Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/34352e3139312e3137362e302f32322d3234203d3e20323639393137.roa
File:                     34352e3139312e3137362e302f32322d3234203d3e20323639393137.roa (raw, json)
Hash identifier:          hANoz7fYREFZjCuQDLPC4NdNy2Gk0ppEm4fXNOwpNvg=
Subject key identifier:   53:7D:0F:A4:52:B9:F8:E7:60:33:61:76:FB:BD:55:E5:49:2D:D6:EC
Certificate issuer:       /CN=BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06
Certificate serial:       687A8EB815B6106D71091CC9BBD9FE5553919D30
Authority key identifier: BB:28:B6:37:F6:EE:7E:D7:74:48:EE:A8:BD:B8:44:1F:DD:54:DB:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/34352e3139312e3137362e302f32322d3234203d3e20323639393137.roa
Signing time:             Tue 04 Feb 2025 20:02:56 +0000
ROA not before:           Tue 04 Feb 2025 19:57:56 +0000
ROA not after:            Tue 03 Feb 2026 20:02:56 +0000
asID:                     269917
IP address blocks:        45.191.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7a:8e:b8:15:b6:10:6d:71:09:1c:c9:bb:d9:fe:55:53:91:9d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06
        Validity
            Not Before: Feb  4 19:57:56 2025 GMT
            Not After : Feb  3 20:02:56 2026 GMT
        Subject: CN=537D0FA452B9F8E760336176FBBD55E5492DD6EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:12:f8:7d:25:53:9d:ee:3f:25:1b:c0:e5:d2:
                    9a:ec:27:37:c1:69:76:25:33:1e:bd:33:f2:f7:96:
                    2b:23:80:2f:b0:4f:19:6a:54:a2:87:7f:e2:09:32:
                    d8:27:29:2d:d6:23:74:8b:4f:d1:ba:ab:0b:25:f3:
                    9b:87:d4:f3:19:18:0c:d2:08:bb:c6:5d:37:62:c6:
                    27:b6:f5:ef:48:36:14:ba:6c:c2:f9:bd:27:74:c6:
                    d2:9c:50:89:38:c5:d4:41:09:42:2c:9b:c8:dc:bd:
                    c1:65:60:40:88:62:fb:38:cc:15:d5:0a:c8:aa:77:
                    7d:f0:77:f4:d3:7d:3e:81:0b:aa:11:ae:f8:9c:ef:
                    67:d4:b9:a1:02:17:e4:d7:42:af:ca:dd:ca:c4:bb:
                    7a:7e:10:f1:53:10:f0:2c:4b:be:a4:13:31:60:36:
                    b8:75:bf:5f:b7:e4:8a:c9:a4:9b:61:0c:1d:d8:0e:
                    4c:3e:0b:c2:32:09:fd:21:76:4a:34:f6:47:c5:d6:
                    a0:f8:b8:50:bb:58:44:32:5e:39:78:05:70:74:b9:
                    27:55:19:b3:3b:95:d7:6b:00:65:c0:8b:f0:0f:dd:
                    61:46:b9:61:ab:6d:84:5c:31:ae:b0:77:75:70:64:
                    1c:6f:d9:7d:85:35:1f:fe:a0:c1:5a:d8:de:de:80:
                    86:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7D:0F:A4:52:B9:F8:E7:60:33:61:76:FB:BD:55:E5:49:2D:D6:EC
            X509v3 Authority Key Identifier:
                keyid:BB:28:B6:37:F6:EE:7E:D7:74:48:EE:A8:BD:B8:44:1F:DD:54:DB:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB28B637F6EE7ED77448EEA8BDB8441FDD54DB06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0413618314162654813A045056F6DA6351CF5B04AB331DDAAE6AA8E13BB0AB7/0/34352e3139312e3137362e302f32322d3234203d3e20323639393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:ef:6c:b2:93:f5:ee:d3:fc:47:51:e9:f9:40:8f:b4:9c:fb:
         6a:44:ed:53:0a:be:dd:f5:dc:46:a7:a8:37:d1:41:c9:19:98:
         b3:38:dc:0f:aa:8b:cd:49:ba:2f:69:0a:36:6b:75:22:80:5c:
         10:3e:e6:ff:22:61:98:96:39:bf:f8:71:84:3e:48:c0:2e:cd:
         69:ea:fb:9c:93:8d:6e:df:54:59:1d:63:9a:68:b6:37:4e:b8:
         bb:08:0e:30:7e:38:c8:51:22:eb:4e:35:6c:ca:f1:53:02:47:
         8e:4a:e7:76:ef:cb:30:cc:d9:b5:d6:bd:77:e9:e9:ee:6a:71:
         01:41:fd:b3:f7:9d:56:6c:15:3b:a7:33:c6:81:89:75:4d:83:
         17:11:2d:fd:6d:c0:8a:af:44:af:28:e9:a7:91:d0:4f:9f:65:
         48:73:32:8b:c6:1f:15:2c:91:d5:57:ad:fc:8a:1d:46:84:14:
         a7:16:fc:6d:9e:55:74:72:17:4d:e9:ef:c6:10:31:31:70:ad:
         f5:65:34:3a:50:12:f3:7a:f5:4b:47:ff:bf:47:0b:d4:f8:05:
         4f:8b:bb:11:7f:f4:d4:ce:70:8b:b2:40:4f:09:42:9c:31:4d:
         b0:02:2e:65:54:c5:03:97:93:0f:2e:d9:e7:a3:57:40:29:68:
         e2:6a:e6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:36:41 2025 by rpki-client