Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3138392e302f32342d3234203d3e20333936333536.roa
File:                     34352e3137362e3138392e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          wUlMEH+xFd7vFCf61qLhUJsmTHhAknO9YcKXMRy+OIw=
Subject key identifier:   3E:0A:13:19:0F:B6:DE:60:B0:85:07:74:DF:04:87:20:C3:C5:14:43
Certificate issuer:       /CN=94E9005D15C15058534566156E00BB03244C911D
Certificate serial:       34F7417FDD54C000228D3D99A7AA0DE89F1522FF
Authority key identifier: 94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3138392e302f32342d3234203d3e20333936333536.roa
Signing time:             Sun 25 May 2025 03:20:00 +0000
ROA not before:           Sun 25 May 2025 03:15:00 +0000
ROA not after:            Sun 24 May 2026 03:20:00 +0000
asID:                     396356
IP address blocks:        45.176.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 10:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f7:41:7f:dd:54:c0:00:22:8d:3d:99:a7:aa:0d:e8:9f:15:22:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94E9005D15C15058534566156E00BB03244C911D
        Validity
            Not Before: May 25 03:15:00 2025 GMT
            Not After : May 24 03:20:00 2026 GMT
        Subject: CN=3E0A13190FB6DE60B0850774DF048720C3C51443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:f1:a5:f7:a0:63:c6:83:ef:a6:81:50:e8:
                    d3:ab:30:b5:88:bf:04:f6:9b:cb:cd:fd:35:a8:4e:
                    e6:79:01:04:cd:d2:5c:b1:6d:21:76:1d:2d:30:6c:
                    1f:b7:2d:a7:01:cd:96:54:61:a5:a6:23:68:f7:8e:
                    ef:54:4d:51:02:e6:fc:bd:d9:c8:5a:8d:02:cd:50:
                    11:9a:fc:31:68:92:f6:45:4b:95:ce:10:02:a2:59:
                    61:1b:fa:ce:84:6b:72:48:72:bd:de:aa:4b:b9:b8:
                    c5:c8:e3:ae:81:37:ed:b5:b2:aa:69:fd:67:24:9b:
                    c8:e8:22:cc:d6:64:49:b2:50:e9:d5:eb:11:10:d9:
                    82:db:6b:a6:eb:5e:00:f2:42:4c:7d:04:d9:3d:7d:
                    6f:5a:a0:e6:ce:ee:36:ab:3b:ea:0f:24:6c:06:60:
                    d3:26:fc:15:79:83:5e:d6:3b:b6:88:22:a2:1e:83:
                    46:7f:f5:58:36:8c:d3:6f:11:37:3a:1a:d8:f5:8c:
                    5b:7c:c2:d3:65:81:ad:98:0d:c2:52:a2:2e:4c:54:
                    a2:a7:7f:19:1f:c2:63:c4:1a:7d:0c:15:29:d4:8a:
                    da:5b:cd:8b:e6:89:7c:af:5d:5f:b8:70:51:59:d4:
                    89:f3:51:d4:80:30:05:b6:0f:02:21:3e:3e:6d:31:
                    f4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0A:13:19:0F:B6:DE:60:B0:85:07:74:DF:04:87:20:C3:C5:14:43
            X509v3 Authority Key Identifier:
                keyid:94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3138392e302f32342d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:ea:0e:05:d1:ef:b0:45:a3:31:ca:ca:26:59:2b:dc:2d:48:
         66:1b:5d:75:a9:f7:ac:87:8b:ae:42:25:22:3d:f2:39:6d:cb:
         14:ee:5d:96:84:a7:64:c8:9a:45:94:b8:b0:91:a3:68:92:d9:
         59:b3:72:4f:41:3a:b9:22:45:03:8e:ba:d1:40:00:7d:1f:d3:
         91:86:51:e2:17:ae:17:39:29:eb:07:15:df:6c:22:cf:06:a5:
         a2:90:cd:3e:70:9c:81:72:e3:9a:f0:24:25:8a:b1:a5:ae:f1:
         6f:25:76:16:0a:eb:ed:0d:f3:08:96:ff:4c:0e:91:03:21:31:
         d3:1b:8c:b4:67:62:04:20:5f:81:a0:b3:84:d6:0a:9f:24:cd:
         db:99:43:64:50:b2:d3:bb:d5:b8:62:e7:76:38:08:95:05:4d:
         b8:ed:b9:1a:24:17:8b:bc:97:e6:81:18:fe:c2:b2:47:bd:1e:
         24:f7:4e:c7:6b:bf:ac:d8:92:49:cb:93:e7:c4:ac:5b:38:af:
         4a:ca:37:5d:66:03:78:da:c5:d3:21:0f:d5:5e:4d:ab:fe:ac:
         df:97:29:62:3b:d5:80:e2:c1:00:ff:8b:6f:b0:4d:68:4f:24:
         ad:fa:b1:bd:56:7b:24:23:39:ee:c7:c1:10:2e:1d:4d:e9:6f:
         1f:f4:ef:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:35:30 2025 by rpki-client