Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/34352e3232362e3130302e302f32322d3234203d3e203532333237.roa
File:                     34352e3232362e3130302e302f32322d3234203d3e203532333237.roa (raw, json)
Hash identifier:          /ME+uQ1z27n2/VO0vv/9NL/Qq69VVcMoQ59LloHsPCQ=
Subject key identifier:   A5:BF:34:4D:C6:8C:54:16:5F:06:EA:79:5F:B4:B2:63:36:2B:BD:FD
Certificate issuer:       /CN=AF4EF7300DCD3572D25AD9FC9E1544193AD7F414
Certificate serial:       5756264977F6708F69305320BDA03052C917E639
Authority key identifier: AF:4E:F7:30:0D:CD:35:72:D2:5A:D9:FC:9E:15:44:19:3A:D7:F4:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/34352e3232362e3130302e302f32322d3234203d3e203532333237.roa
Signing time:             Tue 04 Feb 2025 18:09:27 +0000
ROA not before:           Tue 04 Feb 2025 18:04:27 +0000
ROA not after:            Tue 03 Feb 2026 18:09:27 +0000
asID:                     52327
IP address blocks:        45.226.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.crl
                          rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Mar 2025 05:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:56:26:49:77:f6:70:8f:69:30:53:20:bd:a0:30:52:c9:17:e6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4EF7300DCD3572D25AD9FC9E1544193AD7F414
        Validity
            Not Before: Feb  4 18:04:27 2025 GMT
            Not After : Feb  3 18:09:27 2026 GMT
        Subject: CN=A5BF344DC68C54165F06EA795FB4B263362BBDFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7d:25:d9:4e:fa:12:db:e1:05:fe:ba:ce:44:
                    f5:fd:85:fe:e9:b2:8a:70:7a:35:7d:f7:2c:eb:25:
                    06:a2:04:03:39:19:dd:50:fd:0d:25:26:f0:e5:34:
                    57:aa:b0:a9:01:bb:84:93:18:15:fe:ba:dd:28:88:
                    20:4a:26:f0:e0:de:0c:0f:18:74:1b:2d:f0:5d:fe:
                    6d:95:4f:13:48:ed:7c:a9:b7:ab:38:d6:51:da:2b:
                    fb:68:6b:25:fa:5e:3f:3f:75:23:59:c9:12:76:db:
                    dc:e2:71:b2:c3:58:62:06:30:e3:02:77:1e:b0:b3:
                    8a:00:a9:78:ab:2a:f5:05:a6:9e:45:13:d6:14:9f:
                    b9:b1:18:c1:2d:ad:a7:59:7a:a1:fa:a5:a5:1b:c4:
                    31:94:76:ff:5d:46:26:3a:a0:69:8a:ba:54:94:40:
                    8b:fa:1b:86:be:f3:72:ca:25:c3:23:07:52:f6:37:
                    6b:ba:05:2f:9f:58:48:38:90:e4:de:58:01:4e:a7:
                    22:2d:3d:b4:6c:f1:e6:6a:2a:83:7d:f6:88:5c:74:
                    d5:ae:a1:40:91:b7:6a:40:af:af:77:f1:b7:77:9b:
                    55:e4:2a:f4:3a:ad:97:62:f0:71:92:f3:80:81:40:
                    44:81:8e:d9:1a:31:2a:f1:80:d3:ff:b8:43:47:00:
                    4a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BF:34:4D:C6:8C:54:16:5F:06:EA:79:5F:B4:B2:63:36:2B:BD:FD
            X509v3 Authority Key Identifier:
                keyid:AF:4E:F7:30:0D:CD:35:72:D2:5A:D9:FC:9E:15:44:19:3A:D7:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/34352e3232362e3130302e302f32322d3234203d3e203532333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:cf:10:9a:d2:c3:42:65:ff:6e:e8:12:66:02:39:9d:24:d2:
         0a:ee:0a:2d:9c:e1:c7:5a:9b:52:e4:49:19:ff:5e:3f:9e:09:
         51:e0:25:01:eb:15:f8:e7:36:70:88:f3:5f:4d:b3:b0:e8:79:
         64:d5:54:e3:13:db:7d:17:47:88:7f:9d:28:84:a4:b7:74:a2:
         b2:42:3e:56:54:7f:82:4c:75:f1:29:38:96:f7:bd:c5:ed:59:
         10:30:28:f2:83:03:ec:8c:9f:05:af:54:cc:2f:b2:e4:2d:4b:
         05:10:25:4f:19:45:fa:6f:23:fb:a3:c9:86:da:f9:3c:68:d2:
         4c:03:08:8e:b3:43:82:a0:0f:63:a9:0a:3c:3a:c1:c7:81:a8:
         f9:38:4d:a8:aa:50:94:2b:f2:40:32:83:c8:f2:46:15:00:eb:
         75:0a:17:75:d4:44:57:ec:2d:a2:52:aa:f2:7a:a9:3d:42:9d:
         ab:fa:6b:e9:b5:5a:c0:bb:30:2f:77:dc:c9:a6:3a:aa:da:b1:
         82:36:9b:fc:2b:f2:16:57:49:1d:6e:25:89:05:be:0b:64:77:
         65:e1:7c:97:d2:40:b1:c8:8d:66:ad:dc:b1:c9:ef:7b:60:e7:
         3a:9e:37:d7:be:f6:b3:1d:73:4d:db:e6:0c:14:e7:1a:08:d4:
         f1:98:d1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:20:59 2025 by rpki-client