Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/34352e3136392e3139322e302f32322d3234203d3e203532343731.roa
File:                     34352e3136392e3139322e302f32322d3234203d3e203532343731.roa (raw, json)
Hash identifier:          yCWssg3kM0Ev+3c/zkuMqmTeGANHpF7kIC5pZQXq+8w=
Subject key identifier:   09:28:56:73:3F:70:EA:8F:71:29:F2:F0:57:9D:43:2C:95:66:55:E2
Certificate issuer:       /CN=2A6C417EA637B9F50D220D62AE4762455E2FD4C7
Certificate serial:       1F8D081DA0809E59F93089CDDD17645A082A842B
Authority key identifier: 2A:6C:41:7E:A6:37:B9:F5:0D:22:0D:62:AE:47:62:45:5E:2F:D4:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/34352e3136392e3139322e302f32322d3234203d3e203532343731.roa
Signing time:             Tue 04 Feb 2025 20:04:05 +0000
ROA not before:           Tue 04 Feb 2025 19:59:05 +0000
ROA not after:            Tue 03 Feb 2026 20:04:05 +0000
asID:                     52471
IP address blocks:        45.169.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8d:08:1d:a0:80:9e:59:f9:30:89:cd:dd:17:64:5a:08:2a:84:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6C417EA637B9F50D220D62AE4762455E2FD4C7
        Validity
            Not Before: Feb  4 19:59:05 2025 GMT
            Not After : Feb  3 20:04:05 2026 GMT
        Subject: CN=092856733F70EA8F7129F2F0579D432C956655E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:47:55:0d:71:61:04:5a:4c:35:89:e3:13:
                    00:a3:eb:d4:67:2a:b7:1c:c7:e5:62:ea:42:73:13:
                    f4:5a:58:8c:cd:ea:2a:13:aa:a7:05:59:ca:5d:66:
                    31:42:0f:c0:df:0a:dd:b9:02:ca:dc:17:be:bc:fe:
                    a0:8f:31:5b:01:91:cc:e1:5c:d6:2a:93:b8:75:e5:
                    f1:39:a1:4f:16:0f:19:ca:4a:87:61:13:08:5c:40:
                    e9:73:64:6c:de:f1:1c:57:c3:6e:ae:3d:f4:1a:ed:
                    ab:0d:d4:76:2c:28:43:ad:13:a8:84:87:36:5f:92:
                    0c:ef:18:09:b7:47:62:8a:41:f2:a4:33:28:b8:9f:
                    21:6b:59:d6:a0:70:d6:5d:3f:98:11:a5:d2:cb:6f:
                    f8:98:c1:28:74:c6:e9:df:18:5b:37:b4:84:c2:af:
                    00:e1:d7:0f:8e:c3:c6:7c:5a:0f:58:b7:37:42:5f:
                    50:62:d8:9a:26:26:06:cc:df:f0:71:67:ac:63:27:
                    e7:59:60:f7:08:9f:85:89:29:8e:60:2d:78:cf:86:
                    2a:24:53:03:25:16:6e:24:7e:32:b8:07:65:44:24:
                    4b:0d:94:f7:68:ec:a8:72:7b:53:fa:14:d4:8f:87:
                    64:cc:da:68:86:29:2a:b0:05:7a:b0:ca:ae:fe:8d:
                    c3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:28:56:73:3F:70:EA:8F:71:29:F2:F0:57:9D:43:2C:95:66:55:E2
            X509v3 Authority Key Identifier:
                keyid:2A:6C:41:7E:A6:37:B9:F5:0D:22:0D:62:AE:47:62:45:5E:2F:D4:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/34352e3136392e3139322e302f32322d3234203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:fc:82:e0:98:da:1e:0e:07:ab:18:98:60:f1:e6:aa:9c:c1:
         52:39:04:e8:d4:ee:de:60:3b:78:32:5a:d7:56:40:2d:7f:a4:
         22:dd:e6:8f:99:e3:7d:9a:b8:18:38:74:42:67:3c:6b:ac:a1:
         f2:46:6e:7b:db:ef:ce:60:b3:2a:f2:b1:9a:9b:71:5d:e3:ed:
         5f:12:a6:33:2e:63:65:89:80:20:59:59:d8:4c:7a:9f:e6:e8:
         1f:df:e4:ff:4b:6d:1a:0f:55:3d:c0:a7:85:48:0f:a5:83:52:
         80:3c:ab:aa:32:a7:75:2d:d9:2a:f8:c5:38:bc:b9:56:37:cf:
         f5:38:b7:89:82:8b:59:d1:0a:c8:54:af:56:32:d4:7e:67:87:
         e7:28:bb:4a:98:18:2b:99:18:45:95:5a:a2:d3:e8:ec:e8:13:
         d5:0e:ff:cf:74:ac:08:c2:61:27:7c:d4:75:a2:99:1e:6c:90:
         f0:50:d1:bd:69:42:69:18:f2:28:fe:c5:f2:6d:47:e5:c1:c3:
         ee:63:08:6d:63:af:11:68:15:35:11:c3:e4:44:18:38:6b:b7:
         98:79:f7:83:0c:f3:10:eb:66:ce:14:6a:ee:c5:8f:09:23:d3:
         4d:28:fd:3d:87:5f:dd:8d:8c:c2:2a:65:3f:a5:4b:b9:f7:4b:
         e7:33:36:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:06 2025 by rpki-client