Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/34352e3136322e38392e302f32342d3234203d3e20323633323434.roa
File:                     34352e3136322e38392e302f32342d3234203d3e20323633323434.roa (raw, json)
Hash identifier:          qLKgn92Pyz7kDri8smsoul5kq00cZGFJqKwuYPi8cxs=
Subject key identifier:   5E:41:B8:44:70:3F:49:4F:73:68:E9:CC:B5:32:13:9E:9B:DC:C3:4D
Certificate issuer:       /CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC
Certificate serial:       49358BCF07FC26348277F0AEB118748F20981821
Authority key identifier: CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/34352e3136322e38392e302f32342d3234203d3e20323633323434.roa
Signing time:             Tue 04 Feb 2025 18:09:59 +0000
ROA not before:           Tue 04 Feb 2025 18:04:59 +0000
ROA not after:            Tue 03 Feb 2026 18:09:59 +0000
asID:                     263244
IP address blocks:        45.162.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 10:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:35:8b:cf:07:fc:26:34:82:77:f0:ae:b1:18:74:8f:20:98:18:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC
        Validity
            Not Before: Feb  4 18:04:59 2025 GMT
            Not After : Feb  3 18:09:59 2026 GMT
        Subject: CN=5E41B844703F494F7368E9CCB532139E9BDCC34D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:26:b9:94:c3:ea:c3:4e:47:7e:7e:d2:c0:
                    95:f9:5b:4c:cc:64:33:88:60:fa:a0:47:69:05:57:
                    c1:ba:63:19:a2:56:57:31:1c:ce:39:2f:a6:0e:8d:
                    dc:0e:22:c1:d6:70:45:28:5e:9b:04:88:83:f1:3d:
                    67:e1:ec:04:35:cb:fd:9a:fe:15:58:31:c5:47:f8:
                    9f:7e:49:5e:ae:ea:71:73:53:ed:db:69:87:bc:72:
                    a6:4c:ea:d5:ed:62:bd:f4:e8:b9:a6:a8:79:5e:d7:
                    57:9b:08:a3:8d:17:9e:c1:c8:e9:28:c7:a8:cf:c4:
                    ea:36:34:e5:06:fa:ca:b4:34:f0:e0:69:55:ed:67:
                    cd:62:57:ef:ff:8a:f0:ff:dc:16:64:87:6d:5c:fe:
                    77:d1:ab:bb:f2:cb:f6:35:a3:2d:33:a9:d3:41:b3:
                    a4:74:f7:51:12:a4:01:39:33:2a:c8:5b:8b:83:1d:
                    99:91:12:62:ea:db:1b:04:3a:8e:a7:95:54:77:a8:
                    bd:5c:b6:d5:19:c8:bf:c0:82:24:00:34:ca:0a:a0:
                    9e:a0:85:3f:db:b2:a7:fe:83:43:92:bc:4d:98:bc:
                    fe:5e:7e:dc:aa:58:70:c1:92:1d:45:d2:ac:89:e6:
                    01:5b:b2:cd:4d:ad:f0:c2:4b:5c:af:9a:6c:39:68:
                    3d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:41:B8:44:70:3F:49:4F:73:68:E9:CC:B5:32:13:9E:9B:DC:C3:4D
            X509v3 Authority Key Identifier:
                keyid:CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/34352e3136322e38392e302f32342d3234203d3e20323633323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:de:a4:c5:63:b0:a9:02:77:ab:2e:77:c7:9f:0a:27:ca:48:
         29:c4:18:3a:77:49:83:30:67:e8:2c:ff:0f:32:11:27:27:65:
         8a:59:cf:fa:7b:4b:f4:a6:2f:61:34:d5:f2:b8:5b:34:e0:88:
         cf:be:41:49:1c:e5:ec:63:6c:60:25:f9:d8:00:50:b7:51:5c:
         64:71:90:b8:fd:4d:ae:b4:9b:98:e3:96:08:44:40:68:55:19:
         29:49:85:d1:cc:99:63:6d:e0:f4:31:e1:5f:96:c7:7d:16:34:
         4b:1e:09:f1:b7:d9:14:94:b9:72:18:07:33:de:a3:5b:bc:d2:
         7b:9d:02:8b:62:ba:8d:69:c8:c5:ac:a9:ca:61:1b:1e:44:4c:
         3d:de:72:7b:de:36:31:70:1b:76:6d:2a:77:36:59:07:31:47:
         3e:88:a4:f1:9e:af:c8:39:9d:9f:1f:96:09:e0:23:7c:97:8b:
         ae:08:2e:8f:c1:13:1e:eb:c2:b1:27:57:7f:96:94:86:a6:a2:
         b5:5e:2a:5f:fc:2a:87:13:29:be:29:82:7f:e2:92:ac:1d:83:
         b2:f0:f8:b7:d8:66:bb:0e:1c:3f:ef:25:9b:98:19:2b:42:64:
         92:50:5f:6b:d3:65:82:f5:98:e0:92:b0:3f:28:12:70:b8:91:
         26:8d:86:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:29:47 2025 by rpki-client