Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138332e302f32342d3234203d3e20323637373034.roa
File:                     34352e3136322e3138332e302f32342d3234203d3e20323637373034.roa (raw, json)
Hash identifier:          kyOKphWu4mJXOolnb9OYZZ6DfdZjzx55gGs8NNyJUcM=
Subject key identifier:   A1:AC:C8:B4:CA:61:ED:9A:B7:F3:E4:F6:C5:8C:35:7C:CB:7B:3A:E4
Certificate issuer:       /CN=BD9037968409387615A2867C81BDF4EE88009203
Certificate serial:       224DED19E4257489607382E84D043A008509D6A9
Authority key identifier: BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138332e302f32342d3234203d3e20323637373034.roa
Signing time:             Thu 29 May 2025 19:20:27 +0000
ROA not before:           Thu 29 May 2025 19:15:27 +0000
ROA not after:            Thu 28 May 2026 19:20:27 +0000
asID:                     267704
IP address blocks:        45.162.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4d:ed:19:e4:25:74:89:60:73:82:e8:4d:04:3a:00:85:09:d6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9037968409387615A2867C81BDF4EE88009203
        Validity
            Not Before: May 29 19:15:27 2025 GMT
            Not After : May 28 19:20:27 2026 GMT
        Subject: CN=A1ACC8B4CA61ED9AB7F3E4F6C58C357CCB7B3AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:b2:a3:83:07:19:0a:32:fe:d0:00:41:bc:
                    91:24:a3:b8:2c:4d:bc:7c:b5:1d:11:de:24:71:eb:
                    8a:37:41:55:5d:21:e8:65:00:18:28:f6:20:f4:1c:
                    b0:e9:75:34:0e:4f:8e:d1:3a:91:78:b3:b2:66:fc:
                    50:20:96:95:2e:25:f7:0b:75:92:9b:4c:e6:08:2a:
                    47:f7:2e:4a:ed:59:6f:d0:b5:b6:dd:12:7c:64:ae:
                    a8:3b:3c:29:5c:d4:75:98:1c:15:b2:a7:8c:2e:b1:
                    70:74:04:cb:85:93:dc:27:96:d4:a6:63:c5:c1:63:
                    e9:94:b9:00:e3:f2:ca:3a:3c:ac:d4:87:87:45:0a:
                    34:f9:b9:fe:13:be:5a:32:14:06:cf:3a:f0:31:ce:
                    b4:63:71:59:8b:f7:15:f5:fc:51:6d:bf:6f:7c:ce:
                    27:f9:50:aa:cb:99:aa:09:7b:a0:75:61:31:40:df:
                    71:4c:1d:55:84:ef:94:00:c6:8d:cd:49:d3:26:e9:
                    c7:a4:75:d4:02:65:d1:fd:fc:68:37:16:86:a8:07:
                    38:ad:88:77:e3:1b:dc:08:c0:6c:a5:82:a0:df:29:
                    02:11:5f:43:65:6d:80:38:95:ac:fc:cb:22:f9:01:
                    b9:18:1c:4e:46:72:db:04:53:26:ce:f2:c3:cc:a8:
                    7e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AC:C8:B4:CA:61:ED:9A:B7:F3:E4:F6:C5:8C:35:7C:CB:7B:3A:E4
            X509v3 Authority Key Identifier:
                keyid:BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138332e302f32342d3234203d3e20323637373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:71:ca:04:19:1a:bc:85:ac:57:ce:cd:60:26:34:0e:83:a7:
         c5:fe:18:f9:3d:40:e2:74:73:bb:96:98:46:f0:9c:86:d9:11:
         31:4e:04:f8:96:1d:58:67:6a:37:a4:90:a2:44:64:44:81:f1:
         67:e7:0b:66:82:e1:91:3a:0d:6e:dc:45:ee:a0:61:ad:21:09:
         4f:e8:de:7b:35:1f:cb:ef:fd:87:50:48:72:88:73:29:15:96:
         a1:bb:ed:12:43:89:fe:3f:ba:2b:cd:7a:bb:dd:6c:4c:4a:9c:
         ad:73:a0:95:85:0d:7b:2a:3f:71:1b:2d:ad:f7:64:11:ba:7e:
         83:74:12:03:7f:95:df:4f:3a:41:db:cf:d4:6d:05:dd:c2:2e:
         4e:a2:3f:0d:a5:bc:b5:5c:54:51:5e:3c:9e:ab:5b:7f:5b:39:
         6a:2c:fa:41:e5:61:71:15:19:d2:28:fd:8b:91:39:5d:98:13:
         6d:7e:14:95:cf:8d:62:d8:77:9d:67:51:1a:b5:c9:4b:a2:db:
         b9:b8:aa:01:bc:2c:44:8b:17:e2:71:ae:fe:fa:ea:33:3a:aa:
         10:d4:18:fb:eb:28:49:6d:e0:1f:03:d7:fc:10:ca:a9:e5:70:
         f5:a8:01:ce:cf:0c:1e:9b:35:fb:8b:c7:3c:60:b8:43:30:79:
         92:2b:0f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:10:35 2025 by rpki-client