Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1D83E7D62FF9F2819B8397A5B0C0700A38D9C86143647E7EA6A7065A22B37A4/0/34352e3137342e32302e302f32322d3234203d3e20323636383036.roa
File:                     34352e3137342e32302e302f32322d3234203d3e20323636383036.roa (raw, json)
Hash identifier:          sM7888QHqPgeJI8Ar8RrUk1CuX5joecm5t5LL1yETeM=
Subject key identifier:   7B:50:E8:33:5A:66:68:CB:53:9B:9A:45:98:1D:3C:E0:63:B8:61:F8
Certificate issuer:       /CN=49B598270D6A49A2FED8BA121D3BBE19726010C9
Certificate serial:       75C066813B524744F9527FD666A18CDAFAA9EA
Authority key identifier: 49:B5:98:27:0D:6A:49:A2:FE:D8:BA:12:1D:3B:BE:19:72:60:10:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49B598270D6A49A2FED8BA121D3BBE19726010C9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1D83E7D62FF9F2819B8397A5B0C0700A38D9C86143647E7EA6A7065A22B37A4/0/34352e3137342e32302e302f32322d3234203d3e20323636383036.roa
Signing time:             Tue 04 Feb 2025 18:04:15 +0000
ROA not before:           Tue 04 Feb 2025 17:59:15 +0000
ROA not after:            Tue 03 Feb 2026 18:04:15 +0000
asID:                     266806
IP address blocks:        45.174.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D1D83E7D62FF9F2819B8397A5B0C0700A38D9C86143647E7EA6A7065A22B37A4/0/49B598270D6A49A2FED8BA121D3BBE19726010C9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D1D83E7D62FF9F2819B8397A5B0C0700A38D9C86143647E7EA6A7065A22B37A4/0/49B598270D6A49A2FED8BA121D3BBE19726010C9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49B598270D6A49A2FED8BA121D3BBE19726010C9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c0:66:81:3b:52:47:44:f9:52:7f:d6:66:a1:8c:da:fa:a9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49B598270D6A49A2FED8BA121D3BBE19726010C9
        Validity
            Not Before: Feb  4 17:59:15 2025 GMT
            Not After : Feb  3 18:04:15 2026 GMT
        Subject: CN=7B50E8335A6668CB539B9A45981D3CE063B861F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ae:a4:8c:ef:93:01:83:f9:45:31:ab:9c:a5:
                    53:aa:62:73:a9:4f:f7:1c:03:ca:a5:d8:7a:4c:79:
                    0d:a0:fe:10:29:e8:f2:29:7e:28:d3:cc:55:15:e7:
                    85:01:df:ca:ee:3e:34:8d:2d:b1:57:26:47:76:c9:
                    c5:97:e6:4e:9f:fe:58:24:fd:29:df:a6:18:69:5e:
                    d3:66:86:94:ad:c9:75:1b:d5:62:7c:1e:31:8c:a4:
                    99:44:b1:e5:28:50:36:90:25:18:10:25:5c:cb:aa:
                    51:4a:1f:43:18:b9:cf:82:c3:be:a8:c2:6e:7e:6f:
                    28:4c:94:4e:0d:ef:68:28:9f:7c:47:8b:d4:a8:e7:
                    93:80:4f:02:45:18:04:31:21:60:ed:59:46:dd:e2:
                    30:73:7d:82:df:aa:1b:cf:23:56:0a:bd:ce:4a:87:
                    58:f7:3c:25:71:a8:92:01:e0:55:fd:1c:e8:32:29:
                    fb:93:91:b8:2e:9e:9f:1d:cc:20:6b:e4:6b:8b:17:
                    74:0a:01:9f:9f:d7:b9:72:e5:af:7b:41:08:c4:5b:
                    eb:29:44:4d:64:23:32:4e:3a:bd:b3:3e:c4:11:bf:
                    0b:cd:90:2e:70:5b:08:97:06:b5:8e:c1:ba:50:46:
                    10:80:b7:52:73:46:30:33:f5:97:06:f3:03:cd:ad:
                    06:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:50:E8:33:5A:66:68:CB:53:9B:9A:45:98:1D:3C:E0:63:B8:61:F8
            X509v3 Authority Key Identifier:
                keyid:49:B5:98:27:0D:6A:49:A2:FE:D8:BA:12:1D:3B:BE:19:72:60:10:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1D83E7D62FF9F2819B8397A5B0C0700A38D9C86143647E7EA6A7065A22B37A4/0/49B598270D6A49A2FED8BA121D3BBE19726010C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49B598270D6A49A2FED8BA121D3BBE19726010C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1D83E7D62FF9F2819B8397A5B0C0700A38D9C86143647E7EA6A7065A22B37A4/0/34352e3137342e32302e302f32322d3234203d3e20323636383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:78:55:3d:75:f9:0a:8d:e3:80:15:17:93:93:cb:c0:d9:73:
         bf:a3:2b:18:3a:96:dc:f7:a2:24:cd:0b:1c:00:21:66:97:db:
         06:36:6a:98:b0:58:72:45:8c:96:ec:42:53:64:cf:21:c5:b0:
         d5:14:c9:42:89:25:bd:9d:19:ee:cf:90:e4:dd:b8:94:b9:7a:
         4a:12:a7:8f:1d:01:9f:ea:17:20:28:2e:77:58:37:3e:91:12:
         c4:30:3d:86:f4:ae:c6:ca:69:b9:32:5a:a3:d5:20:32:65:93:
         52:1d:71:84:7f:bb:ed:c0:0a:12:b8:dd:af:3e:73:10:da:a0:
         c9:0b:c3:2d:cd:d0:ee:57:af:98:f3:5e:43:26:0f:05:cd:11:
         9a:18:c7:d0:6c:2c:4f:40:15:66:f7:8a:1e:ad:50:f4:99:8e:
         76:33:15:b6:88:fa:36:3e:8e:3f:0d:01:20:2b:51:f5:52:16:
         e8:60:b8:9e:b3:9c:0e:b1:d4:8f:6f:3f:1b:54:44:af:37:7a:
         06:76:51:58:da:e5:d5:37:56:e4:9a:29:3e:a2:88:1c:1a:f7:
         44:5a:5b:6e:5d:b5:8b:af:34:dc:1f:a1:0c:81:ce:96:af:9a:
         02:3f:19:25:a2:bb:46:31:1f:23:04:e3:35:35:99:f0:02:a2:
         dd:f4:12:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:49:43 2025 by rpki-client