Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F794A9683525C23BA3D3EB6CCD9E8256972DCD2B67BE2258E37F0315C003E4D/0/34352e3233372e3138342e302f32332d3234203d3e20323636383238.roa
File:                     34352e3233372e3138342e302f32332d3234203d3e20323636383238.roa (raw, json)
Hash identifier:          DFZb7XHFhhsRhBULPtWW4XnSoCfHyS4QR1aJ/rCNJjY=
Subject key identifier:   44:6C:D8:CE:F7:BE:D4:19:C8:54:E8:58:11:57:0A:95:D8:F8:12:EE
Certificate issuer:       /CN=283E39ACDA61098B187783EF95225FD4C9135441
Certificate serial:       2CB655B6B44B643C6DABE70ED9E86CC962EFC06D
Authority key identifier: 28:3E:39:AC:DA:61:09:8B:18:77:83:EF:95:22:5F:D4:C9:13:54:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/283E39ACDA61098B187783EF95225FD4C9135441.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F794A9683525C23BA3D3EB6CCD9E8256972DCD2B67BE2258E37F0315C003E4D/0/34352e3233372e3138342e302f32332d3234203d3e20323636383238.roa
Signing time:             Fri 06 Jun 2025 17:21:11 +0000
ROA not before:           Fri 06 Jun 2025 17:16:11 +0000
ROA not after:            Fri 05 Jun 2026 17:21:11 +0000
asID:                     266828
IP address blocks:        45.237.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F794A9683525C23BA3D3EB6CCD9E8256972DCD2B67BE2258E37F0315C003E4D/0/283E39ACDA61098B187783EF95225FD4C9135441.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F794A9683525C23BA3D3EB6CCD9E8256972DCD2B67BE2258E37F0315C003E4D/0/283E39ACDA61098B187783EF95225FD4C9135441.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/283E39ACDA61098B187783EF95225FD4C9135441.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 07:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b6:55:b6:b4:4b:64:3c:6d:ab:e7:0e:d9:e8:6c:c9:62:ef:c0:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=283E39ACDA61098B187783EF95225FD4C9135441
        Validity
            Not Before: Jun  6 17:16:11 2025 GMT
            Not After : Jun  5 17:21:11 2026 GMT
        Subject: CN=446CD8CEF7BED419C854E85811570A95D8F812EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7f:22:f3:03:67:bd:8d:ad:c2:f2:62:a7:7f:
                    9f:ac:c0:9e:dc:c5:d6:e6:6c:f0:b8:a1:40:bd:d5:
                    b1:38:1f:80:20:d4:68:2c:0d:73:8a:a5:13:68:af:
                    52:2f:00:34:34:14:42:0b:79:41:af:6a:02:7f:a9:
                    3f:5c:49:da:c7:92:1c:0d:ee:42:18:8f:86:ae:33:
                    6d:11:f8:d2:8d:1f:9f:77:19:13:d6:b5:ad:44:47:
                    8c:07:7a:ae:63:aa:27:c9:32:1f:cb:b8:31:c4:97:
                    2f:2b:b3:b3:0f:da:a7:2e:01:d0:d8:4e:3a:be:fe:
                    e0:35:59:64:79:fc:b3:37:a8:5e:a5:b2:1e:a7:19:
                    bd:14:7e:39:8f:18:12:2b:a0:54:4b:27:79:20:57:
                    b4:1a:91:f1:37:18:3c:34:8e:f4:0e:60:72:9f:3b:
                    9b:b4:71:ce:8d:98:f6:8d:d6:b6:93:ca:01:36:8a:
                    d0:0f:d4:8e:f0:ae:bd:1c:9b:09:61:47:83:fe:f6:
                    b6:81:f6:9d:85:22:ae:fd:de:ac:02:b8:c6:cc:94:
                    64:f5:a2:5a:6f:ee:5b:79:0a:bd:ab:c6:6b:7e:be:
                    5f:a7:18:aa:40:16:bf:f1:08:64:89:cb:29:72:30:
                    34:00:82:ab:f2:06:ba:27:5c:00:dc:f0:77:eb:04:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6C:D8:CE:F7:BE:D4:19:C8:54:E8:58:11:57:0A:95:D8:F8:12:EE
            X509v3 Authority Key Identifier:
                keyid:28:3E:39:AC:DA:61:09:8B:18:77:83:EF:95:22:5F:D4:C9:13:54:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F794A9683525C23BA3D3EB6CCD9E8256972DCD2B67BE2258E37F0315C003E4D/0/283E39ACDA61098B187783EF95225FD4C9135441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/283E39ACDA61098B187783EF95225FD4C9135441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F794A9683525C23BA3D3EB6CCD9E8256972DCD2B67BE2258E37F0315C003E4D/0/34352e3233372e3138342e302f32332d3234203d3e20323636383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:07:79:3c:e5:2a:07:0b:e6:e6:3c:bd:3b:c3:0d:a9:da:1c:
         03:77:47:60:e5:84:75:b3:8d:12:27:f6:02:bd:07:a3:c6:91:
         36:84:e5:d0:95:bb:33:d3:fb:df:6a:b6:a6:d1:c8:33:b2:85:
         b6:7d:bc:c9:ea:7b:86:03:3c:c2:32:82:e3:9c:ac:79:d2:0e:
         4b:ff:80:1f:ab:f9:cc:41:4c:c1:0a:ea:e4:4f:d0:34:64:b1:
         80:a8:6e:f5:6b:52:98:44:73:4c:95:20:3b:be:12:79:9a:a1:
         49:f9:9b:cf:17:b3:4e:9e:05:c0:e3:66:ac:44:33:92:96:24:
         76:c5:0e:90:60:e7:80:be:d1:9b:24:5c:24:5e:21:9c:e2:63:
         84:4c:84:a1:1f:88:1a:12:e5:b2:5c:4c:e9:46:34:e0:f0:eb:
         fb:8c:4b:c6:ee:a1:f4:d0:2b:4d:61:c5:cf:84:b6:65:3a:f8:
         84:2a:74:3e:b2:ef:07:fe:22:dd:38:0a:9c:8a:64:a7:a8:71:
         88:d7:e1:33:8f:d1:ac:f1:ce:63:2b:c3:08:fc:50:3e:9c:ae:
         63:d3:74:e9:66:81:2c:5b:14:c2:e8:cc:9f:d8:1d:db:c7:aa:
         f4:7e:9a:62:46:c1:30:27:8f:65:38:73:fc:73:9a:38:6f:e4:
         17:bb:20:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:04:05 2025 by rpki-client