Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230312e302f32342d3234203d3e20323636383834.roa
File:                     34352e3136302e3230312e302f32342d3234203d3e20323636383834.roa (raw, json)
Hash identifier:          r9qoTXS4P/UF5C7L4DilGTBMU1vqPmN4JkObMwByVSY=
Subject key identifier:   3D:9C:0B:F8:5E:58:34:36:06:78:F6:88:C0:13:5A:74:9C:D6:CF:6C
Certificate issuer:       /CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
Certificate serial:       2015F54843D2254CE1F3AF785FC2FEC8D13FA26F
Authority key identifier: 87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230312e302f32342d3234203d3e20323636383834.roa
Signing time:             Tue 04 Feb 2025 18:27:27 +0000
ROA not before:           Tue 04 Feb 2025 18:22:27 +0000
ROA not after:            Tue 03 Feb 2026 18:27:27 +0000
asID:                     266884
IP address blocks:        45.160.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 11:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:15:f5:48:43:d2:25:4c:e1:f3:af:78:5f:c2:fe:c8:d1:3f:a2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
        Validity
            Not Before: Feb  4 18:22:27 2025 GMT
            Not After : Feb  3 18:27:27 2026 GMT
        Subject: CN=3D9C0BF85E5834360678F688C0135A749CD6CF6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:5e:fd:5e:74:e5:3f:b8:30:be:75:98:c6:
                    a0:2f:5b:80:c8:a1:5c:09:a6:f0:5f:f5:d4:8e:52:
                    e1:72:8e:13:e4:ff:d3:b6:e5:55:51:1c:8c:5f:9d:
                    52:6f:fd:03:95:ed:ed:55:30:05:28:73:7f:9c:9a:
                    48:83:bf:02:c7:f1:99:2b:14:f9:82:96:42:fd:1b:
                    28:86:e2:e8:b5:cd:c5:19:2e:d2:44:bb:39:bb:46:
                    fd:12:ef:6a:6a:6c:49:28:4a:fb:7e:72:b5:74:52:
                    37:ad:00:21:fc:3b:0e:8b:4c:07:fe:49:18:66:c6:
                    3b:7b:e3:b1:e8:b2:06:69:85:22:0f:ca:c2:1f:e9:
                    6b:af:5a:62:1f:0a:c7:cd:a8:61:f8:b9:0e:f7:49:
                    90:d4:c6:11:ba:48:45:52:a5:89:9a:18:24:fa:38:
                    93:3d:41:7f:93:bc:38:08:9d:21:7f:ba:13:2c:1b:
                    fc:76:ce:ea:79:83:8d:8d:65:af:10:7b:b1:e2:12:
                    27:96:b9:75:74:75:e8:7f:0f:54:1e:d5:65:7e:cd:
                    a3:e8:e9:1e:80:1b:6d:cf:97:5b:ae:cb:59:27:76:
                    a8:fa:d7:21:e7:c1:46:21:84:5f:4b:a0:ef:91:6d:
                    dc:d6:1c:2f:f4:09:bc:8a:ef:fc:d9:a8:33:f3:ae:
                    30:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9C:0B:F8:5E:58:34:36:06:78:F6:88:C0:13:5A:74:9C:D6:CF:6C
            X509v3 Authority Key Identifier:
                keyid:87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230312e302f32342d3234203d3e20323636383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:40:27:ce:6a:6c:bb:3e:6b:06:86:20:b0:2b:ec:50:8a:dc:
         5a:31:6e:b7:0c:0f:4d:c7:4c:81:ee:76:d3:f0:ec:bf:36:13:
         30:44:be:46:98:86:a4:1a:0c:3a:98:93:16:7d:8d:aa:37:0f:
         a4:11:35:f0:61:76:2d:d1:88:d5:7b:24:4d:49:74:d8:a9:ba:
         de:7b:0f:cd:64:b1:fd:33:c8:21:45:0f:a6:d0:0b:c4:92:12:
         41:7b:ed:9e:5f:7d:67:f7:00:34:45:88:92:d6:69:b9:4f:48:
         f4:1c:69:cd:38:f8:ce:82:0d:eb:d1:a4:22:13:01:95:42:b7:
         2f:5e:47:a7:61:ce:78:e4:2c:eb:4d:5f:3a:7d:3a:2c:64:85:
         df:e6:73:9c:f4:33:56:50:05:26:d9:9e:0f:a3:53:e9:63:73:
         b3:71:db:82:6c:db:92:95:c9:a3:4c:ca:55:d9:05:fa:00:98:
         8f:75:fe:df:c6:84:9d:1e:2c:67:5f:dc:04:a8:d8:c5:61:96:
         b5:3f:ca:a5:6e:69:d7:db:c4:79:30:62:d0:37:4f:03:f9:79:
         b6:0b:7c:1a:9d:18:29:85:90:74:ed:5b:5e:c7:71:b2:35:2d:
         7c:ee:b5:ac:55:ec:30:6f:71:65:67:09:eb:35:14:69:92:a3:
         a1:27:f2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:01 2025 by rpki-client