Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35332e302f32342d3234203d3e20323639383338.roa
File:                     34352e3232382e35332e302f32342d3234203d3e20323639383338.roa (raw, json)
Hash identifier:          8P2TP2uw5bTvD+PY7/JA6PwNAZTBBKVIO4/Gf2nFHSo=
Subject key identifier:   7A:E0:C7:9E:4D:5D:AC:71:06:D9:60:AC:3D:E8:6C:39:B1:68:89:91
Certificate issuer:       /CN=A8F348342236CEF0874883E7673551354708EDDE
Certificate serial:       337EA9951BD597AFFABE86C38389437784B3B9D9
Authority key identifier: A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35332e302f32342d3234203d3e20323639383338.roa
Signing time:             Thu 05 Dec 2024 21:00:00 +0000
ROA not before:           Thu 05 Dec 2024 20:55:00 +0000
ROA not after:            Thu 04 Dec 2025 21:00:00 +0000
asID:                     269838
IP address blocks:        45.228.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Mar 2025 17:33:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7e:a9:95:1b:d5:97:af:fa:be:86:c3:83:89:43:77:84:b3:b9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F348342236CEF0874883E7673551354708EDDE
        Validity
            Not Before: Dec  5 20:55:00 2024 GMT
            Not After : Dec  4 21:00:00 2025 GMT
        Subject: CN=7AE0C79E4D5DAC7106D960AC3DE86C39B1688991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:1a:85:88:06:32:1e:62:0f:d2:d2:f4:22:
                    77:d5:5e:62:03:3d:48:3c:1b:a7:28:c7:58:63:87:
                    36:d3:75:d7:01:3b:31:01:6b:ae:01:1e:4c:fc:3b:
                    2b:8b:b8:12:59:60:2e:fd:61:85:80:02:7d:58:83:
                    36:74:45:27:d9:32:36:90:4f:b2:53:6f:a4:90:63:
                    60:72:e4:11:77:c7:37:ac:86:a6:60:a0:59:de:92:
                    82:0c:f3:8c:ec:50:18:cc:ba:9e:a2:f2:a1:9a:60:
                    e9:9a:a8:46:4d:99:2e:b1:2c:1e:d3:d6:8d:01:8d:
                    90:40:7a:75:77:99:24:47:1c:28:5d:f7:fb:b0:5b:
                    c0:30:93:da:bd:de:35:39:71:36:ad:f7:cb:fd:a6:
                    51:13:a0:97:05:5d:ca:25:13:4f:c4:f8:90:a7:39:
                    c3:bb:e6:42:4c:24:e7:4c:fe:41:ee:e7:65:d2:66:
                    fa:9b:27:da:a0:39:ff:56:2b:85:65:85:3f:6d:12:
                    36:93:2e:35:56:99:1b:58:2a:14:10:c7:ca:5b:8a:
                    f9:57:8c:47:41:3d:10:56:23:b9:22:68:8b:b2:18:
                    4b:d1:6c:66:fc:e4:8b:dd:2d:a4:37:03:47:3d:3f:
                    8c:75:1c:1f:69:a0:6c:03:e8:c8:09:43:7d:b5:dd:
                    ee:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E0:C7:9E:4D:5D:AC:71:06:D9:60:AC:3D:E8:6C:39:B1:68:89:91
            X509v3 Authority Key Identifier:
                keyid:A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35332e302f32342d3234203d3e20323639383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:d7:19:02:3e:f1:bc:db:ac:a9:70:76:93:52:0a:2b:5a:f0:
         5e:3a:e5:72:6b:e2:7e:a6:da:a2:5d:ef:b6:bd:3a:90:46:d8:
         95:58:4e:30:99:a3:b3:cb:86:30:87:10:d2:db:86:1b:10:a1:
         4a:74:0d:ef:91:3d:e6:bf:35:6e:bf:64:f4:4b:95:3d:43:c3:
         74:9d:d9:34:d7:ed:c8:30:82:f7:53:5b:f5:c7:cf:1a:b7:dc:
         e6:6a:12:30:e4:c6:90:ae:18:b3:21:19:86:41:88:8d:6e:97:
         5c:06:37:9b:b5:9f:e4:ca:5b:41:1a:87:f2:9b:d5:94:ad:7a:
         d0:06:5a:e2:17:b3:e5:c0:a4:23:df:12:cd:df:3a:75:da:dc:
         d7:b0:47:98:34:04:63:c5:ed:ae:95:43:81:e0:3f:cf:ca:16:
         de:3a:f4:df:81:77:a4:af:d1:c7:ea:72:2a:d5:df:e8:ec:7c:
         de:7f:06:5a:3c:67:48:6b:67:3b:70:9f:a2:fc:02:58:26:24:
         e0:36:d5:a4:58:1f:3b:61:ec:ed:0d:ee:dc:67:18:0b:52:b6:
         1f:70:89:e5:35:d3:65:47:fe:ee:ff:02:1f:1d:30:79:99:17:
         ee:97:6b:69:74:95:b2:e9:da:52:e9:29:98:38:78:71:b3:33:
         b2:16:c6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 17:58:45 2025 by rpki-client