Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/34352e3136312e3131322e302f32322d3232203d3e20323636383931.roa
File:                     34352e3136312e3131322e302f32322d3232203d3e20323636383931.roa (raw, json)
Hash identifier:          netfN5tESrth7iuOpKywLVO/o9xazCY6bcxpz/dKIoM=
Subject key identifier:   EC:56:2E:00:70:04:2A:CD:CF:52:EA:D9:0A:54:F0:67:5E:E9:BA:54
Certificate issuer:       /CN=C556AA3CC16346423FD48947E61ED84B443C6BD6
Certificate serial:       5FD7A30FEABCA53BD591B5A8083B4EE103A4D074
Authority key identifier: C5:56:AA:3C:C1:63:46:42:3F:D4:89:47:E6:1E:D8:4B:44:3C:6B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/34352e3136312e3131322e302f32322d3232203d3e20323636383931.roa
Signing time:             Tue 04 Feb 2025 18:35:52 +0000
ROA not before:           Tue 04 Feb 2025 18:30:52 +0000
ROA not after:            Tue 03 Feb 2026 18:35:52 +0000
asID:                     266891
IP address blocks:        45.161.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d7:a3:0f:ea:bc:a5:3b:d5:91:b5:a8:08:3b:4e:e1:03:a4:d0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C556AA3CC16346423FD48947E61ED84B443C6BD6
        Validity
            Not Before: Feb  4 18:30:52 2025 GMT
            Not After : Feb  3 18:35:52 2026 GMT
        Subject: CN=EC562E0070042ACDCF52EAD90A54F0675EE9BA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:92:6f:d1:61:68:6d:67:bf:12:18:15:a8:ae:
                    7f:b4:4c:bc:40:94:bb:cd:c1:ca:c1:b4:67:0a:ca:
                    94:96:41:93:aa:94:ec:8e:3e:7c:3a:e6:22:db:cd:
                    22:14:81:94:33:61:6b:fb:e8:d5:ea:26:98:48:e3:
                    b4:09:56:ac:80:ce:50:b1:54:b0:7e:be:de:32:9e:
                    c9:36:f3:d6:47:8c:da:47:29:4b:4e:b6:34:32:12:
                    d9:9d:36:e2:4b:ea:fc:64:54:68:d4:c9:68:af:d4:
                    7f:4b:1a:5e:61:4f:91:de:20:97:4a:72:48:10:ec:
                    70:4d:92:16:af:c0:e4:41:44:bc:68:8e:d1:7d:3f:
                    bc:b3:ba:2f:97:54:48:5a:1a:b7:3b:45:92:7f:50:
                    ef:6e:c3:b2:1b:04:6f:c9:49:1b:ff:0b:7f:d6:15:
                    db:46:5a:b7:63:ca:1e:ac:12:59:99:b1:f1:14:80:
                    29:97:6b:3f:7d:ca:e4:35:9e:2d:29:80:f9:69:67:
                    e3:d6:13:8c:35:9b:09:04:85:76:89:cc:d5:e8:d0:
                    ff:fb:84:95:4f:98:7c:b4:6e:f4:71:98:7a:0d:be:
                    b9:11:08:1c:3a:3d:44:19:19:48:99:bf:e9:e0:4b:
                    a2:09:f0:9b:38:6d:78:f4:13:ea:7f:fb:5f:04:eb:
                    f1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:56:2E:00:70:04:2A:CD:CF:52:EA:D9:0A:54:F0:67:5E:E9:BA:54
            X509v3 Authority Key Identifier:
                keyid:C5:56:AA:3C:C1:63:46:42:3F:D4:89:47:E6:1E:D8:4B:44:3C:6B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C556AA3CC16346423FD48947E61ED84B443C6BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E42CBA476FC29B5B2D6EFD2BD6FC7783B45E1DE3AF8CA0321FCB343A6CDF7B8/0/34352e3136312e3131322e302f32322d3232203d3e20323636383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:53:d5:32:ff:da:53:25:c2:23:d1:92:d4:60:2e:98:24:9a:
         cb:1c:75:a7:6b:d1:65:99:a0:49:79:00:08:ad:b8:b0:45:83:
         30:0d:55:8b:79:08:aa:6a:c9:ba:3f:44:72:ef:12:b3:e5:5c:
         1e:00:f5:32:17:bb:8d:f3:84:86:5f:de:8c:b9:6f:73:3e:34:
         51:9a:bc:5f:69:14:1b:b6:f9:00:f1:82:2c:c0:73:ae:8c:1e:
         e7:d1:00:52:59:8b:a2:87:e5:72:0d:87:e7:fd:da:09:90:bd:
         c6:e4:48:5c:59:1b:23:9b:de:2d:eb:14:6a:83:f2:0f:24:c5:
         d6:96:17:8f:f7:4a:a6:c6:1a:2b:91:6a:67:3a:57:8b:c9:97:
         ff:ca:2d:fe:7c:d7:84:6d:c5:68:1d:89:a1:f8:18:b8:42:e4:
         fe:22:37:4b:86:f3:6d:a3:64:fc:a7:89:44:7a:3d:27:2a:46:
         d9:30:3a:d4:c3:45:9f:fc:ad:76:d0:c4:a3:c0:f8:96:40:5a:
         0c:73:d5:65:6e:b7:c4:96:50:aa:f8:1c:1a:e5:b0:6c:76:2e:
         e7:ec:a1:1f:05:f0:e1:17:4b:d2:de:3c:33:fb:d9:49:e8:22:
         81:75:b5:d8:13:16:5f:3c:8a:28:0f:f0:00:67:ce:28:64:d5:
         3c:7b:77:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:23:18 2025 by rpki-client