Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232342e302f32322d3232203d3e203532333238.roa
File:                     34352e3232372e3232342e302f32322d3232203d3e203532333238.roa (raw, json)
Hash identifier:          3n9olk4W8fP4RRF57PHby71nju+MEPt1jIDKSvIRDBI=
Subject key identifier:   80:02:60:6D:1E:7F:39:94:4B:78:DA:2C:C9:96:D4:29:D3:AF:69:9A
Certificate issuer:       /CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
Certificate serial:       2EF842F8F26C5A1CA16DC22906E3864A9092BA92
Authority key identifier: D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232342e302f32322d3232203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:08:03 +0000
ROA not before:           Tue 04 Feb 2025 18:03:03 +0000
ROA not after:            Tue 03 Feb 2026 18:08:03 +0000
asID:                     52328
IP address blocks:        45.227.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f8:42:f8:f2:6c:5a:1c:a1:6d:c2:29:06:e3:86:4a:90:92:ba:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
        Validity
            Not Before: Feb  4 18:03:03 2025 GMT
            Not After : Feb  3 18:08:03 2026 GMT
        Subject: CN=8002606D1E7F39944B78DA2CC996D429D3AF699A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b9:30:04:b4:af:62:cf:0b:c2:70:4d:c9:9d:
                    1c:27:44:39:5e:33:62:35:7e:36:f3:aa:75:ad:a4:
                    cc:3b:33:76:e0:b4:1b:e5:7a:75:87:10:65:df:4f:
                    79:ec:14:70:28:d9:46:cb:3b:fe:76:7f:6e:7e:c5:
                    33:fa:af:a3:c8:70:9b:1b:dc:56:0b:5a:26:a0:b2:
                    e4:13:43:13:c2:a3:f5:70:f4:44:8f:3b:2f:30:a6:
                    58:dc:ee:4d:86:a4:7c:00:29:be:59:1b:2d:f8:c2:
                    50:f8:ed:2f:14:e4:80:84:d6:74:1a:db:5b:45:b7:
                    c6:e6:6b:84:80:4a:9f:cf:ff:2d:6c:2e:e5:e3:1c:
                    c7:62:42:9e:e2:8f:d3:cb:9c:b2:31:1f:33:51:cd:
                    1e:23:65:f1:16:78:af:71:aa:8b:0a:88:61:a1:75:
                    2c:6e:dd:1c:84:b0:00:22:5e:9e:4e:7b:c3:ec:cd:
                    b0:09:83:c6:05:6a:19:a9:8e:8b:b8:96:8d:6c:b3:
                    a1:48:76:28:ed:72:11:01:b2:ec:b2:fa:b9:b6:47:
                    e3:65:aa:80:85:69:3e:99:ab:86:1a:97:97:54:37:
                    22:de:0f:72:89:b8:6f:e4:0b:a2:4e:35:1e:11:71:
                    e7:13:0f:67:7a:04:cc:f2:ba:a7:16:1a:e7:fc:3d:
                    02:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:02:60:6D:1E:7F:39:94:4B:78:DA:2C:C9:96:D4:29:D3:AF:69:9A
            X509v3 Authority Key Identifier:
                keyid:D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232342e302f32322d3232203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:e8:e7:36:39:65:8e:aa:51:e0:2d:0e:d1:eb:da:ed:98:cf:
         e9:42:9b:d2:9d:ff:49:3a:e0:9c:ba:ca:07:88:26:9d:75:c5:
         e2:d1:2c:54:67:a7:b4:ad:7b:d9:73:23:4a:ad:4a:64:1a:5e:
         7d:1b:b9:d7:c2:ba:1b:c7:cb:b7:f3:98:3f:65:10:ad:d2:a9:
         38:bd:02:b9:9d:29:5e:22:73:a5:85:ab:99:5e:d3:21:02:ed:
         d3:89:7c:cf:9b:dc:66:62:ae:20:a6:90:f2:39:67:50:41:13:
         89:a4:80:bf:63:bd:ea:f6:2a:23:1b:a2:4f:6b:05:9d:99:37:
         c6:21:2d:b7:a6:72:5d:70:94:ed:f6:11:3d:9b:35:18:0a:24:
         39:92:ff:5f:c8:8a:d3:83:ea:62:4d:fb:4d:d0:3b:14:e2:d9:
         ae:5f:83:df:74:4d:60:8e:a8:45:63:05:ee:65:b5:26:d7:71:
         82:dc:b6:4e:83:ef:b9:db:6c:a1:46:10:0f:d0:4b:61:7e:86:
         3d:a0:2c:52:ca:eb:88:f8:91:07:26:9f:35:51:02:0f:97:de:
         81:5e:fc:3e:65:4d:54:c8:c1:a8:54:70:44:fc:35:ca:bc:18:
         b9:54:fd:8f:d4:69:eb:40:17:39:2f:7a:b3:d4:7d:3b:b9:c1:
         47:50:57:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:19 2025 by rpki-client