Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C02E62AF8B008606AF09BC81447C408B4AF27715B155F719C463F18470263C7E/0/34352e3139312e3138382e302f32322d3234203d3e20323639393136.roa
File:                     34352e3139312e3138382e302f32322d3234203d3e20323639393136.roa (raw, json)
Hash identifier:          nSviAuj/pcanUUfAradNpoys0NC7oYUE57Z0lsbWBIQ=
Subject key identifier:   A7:17:2F:F0:1B:99:0C:8D:2B:B4:77:8F:69:83:30:84:C5:34:DA:A2
Certificate issuer:       /CN=26202FFE799537E0FC87B74ABBFB4E1A1367F2EA
Certificate serial:       1C6E6999D3DDA1BD97EFCCF4316BF9F9859C4DC8
Authority key identifier: 26:20:2F:FE:79:95:37:E0:FC:87:B7:4A:BB:FB:4E:1A:13:67:F2:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26202FFE799537E0FC87B74ABBFB4E1A1367F2EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C02E62AF8B008606AF09BC81447C408B4AF27715B155F719C463F18470263C7E/0/34352e3139312e3138382e302f32322d3234203d3e20323639393136.roa
Signing time:             Tue 04 Feb 2025 18:45:38 +0000
ROA not before:           Tue 04 Feb 2025 18:40:38 +0000
ROA not after:            Tue 03 Feb 2026 18:45:38 +0000
asID:                     269916
IP address blocks:        45.191.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C02E62AF8B008606AF09BC81447C408B4AF27715B155F719C463F18470263C7E/0/26202FFE799537E0FC87B74ABBFB4E1A1367F2EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C02E62AF8B008606AF09BC81447C408B4AF27715B155F719C463F18470263C7E/0/26202FFE799537E0FC87B74ABBFB4E1A1367F2EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26202FFE799537E0FC87B74ABBFB4E1A1367F2EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6e:69:99:d3:dd:a1:bd:97:ef:cc:f4:31:6b:f9:f9:85:9c:4d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26202FFE799537E0FC87B74ABBFB4E1A1367F2EA
        Validity
            Not Before: Feb  4 18:40:38 2025 GMT
            Not After : Feb  3 18:45:38 2026 GMT
        Subject: CN=A7172FF01B990C8D2BB4778F69833084C534DAA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:08:b0:7b:18:f1:cc:c5:86:70:45:2d:40:d1:
                    f4:d3:e7:f2:a6:df:fa:40:4c:54:37:65:06:fd:28:
                    63:09:57:e9:47:99:fa:01:73:d3:ea:4c:1d:a5:03:
                    da:80:11:c3:b4:f4:cd:75:ff:f3:d1:03:fa:3f:ed:
                    48:62:83:5a:19:d7:c4:c3:11:2b:22:97:05:2a:df:
                    8b:9a:63:82:f4:26:3d:66:f3:0a:37:8f:c8:cb:ca:
                    a1:66:fe:49:65:ae:5b:06:48:03:84:0b:06:2c:c9:
                    c5:5d:6e:3e:2a:97:7c:e8:7e:6c:9d:46:87:d4:f2:
                    6b:76:f9:08:e4:f7:86:01:fa:bf:64:d5:82:0e:36:
                    23:fa:7e:ad:b0:73:18:13:58:f0:38:78:60:26:4c:
                    ac:47:74:22:23:4a:c1:1c:59:b0:f9:0b:02:e1:65:
                    f0:c5:92:9a:64:97:2d:d9:b5:75:1a:37:14:d9:81:
                    c8:c9:86:6a:6a:67:4f:b4:ed:e4:56:cf:8b:8f:74:
                    36:57:a5:38:99:9d:48:b6:41:a0:5b:02:6b:87:54:
                    f5:a3:04:aa:55:1f:68:a1:4d:cc:70:5e:69:de:6d:
                    2f:19:4f:60:dc:18:3a:b4:c8:a7:8b:85:5b:94:87:
                    db:a9:42:f2:b6:c4:d0:df:e8:1a:d5:1d:39:ab:da:
                    30:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:17:2F:F0:1B:99:0C:8D:2B:B4:77:8F:69:83:30:84:C5:34:DA:A2
            X509v3 Authority Key Identifier:
                keyid:26:20:2F:FE:79:95:37:E0:FC:87:B7:4A:BB:FB:4E:1A:13:67:F2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C02E62AF8B008606AF09BC81447C408B4AF27715B155F719C463F18470263C7E/0/26202FFE799537E0FC87B74ABBFB4E1A1367F2EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26202FFE799537E0FC87B74ABBFB4E1A1367F2EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C02E62AF8B008606AF09BC81447C408B4AF27715B155F719C463F18470263C7E/0/34352e3139312e3138382e302f32322d3234203d3e20323639393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:dd:fa:a6:a5:e5:56:5a:f1:cc:d5:3b:6b:d8:a2:0b:ed:78:
         5f:3a:61:7f:10:f4:6f:6d:90:20:62:2d:59:d3:de:52:35:fb:
         0e:93:7b:45:2c:31:d2:86:97:07:6a:53:09:d2:72:1e:b6:0f:
         c5:e9:06:6a:aa:d7:72:48:bc:b6:b2:bf:9c:71:ae:3f:6d:5f:
         32:10:06:86:0d:e8:db:7a:f0:11:e2:6d:ac:0a:e8:ba:9a:ce:
         47:98:ec:40:87:74:3c:22:61:a1:b0:a7:98:04:e5:78:81:a3:
         1d:d0:0f:0e:88:42:50:8b:29:87:ac:03:32:f4:7b:56:cc:8f:
         6a:56:ac:b7:30:59:57:ec:60:ec:82:a3:03:98:b2:01:19:fb:
         bd:b6:01:7b:4d:20:67:d1:21:a3:a1:30:52:76:c6:28:09:98:
         6c:e6:fc:1b:b8:af:d0:13:6e:25:54:df:09:6e:33:11:e1:b1:
         98:ea:af:2f:ce:d7:36:a8:c7:09:40:2b:45:d1:b1:ab:a9:f4:
         cd:53:f2:e4:f0:6a:d0:71:fe:a8:1e:cd:c6:72:06:cf:b2:7f:
         55:21:74:a3:1f:74:a4:ee:6c:82:6a:40:87:12:4a:0b:bf:6b:
         42:8f:3a:36:82:65:62:c5:4a:62:0d:d9:6f:e9:27:3a:b3:12:
         2b:90:53:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:57 2025 by rpki-client