Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/34352e3136302e31322e302f32322d3234203d3e20323636383730.roa
File:                     34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (raw, json)
Hash identifier:          vb7Kyf31JcU4K7h1whk05luNX6Z6SSjkjzD3prLXHAE=
Subject key identifier:   CE:0E:20:26:E4:0F:90:5D:12:1C:DA:CA:33:74:38:81:3F:6A:91:44
Certificate issuer:       /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Certificate serial:       2CB857F8EABD12278A6400CD2CFEBFA0B084EB33
Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/34352e3136302e31322e302f32322d3234203d3e20323636383730.roa
Signing time:             Tue 04 Feb 2025 18:29:32 +0000
ROA not before:           Tue 04 Feb 2025 18:24:32 +0000
ROA not after:            Tue 03 Feb 2026 18:29:32 +0000
asID:                     266870
IP address blocks:        45.160.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b8:57:f8:ea:bd:12:27:8a:64:00:cd:2c:fe:bf:a0:b0:84:eb:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
        Validity
            Not Before: Feb  4 18:24:32 2025 GMT
            Not After : Feb  3 18:29:32 2026 GMT
        Subject: CN=CE0E2026E40F905D121CDACA337438813F6A9144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8f:17:6d:57:d4:46:14:8d:e6:78:74:4b:2f:
                    13:18:83:89:44:2e:db:30:62:70:f2:b3:c9:16:d7:
                    df:75:39:32:ca:67:6b:62:17:53:ce:1e:aa:0b:59:
                    38:9a:17:b4:12:11:2a:3d:cd:bb:a3:98:16:91:fb:
                    30:5b:3d:01:dd:f6:2a:c5:a4:b6:ad:57:3d:cc:de:
                    4f:2e:e9:80:e5:10:56:45:f8:26:61:9a:e6:f9:65:
                    94:19:39:5b:d1:20:3d:78:28:3e:a7:b2:04:02:ed:
                    1b:a9:b0:f5:e0:72:7e:fd:11:38:24:d5:5b:24:f4:
                    31:e9:a4:f4:5d:32:f9:9b:1a:97:85:95:b8:ef:90:
                    f4:2c:55:11:7c:cd:33:98:39:c5:9f:24:e2:ac:2f:
                    15:1d:8b:98:83:6e:c3:da:ac:4f:c0:b7:03:4f:ed:
                    0e:97:9f:f5:11:5c:26:7f:f5:8f:b9:f0:f6:6a:8f:
                    0b:e0:7d:06:87:4b:1e:8f:b2:5d:a5:cc:92:df:27:
                    99:af:4f:80:35:07:62:db:1b:b1:4c:7d:4c:48:e4:
                    21:db:0c:05:6a:ec:5a:ba:a4:85:cf:66:5b:68:25:
                    da:3a:07:f6:58:88:ee:0e:9d:3d:12:e3:b0:99:97:
                    7b:b4:57:ff:2d:de:1e:ab:f6:9c:05:0e:4a:a0:50:
                    bd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0E:20:26:E4:0F:90:5D:12:1C:DA:CA:33:74:38:81:3F:6A:91:44
            X509v3 Authority Key Identifier:
                keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/34352e3136302e31322e302f32322d3234203d3e20323636383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:1b:fe:c9:01:e0:7f:0e:93:9d:2d:b5:1f:8e:9b:dd:67:e4:
         4f:08:38:ef:0f:45:a5:f2:92:7f:b3:ef:b2:58:28:7a:f6:77:
         c0:bc:f5:ea:05:4c:df:73:f2:07:bd:21:3f:9a:05:18:ca:74:
         b9:70:23:0b:5b:d9:af:0e:6d:60:3f:07:ae:3e:d4:c1:f1:2b:
         7b:ee:18:97:eb:f7:44:7c:a1:f7:da:e8:c2:7e:ab:1b:60:6e:
         12:62:e0:a7:eb:48:2e:b2:15:c7:99:9a:d6:92:86:9d:7d:2a:
         cb:ed:3e:41:b8:c7:55:36:0b:20:a0:25:fd:6a:4e:03:3c:e0:
         0b:6d:84:ca:95:6e:e3:86:d8:25:05:cf:72:eb:c4:4f:19:72:
         76:11:2d:04:28:16:bc:32:15:2a:2a:87:15:0a:6a:e0:e6:ae:
         24:a7:5f:33:ec:35:4e:93:29:20:bf:1d:b1:77:a3:60:67:64:
         5f:4a:58:bf:02:f2:c6:db:a0:cf:6c:aa:8f:44:df:23:2e:20:
         60:cf:a0:69:b0:54:9e:a4:e2:00:c3:3f:1d:0b:35:ca:37:66:
         c0:95:76:c3:42:63:7a:89:15:f8:d8:aa:58:bb:19:c4:22:6e:
         a0:91:2b:ba:fb:9b:38:25:a8:f1:07:00:32:05:d8:d2:ca:6f:
         ca:8c:a3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:14:46 2025 by rpki-client