Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135352e302f32342d3234203d3e20323636383434.roa
File:                     34352e3233382e3135352e302f32342d3234203d3e20323636383434.roa (raw, json)
Hash identifier:          yJvqk3crMN2qacl9GslGTXfab6v0o2kfp9w9MDzwm70=
Subject key identifier:   E8:58:50:46:1D:87:4A:C4:C3:D4:F5:7C:4C:66:F1:66:4B:85:FC:E2
Certificate issuer:       /CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
Certificate serial:       1D8B9FDD6A8EFF67EDE5FEE6F4BACFD195A557DF
Authority key identifier: A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135352e302f32342d3234203d3e20323636383434.roa
Signing time:             Tue 04 Feb 2025 18:51:53 +0000
ROA not before:           Tue 04 Feb 2025 18:46:53 +0000
ROA not after:            Tue 03 Feb 2026 18:51:53 +0000
asID:                     266844
IP address blocks:        45.238.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8b:9f:dd:6a:8e:ff:67:ed:e5:fe:e6:f4:ba:cf:d1:95:a5:57:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
        Validity
            Not Before: Feb  4 18:46:53 2025 GMT
            Not After : Feb  3 18:51:53 2026 GMT
        Subject: CN=E85850461D874AC4C3D4F57C4C66F1664B85FCE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:86:37:6c:43:86:78:a7:04:6a:84:2e:8b:
                    37:6a:a0:e7:8e:79:bb:76:d9:6b:16:7e:fd:96:34:
                    81:48:ea:2d:07:dd:4e:0b:d5:27:c2:e3:78:25:08:
                    bd:73:d1:81:2d:3d:df:52:ab:85:aa:8a:fa:b2:ea:
                    75:26:4a:af:73:16:c5:82:08:fb:18:54:b3:8b:d1:
                    46:e7:cf:e9:a9:0b:6d:a1:d0:5c:0a:4c:e8:fa:cb:
                    d8:5b:54:cd:ee:3b:9c:fc:85:4a:63:71:19:f5:18:
                    bd:87:07:35:fd:9e:d0:b9:21:e6:19:7a:63:45:0b:
                    51:fa:6a:76:43:b0:19:15:fa:99:be:21:78:cf:d0:
                    d9:84:c7:c6:71:de:a4:af:89:eb:e3:60:5a:a0:c7:
                    37:71:e9:68:80:bf:ee:a4:c2:49:64:e9:72:44:77:
                    90:ba:b5:d9:19:72:40:aa:9f:1f:89:b5:d6:94:12:
                    b4:23:69:f9:ca:88:4a:82:c0:47:fb:b6:2e:3a:56:
                    cf:62:d2:73:ae:df:fb:34:85:d0:3f:86:77:50:7c:
                    5e:d3:1f:0a:8e:d7:a4:c3:8b:0b:ad:dc:31:23:f5:
                    9c:e1:e2:3c:7f:bf:63:2d:6c:d0:5b:2d:b2:d2:b5:
                    58:97:4c:d2:0f:ce:e9:8b:7e:eb:47:a4:dd:88:e2:
                    3f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:58:50:46:1D:87:4A:C4:C3:D4:F5:7C:4C:66:F1:66:4B:85:FC:E2
            X509v3 Authority Key Identifier:
                keyid:A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135352e302f32342d3234203d3e20323636383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:e9:b6:5e:e8:a5:26:7a:f6:e9:25:7b:53:0f:bf:de:ab:c9:
         f7:86:0b:5d:df:99:ae:2d:47:9f:11:52:b2:29:ad:eb:db:28:
         bb:52:3d:72:25:15:c0:c6:3c:43:11:e9:a0:d0:00:6c:e4:d7:
         5c:0b:93:db:67:dc:26:b3:e6:9e:a6:6b:a7:f3:23:b1:08:40:
         f5:13:f1:0e:40:85:8f:e3:49:d0:fb:03:a5:42:91:d7:bf:c8:
         80:54:e3:53:ee:6f:ea:92:f0:5d:a8:fe:6c:c7:88:ac:31:c5:
         70:d3:85:c8:f4:bd:0b:90:72:9d:26:39:8e:25:ca:f9:a6:3f:
         41:e2:c7:04:8c:ba:7a:cf:96:3f:90:a7:22:2c:a7:7f:a4:07:
         43:00:bb:b6:8e:9e:fe:da:2c:a3:92:78:5a:36:6f:28:6e:4f:
         eb:d0:2c:25:c7:94:9b:3a:33:c1:ab:32:3d:98:7c:60:62:66:
         f4:4c:0f:01:42:ea:3a:3e:3d:b6:bb:6e:f1:e0:6d:40:82:ac:
         c7:48:c4:f6:7b:98:41:ac:fb:28:ed:c8:cf:52:e2:a0:44:88:
         5f:0f:42:4f:59:9d:bb:bc:31:e1:90:2d:be:c6:50:c2:be:8b:
         ce:ac:d8:37:a9:c8:6f:f5:98:06:ac:e1:01:74:27:1d:86:49:
         13:ad:38:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:00 2025 by rpki-client