Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/34352e362e3231342e302f32342d3234203d3e20323635373039.roa
File:                     34352e362e3231342e302f32342d3234203d3e20323635373039.roa (raw, json)
Hash identifier:          Gdi9dmpXZO+jNOUx7VTwQdW0slgfrWkzyXPpPMYowS0=
Subject key identifier:   8D:8F:D4:C1:C7:63:03:05:5A:1B:58:D4:5F:C9:80:18:69:DA:3E:C8
Certificate issuer:       /CN=F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3
Certificate serial:       5C09D9588F0078FDABE430CCFCF54C3E750F1D45
Authority key identifier: F1:D8:BA:39:D3:C5:EC:C1:7D:CA:2A:6E:F5:4E:78:3C:5C:52:83:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/34352e362e3231342e302f32342d3234203d3e20323635373039.roa
Signing time:             Tue 04 Feb 2025 18:08:02 +0000
ROA not before:           Tue 04 Feb 2025 18:03:02 +0000
ROA not after:            Tue 03 Feb 2026 18:08:02 +0000
asID:                     265709
IP address blocks:        45.6.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:09:d9:58:8f:00:78:fd:ab:e4:30:cc:fc:f5:4c:3e:75:0f:1d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3
        Validity
            Not Before: Feb  4 18:03:02 2025 GMT
            Not After : Feb  3 18:08:02 2026 GMT
        Subject: CN=8D8FD4C1C76303055A1B58D45FC9801869DA3EC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:b5:eb:e6:76:30:40:3c:59:33:da:25:27:
                    33:c4:f2:92:34:30:bd:74:7b:26:ff:15:a0:85:ca:
                    71:be:a7:81:49:1c:5c:fe:c3:73:12:d6:57:d3:1d:
                    c8:94:ba:58:31:e9:50:d8:57:09:38:da:aa:31:42:
                    df:40:a4:38:98:0d:f4:70:f5:fd:25:98:09:8b:d2:
                    36:8f:6b:2c:df:50:2e:f8:23:aa:37:cc:81:6e:13:
                    8d:df:75:9b:34:9f:3e:dd:4e:61:6f:fa:c4:a9:c6:
                    17:9e:0a:31:fb:92:c3:76:92:37:59:22:00:b1:8f:
                    d4:8b:48:63:62:f5:1e:d4:bc:f1:10:1e:3e:0b:af:
                    2e:b8:a3:49:a5:4e:36:fe:b9:06:64:eb:37:99:8a:
                    28:4a:32:33:0d:da:64:2a:0c:19:5f:0a:fd:85:18:
                    40:e8:2c:42:58:a0:8c:54:b0:a8:67:a6:ea:16:6f:
                    18:9c:42:6f:0a:92:7a:8e:c4:2d:8b:b9:c4:46:1a:
                    ca:68:24:b6:4e:1f:69:ad:66:46:bd:87:37:46:ab:
                    bf:17:1a:82:ec:89:67:2d:cd:fc:d5:5d:e1:5f:50:
                    e0:e4:6c:98:5e:a9:78:b7:59:e6:b7:58:70:0e:9a:
                    69:d4:d6:72:6b:4f:81:0f:2c:3c:f7:36:49:c2:aa:
                    f8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8F:D4:C1:C7:63:03:05:5A:1B:58:D4:5F:C9:80:18:69:DA:3E:C8
            X509v3 Authority Key Identifier:
                keyid:F1:D8:BA:39:D3:C5:EC:C1:7D:CA:2A:6E:F5:4E:78:3C:5C:52:83:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/34352e362e3231342e302f32342d3234203d3e20323635373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:68:83:2d:46:38:38:87:38:5a:35:28:3c:02:b7:62:ca:f0:
         be:d6:68:4c:d3:22:65:7e:20:74:60:46:8a:fc:6a:84:10:c3:
         7e:7e:9f:0b:92:52:75:97:96:d2:66:ba:ec:a9:4e:1c:86:ba:
         3e:f7:8f:69:93:10:7b:6c:59:dd:9f:5e:6e:db:fb:04:cc:52:
         0e:97:1a:0d:bd:8e:d2:69:5e:dd:25:ef:29:1f:90:5c:bc:5f:
         6b:43:82:27:ae:d4:60:52:67:7b:79:e8:ad:63:8d:89:24:8d:
         81:df:df:51:5f:57:0d:df:dd:96:ad:25:90:9b:e4:91:57:bc:
         82:08:22:5f:05:9a:f3:15:5e:50:38:45:24:19:d8:2a:68:98:
         52:c2:37:26:30:bf:5d:1e:4f:15:b6:24:76:31:11:85:dd:ba:
         88:d2:95:e5:34:ee:01:0a:49:7a:97:0d:49:a4:06:53:36:4a:
         9b:05:2d:61:d2:df:c6:e9:26:30:5b:55:50:7e:45:5c:ef:97:
         11:29:0a:9d:d4:4c:23:70:b7:5e:8e:bf:ca:b0:80:fe:d2:09:
         d7:42:43:60:d3:1c:5f:29:45:5f:3a:07:0a:ef:e5:cc:24:00:
         2a:31:ba:95:87:98:da:da:d4:c8:0b:1e:0f:2f:92:98:a0:38:
         fc:c7:55:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:07:37 2025 by rpki-client