Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/34352e3138322e3131322e302f32322d3234203d3e20323639373835.roa
File:                     34352e3138322e3131322e302f32322d3234203d3e20323639373835.roa (raw, json)
Hash identifier:          zEb3jjIfnnTjoljOpMLq3++gBtK7Qz/MfG3ueA4riCA=
Subject key identifier:   D0:F5:11:65:B6:BB:49:A4:0A:DE:11:80:D1:82:DC:1F:44:A0:86:8A
Certificate issuer:       /CN=C73F4086487CA38B0D5EEE670B20804A270AA478
Certificate serial:       7978AAEF4332B57F7E0EB61AB8753E5552A0614D
Authority key identifier: C7:3F:40:86:48:7C:A3:8B:0D:5E:EE:67:0B:20:80:4A:27:0A:A4:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73F4086487CA38B0D5EEE670B20804A270AA478.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/34352e3138322e3131322e302f32322d3234203d3e20323639373835.roa
Signing time:             Tue 04 Feb 2025 18:02:16 +0000
ROA not before:           Tue 04 Feb 2025 17:57:16 +0000
ROA not after:            Tue 03 Feb 2026 18:02:16 +0000
asID:                     269785
IP address blocks:        45.182.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/C73F4086487CA38B0D5EEE670B20804A270AA478.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/C73F4086487CA38B0D5EEE670B20804A270AA478.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73F4086487CA38B0D5EEE670B20804A270AA478.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 10:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:78:aa:ef:43:32:b5:7f:7e:0e:b6:1a:b8:75:3e:55:52:a0:61:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C73F4086487CA38B0D5EEE670B20804A270AA478
        Validity
            Not Before: Feb  4 17:57:16 2025 GMT
            Not After : Feb  3 18:02:16 2026 GMT
        Subject: CN=D0F51165B6BB49A40ADE1180D182DC1F44A0868A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:ae:36:7a:ae:42:d1:d1:ee:ef:39:19:aa:
                    a7:e7:63:f3:71:51:5d:ce:1c:49:92:e3:7f:91:62:
                    76:a0:8e:e3:67:3f:a8:8e:fe:21:0c:a2:d9:2e:2c:
                    7b:26:b4:7e:47:98:aa:86:5d:70:f6:83:2d:5a:34:
                    8a:ef:62:f5:95:b7:53:7c:b4:bb:fe:72:3a:09:35:
                    d4:99:65:87:74:4e:c4:b7:88:e3:28:50:79:74:85:
                    34:63:6b:ae:d1:3b:b3:90:5b:d3:51:e4:20:0c:94:
                    8e:6b:50:cf:4e:38:7f:06:5f:e7:51:43:74:08:18:
                    fc:c7:31:6d:92:49:01:54:db:d2:67:5b:74:a3:5d:
                    8d:e8:ab:17:40:8e:28:5c:c1:0a:89:39:0b:73:a9:
                    c5:20:3d:13:68:6b:02:cc:23:cb:24:ee:6b:36:40:
                    1c:98:22:97:b5:d5:19:0e:e5:32:fd:d0:91:3f:cd:
                    23:9c:2f:5f:4c:10:66:ab:54:85:4a:f5:5e:a9:43:
                    46:c8:2e:13:a1:1d:71:41:eb:96:8f:22:3c:88:a1:
                    d6:bb:b1:de:bb:05:5d:4e:5b:ee:be:8c:4e:bc:4c:
                    5e:1a:bd:3d:0b:8d:69:07:d5:05:89:a7:3c:6f:06:
                    aa:15:07:f8:10:02:f1:82:07:b7:48:85:63:2d:3a:
                    1e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F5:11:65:B6:BB:49:A4:0A:DE:11:80:D1:82:DC:1F:44:A0:86:8A
            X509v3 Authority Key Identifier:
                keyid:C7:3F:40:86:48:7C:A3:8B:0D:5E:EE:67:0B:20:80:4A:27:0A:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/C73F4086487CA38B0D5EEE670B20804A270AA478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73F4086487CA38B0D5EEE670B20804A270AA478.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/34352e3138322e3131322e302f32322d3234203d3e20323639373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:13:50:53:ad:03:7f:1e:30:b9:f4:39:ad:62:cc:77:55:eb:
         49:17:cd:3e:81:25:25:af:d7:ea:8a:98:69:e8:e9:de:ee:bb:
         f6:d5:34:c9:b9:af:c5:63:4c:cf:e2:87:0e:8f:7c:7b:9b:1e:
         0c:c3:5d:dc:e5:04:73:d0:21:81:30:53:36:53:c5:91:09:4d:
         5b:33:06:10:02:1b:34:d9:90:83:51:28:e5:9d:c1:12:7b:66:
         10:9b:eb:c5:33:f4:4b:b9:a8:10:e8:93:b9:34:1d:8c:66:5a:
         c0:bf:d6:74:21:52:ed:6a:38:68:80:d0:5e:4f:57:75:d5:bf:
         b3:a2:1f:9a:c0:63:db:12:8d:39:5a:7f:07:df:18:6e:00:e4:
         63:90:58:29:60:a2:88:02:40:06:7c:c5:6b:87:5c:ea:38:6b:
         1d:c7:e2:95:0d:a7:fb:d1:12:60:0d:c2:3e:da:6e:80:7b:62:
         bc:b5:17:f0:f2:73:42:dd:64:17:33:05:a5:56:00:9d:39:59:
         a0:4f:a5:e4:14:6f:e4:7e:55:d8:f0:b8:8f:5a:82:a5:c1:86:
         46:e3:a8:34:d3:57:34:b0:99:90:a9:7c:04:77:ed:26:0c:2b:
         93:71:f4:6a:1e:9e:1d:ff:aa:96:40:6f:40:6c:39:c7:56:b7:
         bc:8c:39:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:20 2025 by rpki-client