a:6c:62:67:3a:cb:47:ad:97:ac:
                    ed:47:66:a8:77:ee:25:d6:b0:fb:f7:53:e8:19:67:
                    6d:5e:91:b2:0d:c3:a5:24:dc:42:6c:85:2d:c7:26:
                    ad:76:64:7b:c0:92:ee:c0:f8:54:a1:7e:b3:01:f5:
                    63:02:7e:6c:22:fb:57:9a:34:2b:ae:a4:c8:73:f9:
                    3d:b5:ea:7a:c1:e9:3d:e5:22:4a:4b:1a:57:9e:29:
                    ea:ea:ee:73:56:f7:6e:91:d2:16:3d:04:fb:41:78:
                    de:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:13:E8:66:A3:BC:22:9E:86:4C:B9:A5:BA:4D:4A:25:68:0E:D7:D3
            X509v3 Authority Key Identifier:
                keyid:19:56:15:E1:EE:84:72:51:6B:A9:0E:14:85:1E:B9:00:E8:80:20:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/755BB8ACB1385B9A0D39210AE1D35DD48A53B47DAF1C0F262B517284238F35C4/0/195615E1EE8472516BA90E14851EB900E8802074.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/195615E1EE8472516BA90E14851EB900E8802074.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/755BB8ACB1385B9A0D39210AE1D35DD48A53B47DAF1C0F262B517284238F35C4/0/34352e3138372e38382e302f32342d3234203d3e20323639383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:ef:ef:e6:21:9f:ee:98:e9:e9:d3:da:b0:b0:d6:46:4d:c6:
         52:b8:e8:f4:90:f5:6a:ef:af:7f:3f:2e:f4:ee:f4:3c:0c:cc:
         d5:7e:39:a9:af:2e:18:7d:f4:f6:16:2a:2d:d9:e7:be:d3:8e:
         1d:d0:93:e3:95:ea:67:26:7a:7f:fa:19:b1:5e:17:b9:03:33:
         72:b3:b1:39:08:7d:ed:9b:28:10:ac:4b:b7:65:d7:b9:ba:3f:
         72:d1:22:9a:8e:55:4a:99:e8:08:65:1d:d6:8a:7d:7d:5e:f6:
         95:a0:94:32:4a:90:ba:ed:a5:65:c6:85:24:06:eb:83:b4:b4:
         04:9c:a1:1b:2e:59:3c:91:30:a9:e0:f3:a0:80:da:87:0c:e4:
         0b:dc:2a:bf:b9:29:af:73:d9:07:68:16:64:fa:35:4c:9b:dc:
         58:4e:a8:20:48:1b:5b:5b:37:87:92:36:69:c8:6d:6a:f8:8b:
         0e:65:08:79:8f:1a:b1:ac:49:41:55:24:05:17:8e:ea:d7:95:
         9c:e7:1d:e9:14:74:c1:f1:3c:1e:9c:6e:a2:fd:78:a0:4c:1b:
         38:1b:35:ea:c4:1d:10:12:be:73:33:f9:be:f0:42:f6:69:99:
         23:04:18:60:14:37:62:fc:1c:7d:ff:8f:6e:1a:3a:eb:e2:4b:
         97:da:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:26:58 2025 by rpki-client