Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130302e302f32332d3237203d3e20323636373930.roa
File:                     34352e3233332e3130302e302f32332d3237203d3e20323636373930.roa (raw, json)
Hash identifier:          MQ9r4l3jZY9AwF+jKZ3IvwAmTsts2/3S8BAFRpEy3B4=
Subject key identifier:   F0:BA:78:79:7C:C0:68:D4:AD:51:6C:9F:63:6C:C5:54:5D:AD:E2:CE
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       2B1E2EB206331D55466208755D5B52B7E0E25F47
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130302e302f32332d3237203d3e20323636373930.roa
Signing time:             Tue 04 Feb 2025 18:01:06 +0000
ROA not before:           Tue 04 Feb 2025 17:56:06 +0000
ROA not after:            Tue 03 Feb 2026 18:01:06 +0000
asID:                     266790
IP address blocks:        45.233.100.0/23 maxlen: 27
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 20:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1e:2e:b2:06:33:1d:55:46:62:08:75:5d:5b:52:b7:e0:e2:5f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Feb  4 17:56:06 2025 GMT
            Not After : Feb  3 18:01:06 2026 GMT
        Subject: CN=F0BA78797CC068D4AD516C9F636CC5545DADE2CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:60:ca:bc:26:f6:a9:ac:76:2a:fa:93:91:3f:
                    11:fa:1c:de:c1:3a:f5:05:90:80:ef:48:08:eb:0b:
                    1a:17:b6:e1:c4:a8:59:c4:40:06:cd:de:89:c7:3f:
                    cf:a4:00:d3:86:f6:1a:5d:79:38:1c:fc:06:fd:8f:
                    33:6f:9f:a6:88:b3:3a:4e:ea:c0:f0:79:32:16:85:
                    d8:f5:48:23:64:cc:d3:23:d6:ca:81:91:a0:9c:06:
                    f9:a8:8a:49:7b:b6:5f:91:1d:f9:9f:9d:ae:e4:94:
                    71:5b:06:af:a3:50:a2:65:40:d8:28:27:ae:11:8f:
                    b8:38:32:57:59:93:e5:52:9f:2f:26:bc:87:94:42:
                    c5:41:11:1d:65:d1:71:8d:69:76:2a:d6:4e:06:6c:
                    06:0a:f5:ae:9f:b6:08:68:2b:95:58:52:d0:90:73:
                    b6:84:51:86:e3:25:5c:54:23:67:cc:53:a6:38:5e:
                    fb:72:37:f9:5e:1b:fe:58:4f:9f:96:2d:27:86:57:
                    c3:bf:fb:d0:a6:79:3f:68:cc:1b:ce:1e:5f:f7:a8:
                    cf:56:af:b9:85:ae:69:88:35:ec:83:a5:80:e7:4d:
                    37:fa:88:7a:ee:46:8a:66:57:44:e2:24:78:f6:32:
                    84:8d:3b:be:6b:7a:54:6c:4e:ff:57:a0:60:16:8f:
                    f4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BA:78:79:7C:C0:68:D4:AD:51:6C:9F:63:6C:C5:54:5D:AD:E2:CE
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130302e302f32332d3237203d3e20323636373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:e2:3f:45:22:33:5c:2f:39:06:91:a7:bf:67:29:d1:d8:54:
         38:ed:be:fa:ab:a6:6f:eb:97:78:bf:ab:98:b5:5d:a5:68:7d:
         ce:ba:0c:3f:76:71:f8:2d:d9:55:c0:57:ec:53:05:59:fb:d8:
         d7:2f:73:d4:e3:10:f8:0e:bf:98:65:3b:c4:36:f8:21:77:bd:
         89:86:b0:50:0d:d0:4d:45:a6:cb:53:01:cd:cb:7b:fd:34:36:
         c3:ad:70:87:31:f2:55:1a:f1:f9:e8:3d:d7:db:27:94:01:81:
         ec:05:19:16:59:85:e4:13:c7:d1:0e:4c:dc:69:f4:36:91:69:
         91:91:1d:21:7b:89:33:a9:eb:d0:2d:56:b8:35:9e:d8:1d:94:
         ea:4d:b4:f3:eb:76:51:86:86:13:db:67:86:2b:67:64:94:40:
         fe:91:76:16:a2:d4:e2:fa:be:3e:71:b6:4e:52:fa:e3:a6:16:
         54:83:03:48:14:61:a8:f7:5f:7f:65:a7:23:dc:c7:2b:cf:9d:
         91:78:0f:95:32:75:28:2d:64:06:4a:59:de:07:6e:0e:4b:2c:
         7c:ce:dd:60:1b:09:6e:52:ad:7f:69:5a:e3:4b:a4:37:3c:53:
         5c:c1:86:4d:df:91:94:6d:14:1d:31:ce:a4:2b:bf:d8:32:2a:
         5d:74:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:52:12 2025 by rpki-client