Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/34352e3137332e3138322e302f32332d3234203d3e20323637383237.roa
File:                     34352e3137332e3138322e302f32332d3234203d3e20323637383237.roa (raw, json)
Hash identifier:          4HtorrOW/I6X+pr+gKEt8+V/VmCquASYi32d7tPOPWI=
Subject key identifier:   3D:EF:4D:AA:22:94:4F:F2:6B:AB:FA:7D:FB:D2:89:06:1B:11:38:10
Certificate issuer:       /CN=D8F89B0675EFF23A256029EC78234AE7B97F6B52
Certificate serial:       7C3E896AA92F8BD0525FAD210D8FDB4282AFB215
Authority key identifier: D8:F8:9B:06:75:EF:F2:3A:25:60:29:EC:78:23:4A:E7:B9:7F:6B:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/34352e3137332e3138322e302f32332d3234203d3e20323637383237.roa
Signing time:             Mon 10 Feb 2025 14:09:22 +0000
ROA not before:           Mon 10 Feb 2025 14:04:22 +0000
ROA not after:            Mon 09 Feb 2026 14:09:22 +0000
asID:                     267827
IP address blocks:        45.173.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 15:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3e:89:6a:a9:2f:8b:d0:52:5f:ad:21:0d:8f:db:42:82:af:b2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F89B0675EFF23A256029EC78234AE7B97F6B52
        Validity
            Not Before: Feb 10 14:04:22 2025 GMT
            Not After : Feb  9 14:09:22 2026 GMT
        Subject: CN=3DEF4DAA22944FF26BABFA7DFBD289061B113810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3f:ab:4a:0c:3f:27:a0:db:06:08:13:10:f3:
                    d8:3d:c2:54:a0:03:98:1a:e1:76:cc:d5:24:81:cd:
                    62:bc:3d:df:ac:e5:cc:78:00:96:8f:23:36:78:c2:
                    b4:df:d8:75:59:ae:24:c1:a7:b8:e7:5d:b4:6c:27:
                    17:00:88:d3:9a:c8:d3:85:d2:88:92:20:8c:e7:1f:
                    5d:78:30:1b:f3:51:58:c5:bf:34:99:5c:00:da:b5:
                    ed:de:80:81:ad:7f:0d:cb:e1:58:13:aa:4f:c2:12:
                    80:4f:f6:f5:6c:89:33:8e:b6:06:fe:c9:87:90:d1:
                    03:ed:45:8d:86:e5:23:15:45:ac:15:20:5a:c2:03:
                    49:6c:5f:68:08:aa:33:0b:56:0a:3d:39:00:d3:51:
                    ce:a5:8a:47:95:44:aa:81:7c:cc:fb:0e:41:6e:04:
                    f5:60:0c:e2:61:83:7f:29:4b:a5:3e:f6:b1:6b:4e:
                    c9:45:8d:90:e9:7a:ae:6a:32:95:0b:b8:60:39:7f:
                    4b:be:2d:ef:e7:fc:6d:11:ef:f8:fd:87:7e:a5:53:
                    17:5d:ef:e1:e5:ac:32:53:23:54:4a:73:b4:c3:73:
                    c0:fb:cc:87:d3:20:b3:b0:43:88:cd:1d:48:79:82:
                    c6:95:f7:65:75:83:38:06:cc:3b:3e:96:22:95:34:
                    9c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EF:4D:AA:22:94:4F:F2:6B:AB:FA:7D:FB:D2:89:06:1B:11:38:10
            X509v3 Authority Key Identifier:
                keyid:D8:F8:9B:06:75:EF:F2:3A:25:60:29:EC:78:23:4A:E7:B9:7F:6B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/34352e3137332e3138322e302f32332d3234203d3e20323637383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:be:f1:e7:30:de:27:cb:77:05:20:55:d1:0c:86:ec:14:94:
         7d:fc:5c:bb:3b:96:fa:6c:e6:a8:9b:05:e6:e4:fb:48:81:e6:
         3d:c0:0e:48:15:ca:09:8b:b8:c5:a1:a2:35:1b:1a:dd:25:38:
         64:c6:b3:33:82:00:b5:28:eb:a6:18:7f:2c:c5:38:40:1d:3e:
         88:13:9e:89:6f:ed:6b:a1:85:9a:49:44:8b:60:23:e3:0b:66:
         5f:36:af:41:5e:47:23:e0:c4:91:02:d2:9c:49:ad:ff:ff:ff:
         f4:5a:66:6e:89:ea:79:8e:e2:41:e6:1f:12:97:55:65:a3:08:
         e4:f2:4b:74:92:3f:50:f6:e7:c4:9b:4e:25:0b:1e:a6:0f:02:
         4c:59:97:78:38:7c:f7:6b:e9:2f:7e:11:28:77:ce:a9:52:57:
         90:96:30:2e:65:bf:4c:45:9c:94:db:f8:72:71:c5:d6:3b:56:
         44:37:4e:64:1a:3b:5c:2a:b9:3e:aa:cd:5b:d9:20:c3:4f:4c:
         e1:88:c4:64:8c:b2:68:97:f7:ed:bd:cc:d2:b1:fc:fa:d1:98:
         63:35:8c:92:0b:b9:62:f9:c6:95:f3:d1:d9:2b:8f:65:5f:7f:
         01:22:38:4a:db:43:03:99:cc:ab:a0:af:48:68:7e:6a:0b:df:
         32:db:31:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:22:21 2025 by rpki-client