Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/34352e3138352e3230342e302f32322d3235203d3e20323730303730.roa
File:                     34352e3138352e3230342e302f32322d3235203d3e20323730303730.roa (raw, json)
Hash identifier:          ErhQBJyUlBMuhJlb4Bf+Qt+SSONqDViPbMje1gKzDDA=
Subject key identifier:   36:1F:30:A6:4C:7B:8B:1B:6A:9F:49:21:47:25:33:06:EC:32:10:7B
Certificate issuer:       /CN=C3210E1056A6F03E5EBAE928296A603EC46256F1
Certificate serial:       18F9681B045963CD311CBF6238CCCCEA0E206FE3
Authority key identifier: C3:21:0E:10:56:A6:F0:3E:5E:BA:E9:28:29:6A:60:3E:C4:62:56:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/34352e3138352e3230342e302f32322d3235203d3e20323730303730.roa
Signing time:             Tue 04 Feb 2025 18:17:06 +0000
ROA not before:           Tue 04 Feb 2025 18:12:06 +0000
ROA not after:            Tue 03 Feb 2026 18:17:06 +0000
asID:                     270070
IP address blocks:        45.185.204.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f9:68:1b:04:59:63:cd:31:1c:bf:62:38:cc:cc:ea:0e:20:6f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3210E1056A6F03E5EBAE928296A603EC46256F1
        Validity
            Not Before: Feb  4 18:12:06 2025 GMT
            Not After : Feb  3 18:17:06 2026 GMT
        Subject: CN=361F30A64C7B8B1B6A9F492147253306EC32107B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a1:1d:08:6d:39:fa:ed:26:97:92:34:b4:b2:
                    71:aa:24:3a:f5:20:78:fd:37:69:f2:af:7a:e0:f2:
                    4d:da:fd:81:c8:c2:7f:03:1a:a2:87:cb:5a:d8:2e:
                    e1:10:a5:74:b9:85:75:81:df:a6:a0:26:40:35:ae:
                    76:0b:71:bc:d2:2c:df:89:72:92:99:39:d5:eb:22:
                    c4:0d:d3:f2:a8:91:99:57:88:bd:f5:68:f3:f6:d0:
                    23:b5:6b:1d:e2:9b:63:50:00:ec:3b:c0:73:da:6a:
                    5d:ea:f1:80:48:7e:3f:24:87:a2:31:99:80:7d:09:
                    de:16:42:53:ed:c8:7d:b7:2b:15:34:61:b0:13:9e:
                    c9:9d:a2:28:bd:dc:00:00:1b:83:83:09:32:fd:e3:
                    8e:2f:fc:96:98:17:ae:e4:5f:db:a8:82:5b:53:5b:
                    c1:8f:f0:06:8d:dd:1e:7b:3b:76:e8:02:41:a9:08:
                    ed:8c:54:75:2f:a5:42:53:f5:c4:61:f6:38:2d:f2:
                    4c:2c:9c:62:43:b2:76:20:2b:b4:4c:be:b6:ea:54:
                    c9:ee:f5:83:e7:47:46:89:84:27:45:c5:be:f7:db:
                    0b:78:94:c1:a4:43:91:0f:11:fd:8e:d1:0c:ff:04:
                    fd:6f:b3:12:de:88:b6:e6:f9:72:34:91:91:71:4a:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1F:30:A6:4C:7B:8B:1B:6A:9F:49:21:47:25:33:06:EC:32:10:7B
            X509v3 Authority Key Identifier:
                keyid:C3:21:0E:10:56:A6:F0:3E:5E:BA:E9:28:29:6A:60:3E:C4:62:56:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/34352e3138352e3230342e302f32322d3235203d3e20323730303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:6f:42:a9:df:83:14:c4:97:74:a5:0f:ad:46:16:97:e2:c8:
         f7:f5:6a:d9:39:fd:e7:cd:49:43:ae:c8:d9:d8:03:ea:05:1d:
         ec:66:df:e4:4e:1a:f5:b9:f9:d1:60:a5:b6:3d:09:fb:ba:64:
         7c:03:a7:6b:37:94:c8:82:db:be:d7:09:a4:92:81:0d:19:35:
         d7:45:b5:1a:b9:17:16:b7:fa:9e:86:bc:ce:fe:2c:b2:48:3d:
         89:6c:d4:4c:ed:98:f0:d5:42:c9:4e:12:e8:4e:62:6e:64:20:
         e4:5f:8b:86:0a:81:66:73:4a:4d:85:18:f8:2e:63:88:e7:c2:
         0d:2a:5e:8d:df:ba:ba:d6:46:6b:10:e7:af:22:f8:83:28:94:
         09:22:73:6c:ba:f1:84:1b:e4:1c:eb:c0:a3:3c:47:e1:3e:4e:
         3d:55:84:34:88:30:78:68:d5:4d:f7:3c:1c:15:82:17:0e:1d:
         d0:ac:50:a7:88:82:58:d4:12:dc:05:db:12:9f:10:6f:45:c6:
         fa:bb:39:01:f0:e5:40:f0:27:90:6d:55:ac:40:e4:e2:74:e6:
         5a:3f:6a:c4:3e:89:7b:d9:0b:54:e0:97:40:3b:0e:6a:77:61:
         ee:ab:f7:1f:c5:76:8c:d9:55:22:82:59:b8:9c:bd:34:54:1b:
         ac:1a:1d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:10:12 2025 by rpki-client