Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/34352e3138312e3230362e302f32342d3234203d3e20323639373337.roa
File:                     34352e3138312e3230362e302f32342d3234203d3e20323639373337.roa (raw, json)
Hash identifier:          MQ+yBH09PLmC7EOvAZIIXyGhyEzJPYxN5MsgiehGBNU=
Subject key identifier:   1A:80:86:60:84:B1:E9:F1:D5:50:72:FC:6F:8A:FB:90:8F:85:4E:E2
Certificate issuer:       /CN=851F72AF17FC1DA87BB197750BC5B43F401D78D2
Certificate serial:       69C184844582F751C57D3AC0C2114E6C1AFFD1E5
Authority key identifier: 85:1F:72:AF:17:FC:1D:A8:7B:B1:97:75:0B:C5:B4:3F:40:1D:78:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/34352e3138312e3230362e302f32342d3234203d3e20323639373337.roa
Signing time:             Tue 04 Feb 2025 18:28:26 +0000
ROA not before:           Tue 04 Feb 2025 18:23:26 +0000
ROA not after:            Tue 03 Feb 2026 18:28:26 +0000
asID:                     269737
IP address blocks:        45.181.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c1:84:84:45:82:f7:51:c5:7d:3a:c0:c2:11:4e:6c:1a:ff:d1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851F72AF17FC1DA87BB197750BC5B43F401D78D2
        Validity
            Not Before: Feb  4 18:23:26 2025 GMT
            Not After : Feb  3 18:28:26 2026 GMT
        Subject: CN=1A80866084B1E9F1D55072FC6F8AFB908F854EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:81:61:b3:df:d9:17:f8:20:b0:0c:15:cf:
                    99:2b:2e:9f:42:57:8d:e3:a7:f6:12:45:ea:ea:57:
                    18:e3:a8:a5:e4:74:f5:fb:48:63:e0:3d:b5:7d:cc:
                    b4:ca:26:32:4b:0b:14:86:f4:fe:3c:95:be:2c:26:
                    99:05:03:89:87:84:41:7d:52:d5:99:9c:27:66:a5:
                    a3:97:6c:7e:8f:7c:30:8c:bf:ab:4a:8e:9f:21:82:
                    79:b3:2d:b6:8a:e4:11:49:5a:98:6b:06:60:98:f0:
                    b8:20:44:0d:de:22:d6:25:0c:0f:dc:4c:00:c2:8a:
                    e5:da:db:c6:9c:82:1f:2e:5b:cf:6b:74:9e:68:47:
                    86:1e:a1:87:08:fc:73:69:9d:46:41:29:6f:f3:62:
                    ce:92:97:a1:80:d5:4b:e9:e2:1b:66:c3:47:35:9a:
                    f2:1c:99:29:bd:c2:eb:3f:14:f7:62:7a:42:6f:72:
                    89:f4:49:97:df:71:8f:fe:a6:2a:57:b1:79:57:82:
                    c4:a0:76:78:42:93:4b:d3:7a:17:b2:97:4a:b7:d8:
                    b0:27:68:60:9c:d0:b0:cd:82:bc:76:06:fc:11:97:
                    27:bc:8d:d1:32:00:61:34:dc:9b:b1:42:48:d0:7b:
                    5b:de:b2:a3:d4:f0:11:fa:93:8f:c6:bf:98:10:de:
                    bd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:80:86:60:84:B1:E9:F1:D5:50:72:FC:6F:8A:FB:90:8F:85:4E:E2
            X509v3 Authority Key Identifier:
                keyid:85:1F:72:AF:17:FC:1D:A8:7B:B1:97:75:0B:C5:B4:3F:40:1D:78:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/34352e3138312e3230362e302f32342d3234203d3e20323639373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:e0:1f:33:d4:9f:5f:15:3c:5f:80:c6:15:69:a9:1d:6b:16:
         26:7e:6f:56:a7:b5:23:cf:af:67:59:f0:bf:a3:bb:8c:47:57:
         d9:b5:d3:3f:db:59:8c:9d:b0:49:91:c9:f4:86:12:09:24:bc:
         9a:d5:cc:e1:62:85:e3:02:e5:8a:c9:6a:80:a7:0e:ed:ce:7a:
         ea:28:7f:cb:77:5f:8f:95:19:19:28:c3:84:a7:3d:92:0f:05:
         87:6c:e8:bb:64:46:43:47:91:12:04:45:48:7c:7b:98:fd:8f:
         a4:58:0e:2e:88:43:14:a3:e7:20:a5:8d:b5:f7:76:dd:12:86:
         00:2e:4b:c3:0a:52:ff:8b:ac:f1:be:a1:57:1c:2c:c3:5c:c8:
         68:90:7e:d5:ff:ad:37:ac:28:7a:10:41:1c:81:6c:b5:cc:ba:
         b4:49:46:a2:3e:06:61:ec:91:18:a8:f4:fe:a6:eb:d2:37:26:
         05:3c:77:96:bb:0b:58:c7:f8:f6:a0:bc:bd:00:a1:d4:b9:7d:
         e1:3d:4d:c8:28:53:90:98:d9:bc:65:5a:4b:f3:e4:31:6f:f4:
         5c:b3:cb:8e:eb:82:32:09:9d:4d:95:83:21:9e:fe:af:52:2a:
         84:40:94:b9:cb:f7:73:b9:b4:62:56:c3:8f:79:7d:10:a8:dc:
         ae:22:33:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:43:07 2025 by rpki-client