Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0343781255D8C52305E47674F87851B622E8E84FDEBDC24E36B1A6A2C63DE0/0/34352e3138322e3134322e302f32342d3234203d3e20323633323031.roa
File:                     34352e3138322e3134322e302f32342d3234203d3e20323633323031.roa (raw, json)
Hash identifier:          X53nD0Wx73glztOsbMZmqhbspyzPIc6qQGgok1FEAl0=
Subject key identifier:   6A:05:72:8C:5B:A3:82:79:14:22:C8:37:54:F1:03:6A:86:85:C8:E3
Certificate issuer:       /CN=F15C92F2D5C12CCAF83CD43DE611DC7D6257E097
Certificate serial:       42430A01BB54DA6A5B8EC61F23C2814510B3EB2A
Authority key identifier: F1:5C:92:F2:D5:C1:2C:CA:F8:3C:D4:3D:E6:11:DC:7D:62:57:E0:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F15C92F2D5C12CCAF83CD43DE611DC7D6257E097.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0343781255D8C52305E47674F87851B622E8E84FDEBDC24E36B1A6A2C63DE0/0/34352e3138322e3134322e302f32342d3234203d3e20323633323031.roa
Signing time:             Tue 04 Feb 2025 18:44:10 +0000
ROA not before:           Tue 04 Feb 2025 18:39:10 +0000
ROA not after:            Tue 03 Feb 2026 18:44:10 +0000
asID:                     263201
IP address blocks:        45.182.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0343781255D8C52305E47674F87851B622E8E84FDEBDC24E36B1A6A2C63DE0/0/F15C92F2D5C12CCAF83CD43DE611DC7D6257E097.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0343781255D8C52305E47674F87851B622E8E84FDEBDC24E36B1A6A2C63DE0/0/F15C92F2D5C12CCAF83CD43DE611DC7D6257E097.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F15C92F2D5C12CCAF83CD43DE611DC7D6257E097.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 07:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:43:0a:01:bb:54:da:6a:5b:8e:c6:1f:23:c2:81:45:10:b3:eb:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15C92F2D5C12CCAF83CD43DE611DC7D6257E097
        Validity
            Not Before: Feb  4 18:39:10 2025 GMT
            Not After : Feb  3 18:44:10 2026 GMT
        Subject: CN=6A05728C5BA382791422C83754F1036A8685C8E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:d3:6a:5b:5e:f0:b4:29:9a:f8:4e:de:f0:
                    e3:bf:9a:bf:9e:0b:6f:7a:f6:00:18:16:00:4f:d0:
                    62:9a:4e:29:a3:f9:7e:a4:0d:52:5f:c4:b3:27:ba:
                    71:71:7e:bd:a1:df:df:d8:ba:16:28:81:09:34:10:
                    87:c2:38:e7:a2:b1:35:f3:25:71:2b:e8:86:e9:99:
                    07:2f:1a:14:c7:72:72:f4:77:96:1a:85:70:87:e0:
                    f5:17:5f:b2:73:06:00:42:0a:93:ed:96:35:d0:b7:
                    4e:3b:21:3f:18:db:cf:b6:d2:c7:1a:3c:03:85:14:
                    88:52:85:9c:21:d0:e2:51:a5:11:09:e7:ab:47:94:
                    2d:06:57:e0:1f:7d:e6:96:e3:14:37:d4:69:51:3d:
                    83:ba:f7:6d:c0:42:8a:c8:24:3c:21:b6:6a:b6:a1:
                    0c:c4:de:b3:d1:c7:0b:a0:70:a0:02:1b:e5:d0:62:
                    da:58:0e:63:70:17:e8:22:ef:70:8f:4c:52:ee:75:
                    ca:17:07:d1:5d:bb:e9:77:50:fa:8c:99:6e:5e:14:
                    40:af:c1:e4:e8:15:37:49:cd:2b:8a:ef:6d:2a:b7:
                    8c:99:34:b2:4f:56:c8:42:a4:1a:80:77:d9:b3:c6:
                    5d:7c:8e:76:e3:00:49:c5:7f:ed:05:a2:6e:cc:d4:
                    80:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:05:72:8C:5B:A3:82:79:14:22:C8:37:54:F1:03:6A:86:85:C8:E3
            X509v3 Authority Key Identifier:
                keyid:F1:5C:92:F2:D5:C1:2C:CA:F8:3C:D4:3D:E6:11:DC:7D:62:57:E0:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0343781255D8C52305E47674F87851B622E8E84FDEBDC24E36B1A6A2C63DE0/0/F15C92F2D5C12CCAF83CD43DE611DC7D6257E097.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F15C92F2D5C12CCAF83CD43DE611DC7D6257E097.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0343781255D8C52305E47674F87851B622E8E84FDEBDC24E36B1A6A2C63DE0/0/34352e3138322e3134322e302f32342d3234203d3e20323633323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:f5:cc:24:45:2a:ee:3c:91:27:f2:35:e7:a6:a3:53:f3:b4:
         ca:c4:6e:2c:58:7e:78:c0:ab:ad:fd:70:b2:f6:c1:93:a3:68:
         ab:58:dc:02:6d:a2:79:67:3f:64:d6:26:38:e1:12:c6:7c:ee:
         6b:1f:c9:85:a4:8a:d5:13:d1:61:8a:53:72:d4:74:a8:42:b6:
         5b:10:6d:77:18:48:e4:84:ac:dd:52:98:13:03:94:ca:42:0e:
         da:46:70:2f:df:72:75:e3:6c:2a:8f:d2:ff:d7:6e:19:d0:f1:
         7d:90:4d:c0:ed:a7:ca:a5:7b:d6:08:f0:11:ac:83:0c:62:9e:
         1c:3e:ad:47:62:77:63:2f:e8:16:b4:20:99:fd:6c:79:98:64:
         18:9e:61:71:1d:cd:17:86:c0:5b:28:68:b6:34:b0:40:36:23:
         4d:70:1f:51:37:e9:05:e1:d7:61:f3:45:e4:dd:af:8c:4e:3c:
         25:cc:bf:4a:08:ae:23:c6:9f:7d:7e:6a:ff:5d:b8:5e:29:41:
         a0:a0:08:c9:84:b2:9e:a2:69:38:f2:b5:a3:14:fa:a9:2a:e1:
         8e:2f:d6:c4:76:24:a9:de:6e:07:41:9d:32:48:c9:40:4b:dd:
         e7:72:69:cb:9c:70:6a:39:4c:ef:11:c6:c9:96:69:fa:e0:4c:
         fa:d8:7e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:56:26 2025 by rpki-client