Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/34352e352e36382e302f32342d3234203d3e20323635363931.roa
File:                     34352e352e36382e302f32342d3234203d3e20323635363931.roa (raw, json)
Hash identifier:          OMWW0YsHEKittUZKW0jaWaATfmMa/oMDlecqVdDapds=
Subject key identifier:   20:8C:A6:BE:43:93:F8:D2:78:6D:43:82:97:F5:2A:36:66:8E:C3:26
Certificate issuer:       /CN=E7A27C8F6CDCF649D79DE823E920014569787295
Certificate serial:       3937127D9A12DC8E8B183CF5FB1CF86DFA4680BB
Authority key identifier: E7:A2:7C:8F:6C:DC:F6:49:D7:9D:E8:23:E9:20:01:45:69:78:72:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/34352e352e36382e302f32342d3234203d3e20323635363931.roa
Signing time:             Tue 04 Feb 2025 19:57:59 +0000
ROA not before:           Tue 04 Feb 2025 19:52:59 +0000
ROA not after:            Tue 03 Feb 2026 19:57:59 +0000
asID:                     265691
IP address blocks:        45.5.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:37:12:7d:9a:12:dc:8e:8b:18:3c:f5:fb:1c:f8:6d:fa:46:80:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7A27C8F6CDCF649D79DE823E920014569787295
        Validity
            Not Before: Feb  4 19:52:59 2025 GMT
            Not After : Feb  3 19:57:59 2026 GMT
        Subject: CN=208CA6BE4393F8D2786D438297F52A36668EC326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e7:eb:08:8c:89:1e:c0:46:08:d6:80:bc:8b:
                    0f:69:0c:30:a0:b8:10:25:25:55:e9:1f:4b:c0:6f:
                    a7:e9:19:31:ef:b6:8f:9c:f8:e1:77:dc:7a:3b:63:
                    72:94:06:6f:3e:5e:2f:1f:b4:83:b2:fd:4f:9d:a9:
                    c3:1e:33:b6:f6:2b:db:77:7b:61:77:fe:d5:1f:1d:
                    41:43:1f:3c:6d:9f:78:57:48:e8:bb:0c:93:4d:95:
                    59:b5:ad:ae:bd:76:72:63:10:5c:c2:d4:9f:88:cd:
                    da:23:27:ea:2f:ee:8a:39:53:4c:e0:ad:43:87:25:
                    b0:b4:5c:c5:30:2f:ee:37:82:0e:c1:c6:fc:54:ab:
                    8d:21:5d:5c:e0:1c:20:d0:dd:a3:7c:b9:32:1d:13:
                    91:bf:ba:62:64:e1:3b:e1:0d:0c:2a:b8:0c:b9:21:
                    49:e2:54:0a:f7:b4:0a:c5:e7:38:87:61:d2:60:c4:
                    28:76:e7:10:85:05:d1:15:47:55:eb:27:66:58:a3:
                    cb:15:98:08:b4:0a:82:04:bc:77:7e:ef:c7:8e:22:
                    5f:d8:ce:76:79:d5:f0:c6:d0:13:f5:82:ac:09:40:
                    7c:94:f4:ad:21:5a:01:8f:f0:91:89:88:ce:2d:a0:
                    2f:d3:f3:a4:09:5f:96:2d:cc:b7:fd:37:40:e4:8d:
                    52:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8C:A6:BE:43:93:F8:D2:78:6D:43:82:97:F5:2A:36:66:8E:C3:26
            X509v3 Authority Key Identifier:
                keyid:E7:A2:7C:8F:6C:DC:F6:49:D7:9D:E8:23:E9:20:01:45:69:78:72:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/34352e352e36382e302f32342d3234203d3e20323635363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:c2:a0:3c:44:7b:99:fb:fb:cb:6d:ff:a6:54:9c:01:e0:b5:
         60:1d:1f:a4:d0:d1:7f:99:3b:9f:a1:32:fc:63:c0:80:c5:f7:
         a5:4e:ce:e3:15:a4:0d:d6:54:a9:43:28:fa:42:ac:8f:e1:a2:
         fe:d7:69:04:4e:ce:18:a6:f8:93:f0:8c:20:d3:8f:22:b3:2d:
         70:c9:47:cb:5a:f3:66:1d:70:7c:c7:f3:87:88:d9:39:11:e0:
         bd:54:bd:91:d5:0a:1d:ac:54:78:11:7a:37:ec:04:f0:97:a6:
         35:bd:86:1a:c8:0e:b5:52:35:52:86:91:02:72:db:cf:20:7f:
         cc:59:c5:ea:6c:b1:44:1c:73:be:80:47:e8:0e:cd:23:eb:17:
         8d:ec:f7:e2:2a:81:29:5d:4c:5b:45:2a:28:19:3c:3e:07:e9:
         1e:1c:5e:b4:a9:e2:72:8f:3c:c3:40:b0:1e:7c:16:04:b4:f9:
         a6:63:63:ff:e7:7d:ca:22:4e:f0:9e:48:3a:a6:12:9a:12:76:
         2d:0b:43:0f:2c:cd:1d:f6:ee:93:9a:96:84:6d:94:13:ef:94:
         96:c9:68:c6:c9:25:75:12:16:d1:84:5c:27:9b:86:30:8a:7a:
         fc:d3:8d:01:85:e5:a3:c0:d7:95:34:84:5d:0f:a2:0a:d8:7b:
         e8:98:66:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:42 2025 by rpki-client