Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/34352e3233382e35362e302f32322d3234203d3e20323636383334.roa
File:                     34352e3233382e35362e302f32322d3234203d3e20323636383334.roa (raw, json)
Hash identifier:          6ZDpxAoqPmf9/p2dNFohm21Ev1DX9T/SBZUHhhYRTz0=
Subject key identifier:   10:02:C7:71:21:1F:9B:DC:BB:84:75:82:28:48:E5:EC:9B:AC:C2:C5
Certificate issuer:       /CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
Certificate serial:       27A598FAA49D4780ADB0562D8674C44C02FD2EC6
Authority key identifier: B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/34352e3233382e35362e302f32322d3234203d3e20323636383334.roa
Signing time:             Tue 04 Feb 2025 18:05:58 +0000
ROA not before:           Tue 04 Feb 2025 18:00:58 +0000
ROA not after:            Tue 03 Feb 2026 18:05:58 +0000
asID:                     266834
IP address blocks:        45.238.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 00:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a5:98:fa:a4:9d:47:80:ad:b0:56:2d:86:74:c4:4c:02:fd:2e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
        Validity
            Not Before: Feb  4 18:00:58 2025 GMT
            Not After : Feb  3 18:05:58 2026 GMT
        Subject: CN=1002C771211F9BDCBB8475822848E5EC9BACC2C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:9f:0a:cf:e1:8d:9b:ac:8b:b8:2f:b2:d2:
                    8d:aa:95:82:66:ae:f0:92:f1:33:4a:2e:14:8e:d9:
                    62:d0:90:0d:e3:27:ca:80:ea:b6:18:f4:73:c6:4d:
                    69:0c:b9:8e:2d:ed:49:e1:f0:39:0c:4a:55:0b:01:
                    91:0e:7b:e0:10:df:8a:de:95:b6:58:08:45:be:c3:
                    b4:9e:5c:d8:5d:e7:31:d9:84:fa:a9:ee:98:5c:ef:
                    20:67:b3:25:ec:24:30:6e:39:5c:f9:e5:e6:de:a0:
                    62:70:e3:7d:ea:19:a0:59:fd:5f:04:c8:12:a0:21:
                    6f:96:6d:d7:5e:53:b7:78:e5:a1:0f:1b:ea:a2:2a:
                    87:69:37:1d:f6:18:94:90:12:c0:b8:65:22:4f:e7:
                    49:12:5d:09:e5:b5:a7:f9:b7:3d:30:35:27:d3:4a:
                    cf:b7:09:59:89:13:9a:e3:6a:03:e0:08:5a:f3:db:
                    6e:a5:c7:4d:2c:ba:3e:01:c9:48:6b:2c:5f:40:b6:
                    53:c6:7a:a0:fa:2a:39:f8:ac:71:aa:66:fd:40:2f:
                    eb:89:9c:83:27:09:e9:31:95:d9:ec:6b:c9:39:8f:
                    77:5c:34:bf:8b:b6:05:cd:39:64:35:53:b2:da:40:
                    f4:46:79:9d:df:5d:04:70:48:78:59:e3:b1:d9:b5:
                    8a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:02:C7:71:21:1F:9B:DC:BB:84:75:82:28:48:E5:EC:9B:AC:C2:C5
            X509v3 Authority Key Identifier:
                keyid:B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/34352e3233382e35362e302f32322d3234203d3e20323636383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:b0:44:95:1a:bd:03:85:ba:ca:a0:51:db:1e:fe:1f:fd:bf:
         50:03:bc:0c:5b:92:eb:e7:34:67:de:84:f0:f6:31:48:da:ac:
         39:df:7d:fc:f5:6f:65:64:c5:96:ba:fb:13:19:a7:b9:c0:71:
         2b:e0:86:27:13:87:7a:e1:10:08:17:49:54:1f:f7:60:d9:61:
         57:a5:15:50:dd:14:4e:37:8e:43:39:fa:8d:bb:3b:e2:25:8b:
         e4:77:19:4f:a8:1f:2f:1e:0c:aa:32:68:33:fd:3a:ab:a5:03:
         66:a6:64:8b:85:a0:e8:f9:bc:92:80:a5:ef:ea:3d:12:4a:b7:
         1d:77:fd:86:11:d0:49:48:ff:5c:18:c7:b9:da:d5:33:b9:ca:
         de:81:60:8c:18:57:bc:0f:ce:45:f6:d9:70:42:de:7e:32:2c:
         56:f5:81:63:19:74:fd:79:9c:79:f7:c8:66:88:f2:bf:5c:e6:
         3a:4c:55:87:32:59:ee:e1:56:c2:46:35:6f:96:68:cb:49:57:
         77:da:59:ed:87:da:56:29:87:0a:6e:06:c9:f2:85:89:6c:ce:
         e6:fb:9e:31:91:11:3d:ee:52:5e:d4:90:03:cf:e8:3a:0b:2e:
         d0:01:0b:ad:37:47:3c:f1:d9:0a:78:bf:5c:e3:f8:75:84:04:
         4a:c6:9f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:52:45 2025 by rpki-client