Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135322e302f32342d3234203d3e20323636383434.roa
File:                     34352e3233382e3135322e302f32342d3234203d3e20323636383434.roa (raw, json)
Hash identifier:          6HpxVCjBFC6iCl4vVkEKxKs/cOVFTlWDe6NSX8fDVNI=
Subject key identifier:   25:06:14:14:62:56:81:E2:C1:8B:82:8C:99:51:E3:44:03:AA:8F:79
Certificate issuer:       /CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
Certificate serial:       55078D560591CB57A3FF08293A7D4DD25E6B17A4
Authority key identifier: A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135322e302f32342d3234203d3e20323636383434.roa
Signing time:             Tue 04 Feb 2025 18:51:53 +0000
ROA not before:           Tue 04 Feb 2025 18:46:53 +0000
ROA not after:            Tue 03 Feb 2026 18:51:53 +0000
asID:                     266844
IP address blocks:        45.238.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:07:8d:56:05:91:cb:57:a3:ff:08:29:3a:7d:4d:d2:5e:6b:17:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
        Validity
            Not Before: Feb  4 18:46:53 2025 GMT
            Not After : Feb  3 18:51:53 2026 GMT
        Subject: CN=25061414625681E2C18B828C9951E34403AA8F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:b0:ba:ec:53:e3:fc:d9:df:1e:b0:78:ff:
                    72:97:8a:eb:e3:1e:d1:e6:08:df:86:48:09:b7:f4:
                    9d:1d:3d:2d:f3:50:9d:53:f8:01:77:de:ce:6a:7b:
                    f5:f3:3d:b8:82:4d:8d:44:3b:de:a0:d2:fd:43:3e:
                    b2:6c:05:5a:de:9c:f3:5d:5c:6e:40:d1:93:0f:de:
                    31:30:a7:40:f8:3b:f3:78:bb:a6:f6:c8:e4:09:b1:
                    68:cd:df:84:da:ad:36:0b:03:a5:6f:4a:87:27:0c:
                    1f:46:24:7a:0b:3a:de:68:96:bf:bb:15:87:2c:34:
                    49:d6:1e:ac:5f:ee:ab:8e:03:68:f8:ab:26:36:68:
                    fc:fc:c1:00:4f:a9:0c:4c:81:9b:99:9f:aa:09:ab:
                    ce:f0:b9:80:ce:18:61:c1:fd:47:7f:96:f6:ae:53:
                    5f:83:0c:be:43:d0:94:d7:37:ed:d5:e8:42:40:6b:
                    cf:e5:39:a6:d9:97:8a:8e:80:4a:59:c7:bf:05:13:
                    42:2a:96:3a:6f:dd:9d:a1:29:42:cc:f2:44:27:a7:
                    45:fa:c3:b1:3e:aa:c2:34:e8:8d:ae:a1:19:45:ee:
                    a3:d6:82:a9:95:b9:42:f7:e8:99:57:96:08:78:95:
                    0f:ab:41:be:df:4b:b4:e4:7f:43:84:34:8b:82:56:
                    d0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:06:14:14:62:56:81:E2:C1:8B:82:8C:99:51:E3:44:03:AA:8F:79
            X509v3 Authority Key Identifier:
                keyid:A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135322e302f32342d3234203d3e20323636383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:3d:5d:c1:cc:16:52:03:f9:81:ad:bd:22:cc:33:cb:4a:c2:
         89:d1:ac:47:84:f9:c7:6c:2f:9b:bb:f0:8f:b5:10:5e:0c:df:
         a6:eb:19:1b:ba:2e:4a:b5:b3:17:29:7d:d0:bc:b9:1e:87:70:
         a8:ba:4a:7a:bd:da:44:70:c6:d6:9c:3c:61:27:22:c2:28:77:
         27:58:60:85:84:38:2a:05:a6:0e:b7:28:2f:f0:9a:ed:7d:25:
         f3:57:07:89:f5:a2:6b:e1:2d:55:55:71:03:a2:22:52:7e:07:
         cc:d5:9b:08:d3:7c:ee:99:61:d1:cd:35:53:bd:3d:cb:82:3f:
         f2:45:88:59:65:26:bb:2b:46:c1:f0:41:83:07:a0:2f:d7:80:
         78:e2:45:ad:95:76:58:35:be:45:a0:02:83:2f:c0:5d:cc:4c:
         b7:34:be:9e:8a:21:39:b2:e6:03:50:be:c4:36:34:02:a9:80:
         ee:8a:ab:d0:59:fe:71:e7:8a:bd:b4:02:79:37:a0:76:e7:25:
         a8:92:7d:79:1f:c5:ee:98:58:29:64:e9:76:ec:16:1d:61:00:
         0d:a8:73:0c:96:c1:85:c3:1e:30:5e:9f:f7:47:5e:e2:72:43:
         74:c4:68:e4:8d:27:4d:74:f2:b9:ea:5e:ac:3d:8b:6b:20:48:
         33:2b:29:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:34 2025 by rpki-client