Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232362e302f32342d3234203d3e203532333238.roa
File:                     34352e3232372e3232362e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          62l4FBIAx39CtMuvLnZsXQtNQvqfrYk1nnc+bkaY7zs=
Subject key identifier:   91:33:B4:41:A3:2A:BF:AD:6D:CB:E2:72:47:DE:B0:DE:42:D5:9F:27
Certificate issuer:       /CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
Certificate serial:       742CBC86DC3048BABD0E01058192E08A01629FBE
Authority key identifier: D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232362e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:08:03 +0000
ROA not before:           Tue 04 Feb 2025 18:03:03 +0000
ROA not after:            Tue 03 Feb 2026 18:08:03 +0000
asID:                     52328
IP address blocks:        45.227.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2c:bc:86:dc:30:48:ba:bd:0e:01:05:81:92:e0:8a:01:62:9f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
        Validity
            Not Before: Feb  4 18:03:03 2025 GMT
            Not After : Feb  3 18:08:03 2026 GMT
        Subject: CN=9133B441A32ABFAD6DCBE27247DEB0DE42D59F27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:88:a7:f6:61:da:a1:97:e2:03:96:52:d8:65:
                    02:ed:d7:19:cd:a3:f9:15:e1:6b:70:ba:df:11:79:
                    6a:b6:d3:1c:16:67:9e:8b:ad:b2:26:da:bb:da:52:
                    6e:91:da:22:03:da:92:f6:b6:cc:cc:1b:6d:1f:92:
                    e8:be:f3:5e:e3:2e:e1:92:00:78:58:da:53:ea:ac:
                    fe:16:d9:5d:d6:1d:a7:eb:1a:e8:fb:d3:f6:e0:9d:
                    d2:84:cf:97:40:6e:ba:39:98:3a:5a:e2:83:81:e3:
                    2b:56:f7:54:c1:87:b1:7f:5f:a1:7d:48:c3:13:84:
                    1d:52:e7:58:92:c4:b9:df:0a:b8:16:0b:19:2b:29:
                    60:b4:07:b1:15:ba:69:76:6e:41:9b:0d:3b:b6:70:
                    6d:82:4f:f5:60:5c:a3:c0:19:90:04:ed:54:b1:00:
                    56:8b:ac:0e:60:7f:51:b9:99:4f:f7:ba:60:ce:53:
                    fd:21:fd:95:f9:b1:4f:f1:c8:c1:be:b0:25:02:0c:
                    b4:b2:83:c1:ec:ce:b8:b3:41:b3:98:d8:d9:f0:21:
                    a0:3b:8d:5b:20:49:b3:fc:28:ff:03:12:8e:e2:06:
                    77:36:c0:7d:9a:f1:91:51:57:1d:ef:52:8a:a3:fa:
                    65:0b:53:31:86:d7:48:ca:c2:fa:d3:66:f2:bc:ae:
                    db:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:33:B4:41:A3:2A:BF:AD:6D:CB:E2:72:47:DE:B0:DE:42:D5:9F:27
            X509v3 Authority Key Identifier:
                keyid:D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232362e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:91:be:b0:44:40:6c:68:37:c1:8c:48:23:f5:a8:bd:77:c6:
         bd:27:f9:0a:16:77:45:84:08:6c:e5:0e:0b:c2:df:47:e4:87:
         39:12:aa:21:b1:e3:d1:ea:86:b5:34:24:21:f8:95:0a:d5:3f:
         fc:6b:54:b8:ca:e3:2e:3a:e2:62:ed:5d:a3:b3:84:f7:7f:6b:
         e9:fb:7b:75:cd:d2:5a:c0:f2:a7:83:b3:5f:bd:e3:da:f9:8f:
         c8:69:64:63:90:86:bc:43:08:7c:4e:44:75:47:e1:64:ba:2b:
         1a:72:d0:2c:37:d5:7c:61:bd:66:4e:7b:ae:a6:ee:dd:a1:98:
         93:db:9e:e9:c7:5a:0d:b6:c1:5f:f6:c0:80:11:b2:f2:12:e2:
         07:53:05:81:5b:cb:21:0a:68:15:1d:ae:60:9e:3c:3c:89:1f:
         ad:32:f2:ea:33:34:bb:1b:23:31:55:4b:2b:f0:75:fd:65:ac:
         f9:0c:ee:3d:dc:5f:4f:b4:9e:89:2f:79:d3:28:b2:b1:39:7d:
         dc:3f:2d:38:31:50:fc:94:53:3d:24:f2:79:0e:2b:d9:a3:a9:
         5e:2d:dd:ff:5c:ba:4e:bc:d8:5c:5e:a3:3e:cc:26:10:a4:6a:
         b4:8a:c4:ec:8e:aa:ba:a8:6a:3c:65:91:05:d2:73:24:6a:a8:
         9e:1e:93:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:51 2025 by rpki-client