Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/34352e3136322e3133352e302f32342d3234203d3e20323733383739.roa
File:                     34352e3136322e3133352e302f32342d3234203d3e20323733383739.roa (raw, json)
Hash identifier:          F6bsnRTCs627fuNyoRTlesCcezkPMMnlWqt9UKcbXIQ=
Subject key identifier:   18:D5:93:15:38:0D:04:7A:43:E2:4E:9B:73:10:49:49:E6:65:73:E6
Certificate issuer:       /CN=B4FABCBFF83288B64BE540323B458825C54A4663
Certificate serial:       46439BFF7B3B38F45263D08A1BABEC5F9894A7CB
Authority key identifier: B4:FA:BC:BF:F8:32:88:B6:4B:E5:40:32:3B:45:88:25:C5:4A:46:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/34352e3136322e3133352e302f32342d3234203d3e20323733383739.roa
Signing time:             Mon 06 Jan 2025 05:50:00 +0000
ROA not before:           Mon 06 Jan 2025 05:45:00 +0000
ROA not after:            Mon 05 Jan 2026 05:50:00 +0000
asID:                     273879
IP address blocks:        45.162.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:43:9b:ff:7b:3b:38:f4:52:63:d0:8a:1b:ab:ec:5f:98:94:a7:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4FABCBFF83288B64BE540323B458825C54A4663
        Validity
            Not Before: Jan  6 05:45:00 2025 GMT
            Not After : Jan  5 05:50:00 2026 GMT
        Subject: CN=18D59315380D047A43E24E9B73104949E66573E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:13:a6:fa:41:45:66:0d:61:0f:09:1a:21:
                    3a:24:c2:19:bf:05:53:85:f1:15:bc:4f:e0:f2:76:
                    75:33:17:97:99:eb:e1:db:05:0b:28:74:56:00:ad:
                    30:50:6b:f4:02:ca:0e:55:66:4c:00:fc:5c:c1:88:
                    ec:d9:aa:a9:c5:10:fc:0c:9f:c3:cc:9e:a6:03:ce:
                    0b:b7:3d:17:16:72:6d:03:84:b0:71:f7:53:89:a5:
                    91:cc:d3:a8:0e:df:ce:d3:1e:42:60:42:f4:dc:f7:
                    e4:2e:68:fb:1f:0d:ae:b1:ec:68:88:7a:b2:6c:4d:
                    3b:58:77:cd:db:12:e9:b0:a4:34:37:93:cb:e0:68:
                    2b:46:7a:dc:e8:b8:89:b9:da:30:a2:b3:9a:26:c9:
                    cf:5f:92:41:66:85:03:2d:6b:73:bd:31:48:4d:34:
                    fa:60:a4:db:54:90:5a:53:5b:75:54:46:bf:0c:25:
                    19:8e:ed:64:84:ff:2f:cd:b7:85:47:3c:35:54:2b:
                    fd:bd:cc:38:0e:aa:2c:fb:b5:09:86:63:70:74:3c:
                    13:da:08:25:8b:88:db:16:96:09:8c:0a:13:4a:8c:
                    19:1b:f6:bd:e5:08:66:62:8b:7b:1d:bf:cb:b5:c5:
                    55:25:f0:46:8e:85:21:10:ff:30:73:69:04:2a:85:
                    c4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D5:93:15:38:0D:04:7A:43:E2:4E:9B:73:10:49:49:E6:65:73:E6
            X509v3 Authority Key Identifier:
                keyid:B4:FA:BC:BF:F8:32:88:B6:4B:E5:40:32:3B:45:88:25:C5:4A:46:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/B4FABCBFF83288B64BE540323B458825C54A4663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4FABCBFF83288B64BE540323B458825C54A4663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1FBA1E9A6B012F1422DFCB428DD9FA4D93BBAD25D4989BCB1FD3338FBA5759/0/34352e3136322e3133352e302f32342d3234203d3e20323733383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:39:78:18:67:ed:72:4a:b2:1f:e7:4a:35:38:29:6d:ab:4b:
         5e:51:50:2f:78:17:0d:3a:1a:ab:34:0f:3d:1c:d5:de:80:41:
         bc:75:76:78:52:a8:1f:92:fe:e4:8e:73:06:a6:02:3d:16:be:
         72:6e:85:f5:e1:d4:1b:bc:f7:5a:cd:b9:43:23:ba:80:c8:1a:
         89:fb:05:da:4b:42:de:5c:df:18:2c:44:33:1a:d6:18:ef:aa:
         03:04:0c:ae:2d:b9:fe:a3:3e:50:4e:7a:0d:7b:36:16:27:14:
         c9:d6:af:99:15:55:39:3c:5a:06:71:6e:e0:3f:9c:90:ed:09:
         90:6f:66:04:97:18:82:77:9a:a1:b1:8e:c3:b8:ef:3c:cf:fc:
         8e:97:fe:39:fa:62:e5:28:de:76:87:c3:0c:8c:a4:c1:06:69:
         42:50:3b:0f:c0:96:e1:0f:32:c4:48:b7:0d:7f:16:6b:42:2a:
         73:14:0a:d2:49:f0:c7:37:9f:2c:af:15:84:1f:ef:89:64:a4:
         1d:f8:3b:0b:5d:47:14:58:c5:39:02:e9:9a:e3:8a:07:c1:1d:
         19:aa:7b:e3:5e:01:2a:ff:68:68:3e:0a:f6:21:0e:3e:15:ec:
         c7:fd:4e:8d:67:5f:00:4c:bf:a3:6e:3c:25:e3:58:c3:29:f9:
         e2:8f:b9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:20 2025 by rpki-client