Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/34352e3232372e31382e302f32342d3234203d3e20323635383639.roa
File:                     34352e3232372e31382e302f32342d3234203d3e20323635383639.roa (raw, json)
Hash identifier:          +21b9suBJyrq/gKW9jT6u9DN9cdNmaAUwFg0ftI1pKU=
Subject key identifier:   27:D0:E9:F0:CB:6F:DC:A7:AF:46:95:E0:BF:5E:9B:72:B2:33:62:46
Certificate issuer:       /CN=E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2
Certificate serial:       5CC874CD9A3E0E1E7CE3560DF0434CC4D5BBA63B
Authority key identifier: E7:6D:7E:4B:B5:C0:67:85:FC:4F:DE:5D:20:63:A4:21:FC:05:10:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/34352e3232372e31382e302f32342d3234203d3e20323635383639.roa
Signing time:             Tue 04 Feb 2025 18:29:10 +0000
ROA not before:           Tue 04 Feb 2025 18:24:10 +0000
ROA not after:            Tue 03 Feb 2026 18:29:10 +0000
asID:                     265869
IP address blocks:        45.227.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c8:74:cd:9a:3e:0e:1e:7c:e3:56:0d:f0:43:4c:c4:d5:bb:a6:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2
        Validity
            Not Before: Feb  4 18:24:10 2025 GMT
            Not After : Feb  3 18:29:10 2026 GMT
        Subject: CN=27D0E9F0CB6FDCA7AF4695E0BF5E9B72B2336246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:c8:e9:e0:dd:86:73:63:b1:e0:d2:05:c8:
                    bd:eb:84:d2:e1:37:e9:c2:91:ba:67:d7:88:e9:fb:
                    14:bd:5b:01:24:ae:93:60:ea:4c:89:b6:1e:d6:73:
                    e5:1d:44:1b:98:2f:1e:6b:8f:a0:84:2e:fd:93:3a:
                    cd:9b:74:8c:c8:bd:26:fa:ce:4d:14:54:75:61:4f:
                    d8:4d:a6:de:6a:e1:d5:aa:f1:cb:b8:70:f2:bb:1c:
                    0f:55:f6:1b:0d:8a:08:d8:0b:48:93:e9:d7:83:3e:
                    ec:19:3d:bf:00:55:51:a0:c6:5e:17:38:20:27:eb:
                    8c:5f:a7:82:c6:d0:c0:8b:64:5b:c1:46:98:01:23:
                    59:16:6d:78:e6:8f:7b:27:a6:4c:5f:45:16:ec:6f:
                    ee:30:ba:d4:f9:f2:71:b3:8a:32:2b:1c:82:a5:7b:
                    67:62:aa:76:9d:37:8d:15:da:5d:0c:3b:50:3f:ce:
                    0f:15:49:68:68:f8:45:62:8b:16:38:35:4e:c6:21:
                    aa:59:1b:b1:cc:63:68:8a:3f:c5:e7:58:0b:18:8f:
                    36:dc:03:7c:4b:37:e4:9b:9a:17:44:2d:02:d2:e0:
                    cf:db:62:aa:6c:71:0c:a5:37:4f:73:34:5a:a5:ff:
                    b5:30:3b:e4:75:87:5c:ac:7b:67:15:41:10:41:11:
                    4a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D0:E9:F0:CB:6F:DC:A7:AF:46:95:E0:BF:5E:9B:72:B2:33:62:46
            X509v3 Authority Key Identifier:
                keyid:E7:6D:7E:4B:B5:C0:67:85:FC:4F:DE:5D:20:63:A4:21:FC:05:10:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/34352e3232372e31382e302f32342d3234203d3e20323635383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:ae:5a:12:03:2a:04:b6:6d:17:e2:cb:e6:a9:f8:01:c1:71:
         52:1c:a7:86:4c:30:40:8d:77:70:ab:39:db:e0:1c:61:84:da:
         a8:27:63:a2:2d:af:f5:e8:f5:d1:75:67:e3:cd:ed:6b:a2:c1:
         b0:bc:2d:c1:14:dc:ab:bd:ad:cd:0f:30:d0:7b:db:7c:41:c3:
         49:e7:61:87:d4:fa:5d:f9:b3:7d:61:11:4d:dd:05:46:39:55:
         1d:c2:65:5f:e7:43:b5:e8:69:11:c9:66:0d:c3:eb:48:f0:0d:
         c1:ef:ad:54:dc:27:51:57:46:ac:aa:31:71:19:46:a0:0b:32:
         cf:f3:91:30:c3:0b:3b:aa:19:cd:4d:04:cd:be:aa:68:d4:61:
         13:12:4f:79:08:9a:27:1a:89:44:2b:c8:f9:41:20:b0:df:a4:
         21:89:89:3a:84:91:c4:dd:f2:c7:d6:68:2c:8c:1c:8c:67:56:
         dc:7c:70:83:84:06:e4:a6:3a:83:a3:c0:1e:db:38:9c:22:13:
         99:cc:6a:b0:91:e3:6b:5b:37:a1:95:1b:08:c7:34:54:a2:13:
         01:1c:e5:1e:25:ac:f9:e6:b3:bc:e3:62:1b:de:2e:6a:05:f9:
         10:62:5f:b8:a4:49:0f:75:3f:12:05:e0:50:eb:0d:1f:46:88:
         5e:a4:88:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:21 2025 by rpki-client