Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/34352e3232352e36382e302f32332d3234203d3e20323636363730.roa
File:                     34352e3232352e36382e302f32332d3234203d3e20323636363730.roa (raw, json)
Hash identifier:          YhG9CX5Ulzlua3Ch8wmGuDBVCGCDtGIRqmTJnpay6P8=
Subject key identifier:   10:4B:D1:B7:9D:E6:61:E3:A3:5C:FD:FC:71:D5:4A:02:4E:E0:72:6C
Certificate issuer:       /CN=841EE6C0920D7F05C7686B132A17AE71FCC549B8
Certificate serial:       76715A9E47C83CE3E7BAE7D5F3FAD3BBD2C4EDC9
Authority key identifier: 84:1E:E6:C0:92:0D:7F:05:C7:68:6B:13:2A:17:AE:71:FC:C5:49:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/34352e3232352e36382e302f32332d3234203d3e20323636363730.roa
Signing time:             Tue 04 Feb 2025 18:10:11 +0000
ROA not before:           Tue 04 Feb 2025 18:05:11 +0000
ROA not after:            Tue 03 Feb 2026 18:10:11 +0000
asID:                     266670
IP address blocks:        45.225.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:71:5a:9e:47:c8:3c:e3:e7:ba:e7:d5:f3:fa:d3:bb:d2:c4:ed:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841EE6C0920D7F05C7686B132A17AE71FCC549B8
        Validity
            Not Before: Feb  4 18:05:11 2025 GMT
            Not After : Feb  3 18:10:11 2026 GMT
        Subject: CN=104BD1B79DE661E3A35CFDFC71D54A024EE0726C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e5:d9:ad:0f:66:24:65:9c:3d:c0:46:e8:57:
                    0b:00:8b:ed:7c:c8:f6:b8:e9:18:dc:70:67:96:7c:
                    48:c0:62:47:6a:96:f0:26:ac:3a:66:d5:3d:2f:cc:
                    77:c2:c6:6d:d7:b5:29:b5:f1:4f:37:c2:6e:7c:30:
                    4f:28:fe:f0:db:97:04:d4:07:87:51:f6:82:59:74:
                    b4:39:f6:47:3d:69:28:e4:54:7b:2d:f3:e7:c5:c7:
                    9f:dc:9a:8d:9f:a5:df:36:fc:a9:d6:27:25:2c:f9:
                    ee:04:88:34:48:6d:8f:e3:85:9c:9e:98:3d:a5:cd:
                    db:5f:e2:65:2e:c6:43:08:aa:e4:7b:25:43:b6:50:
                    e6:2f:46:43:98:cb:b2:29:13:1f:4e:5e:97:8b:8c:
                    ec:05:a6:90:af:a7:a7:88:81:8e:a6:cd:80:5c:b6:
                    75:04:de:f4:b7:7a:8f:65:26:39:f1:f5:11:d0:21:
                    f0:03:14:53:d2:2d:a7:b6:ad:e2:cc:e3:58:6e:8a:
                    83:18:ef:90:c8:86:6e:a8:1a:44:2d:d5:ed:d9:36:
                    e0:66:80:88:c7:b2:c6:69:66:68:86:ec:86:46:5e:
                    99:58:16:d4:05:28:0e:c0:2c:86:d1:35:d2:4e:13:
                    4b:62:7a:9b:66:cc:82:3f:e6:4f:a4:6e:b3:16:75:
                    7f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4B:D1:B7:9D:E6:61:E3:A3:5C:FD:FC:71:D5:4A:02:4E:E0:72:6C
            X509v3 Authority Key Identifier:
                keyid:84:1E:E6:C0:92:0D:7F:05:C7:68:6B:13:2A:17:AE:71:FC:C5:49:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/34352e3232352e36382e302f32332d3234203d3e20323636363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:f1:6c:e0:93:41:aa:72:20:ea:0f:9b:df:06:61:6e:15:59:
         cd:92:cb:71:a0:01:82:94:aa:66:7f:d4:6c:85:83:16:0a:c0:
         fb:5f:0f:e1:15:cd:80:5a:aa:80:27:98:48:19:f1:37:18:83:
         ef:72:86:37:fb:b1:da:da:22:5f:3e:8e:d4:5c:1c:01:1f:7b:
         73:21:bc:12:a4:72:39:7d:c4:39:44:80:9d:19:99:61:03:c9:
         b4:25:5d:49:ad:ae:81:4a:de:2a:bc:7d:94:e8:90:9f:63:c3:
         4d:23:19:d1:dc:4e:2d:9c:8f:6c:8f:d9:b2:87:70:95:c9:5e:
         95:7f:56:87:98:f4:10:fb:ee:de:e7:6d:36:18:79:19:a0:5a:
         12:cc:76:28:50:b6:4c:ea:11:c5:cb:fb:fa:64:f6:47:83:05:
         16:07:5e:47:cd:5b:83:5f:3b:20:31:74:3f:d5:64:82:7c:3a:
         1a:35:05:9e:8a:4d:c1:18:52:ee:e0:48:b8:b6:ec:dd:20:74:
         9b:79:e8:54:c9:f1:92:ec:d9:c4:93:de:29:f2:19:56:74:d5:
         75:4d:bd:0b:62:f0:62:2d:99:53:5f:bd:df:4f:e1:61:c3:b8:
         e4:25:4d:86:17:b2:32:66:ce:9b:e9:65:13:7f:6b:ca:a0:e9:
         5b:a6:a8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:07 2025 by rpki-client