Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/34352e3233342e38382e302f32322d3234203d3e20323636373632.roa
File:                     34352e3233342e38382e302f32322d3234203d3e20323636373632.roa (raw, json)
Hash identifier:          zuhBIOJyDhLyXfE17CyveLRjUAH/Wyuq32OmETlq9ZI=
Subject key identifier:   A4:6C:EE:46:F6:33:7A:FB:34:FD:E5:68:88:44:5D:75:6D:96:FB:9B
Certificate issuer:       /CN=D09418521EA53A7D75F8FDF01F073B4955B0B259
Certificate serial:       7A78C1A0107994424346976425A6FBF941704474
Authority key identifier: D0:94:18:52:1E:A5:3A:7D:75:F8:FD:F0:1F:07:3B:49:55:B0:B2:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/34352e3233342e38382e302f32322d3234203d3e20323636373632.roa
Signing time:             Tue 04 Feb 2025 18:26:45 +0000
ROA not before:           Tue 04 Feb 2025 18:21:45 +0000
ROA not after:            Tue 03 Feb 2026 18:26:45 +0000
asID:                     266762
IP address blocks:        45.234.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:78:c1:a0:10:79:94:42:43:46:97:64:25:a6:fb:f9:41:70:44:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D09418521EA53A7D75F8FDF01F073B4955B0B259
        Validity
            Not Before: Feb  4 18:21:45 2025 GMT
            Not After : Feb  3 18:26:45 2026 GMT
        Subject: CN=A46CEE46F6337AFB34FDE56888445D756D96FB9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:15:52:f0:3b:91:8a:47:90:40:6d:22:be:ae:
                    0f:3f:77:1a:e6:fd:22:f5:64:58:77:b0:82:3a:c3:
                    06:02:31:6e:a0:0d:af:66:f6:0b:6e:e0:b9:90:52:
                    f7:44:93:62:07:45:0e:ba:ff:4e:99:a6:b8:8f:b2:
                    4e:6f:bc:0d:4c:7e:91:8f:b4:72:ad:68:2b:36:7f:
                    5c:75:17:00:e7:60:b6:ab:93:7c:f4:0c:dd:9b:e6:
                    50:8c:5e:c7:ff:bd:fe:57:c8:27:12:3d:74:2b:71:
                    a4:1d:f6:cd:ae:66:36:f7:0d:05:c9:f7:1c:8f:dd:
                    58:c6:23:94:05:be:83:38:99:e2:e7:ce:c6:ce:89:
                    e2:3e:a3:42:07:ba:f6:c0:11:ff:4d:ec:56:54:0d:
                    57:98:2b:33:03:5f:61:f5:f3:e1:52:89:8c:e3:4d:
                    82:e2:85:45:b5:a1:03:ad:cf:54:d8:c7:63:91:46:
                    22:d1:22:49:46:47:c8:fb:b7:d9:b3:ad:b7:3b:90:
                    c6:3b:64:25:48:fc:de:6e:61:a6:b5:bf:28:5a:4c:
                    b9:b5:e5:38:59:87:79:da:5b:04:df:dc:38:66:5a:
                    30:3a:d4:bb:31:be:e3:f1:e2:9e:8c:eb:d1:2d:65:
                    cc:9f:83:3e:f8:17:5e:82:83:e6:e2:18:7a:e2:0e:
                    fe:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6C:EE:46:F6:33:7A:FB:34:FD:E5:68:88:44:5D:75:6D:96:FB:9B
            X509v3 Authority Key Identifier:
                keyid:D0:94:18:52:1E:A5:3A:7D:75:F8:FD:F0:1F:07:3B:49:55:B0:B2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/34352e3233342e38382e302f32322d3234203d3e20323636373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:c7:b1:75:f2:ef:48:1a:c6:20:49:f7:1e:77:c7:73:b0:8f:
         c2:7c:bb:04:81:7d:a8:9e:a2:60:ea:2f:8a:7f:c2:ff:5d:6c:
         f5:3d:67:2b:d7:1b:e9:43:23:fd:54:b9:69:ea:83:4f:b5:cc:
         b6:a7:cc:0c:ee:a8:9f:85:bd:7d:60:3e:31:04:5d:0d:e0:25:
         4e:26:91:40:f7:2e:88:d8:20:d1:72:3b:86:15:70:7b:b7:ca:
         c0:53:96:94:22:2d:99:c7:67:70:85:b2:46:ff:2c:fa:02:b7:
         95:ca:77:1a:77:11:23:72:4f:c2:0d:80:ed:48:2a:bf:41:21:
         7e:1b:a3:85:70:6d:e4:0e:f2:43:08:2d:eb:64:ee:f1:64:57:
         bc:d3:ff:cc:ba:90:be:2b:99:08:e2:18:78:96:8f:bd:80:4e:
         2d:65:91:a8:b0:65:9a:c0:77:a0:db:ed:d2:d5:94:0e:74:fe:
         1e:5c:18:d2:73:c0:85:98:e6:51:25:31:2a:9d:33:e0:ac:6e:
         82:90:a5:83:03:5b:59:61:7f:30:0a:d7:43:71:e5:79:05:1f:
         f1:20:dd:8c:0b:3e:1c:f5:69:66:88:78:66:1a:7d:7b:90:f0:
         cd:51:13:4d:c8:40:a1:91:f7:96:01:11:c1:7f:07:00:55:aa:
         c1:1d:59:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:11:00 2025 by rpki-client