Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138352e302f32342d3234203d3e20323639383734.roa
File:                     34352e3138392e3138352e302f32342d3234203d3e20323639383734.roa (raw, json)
Hash identifier:          aDDLX+oePmPyqReHkT1xWX2d5sValEBGapFgmp4sdu8=
Subject key identifier:   E3:F3:98:42:80:DF:D2:37:1B:81:5B:5C:25:A9:C7:F6:31:C6:30:9F
Certificate issuer:       /CN=A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A
Certificate serial:       2E82FAACF1F2773D1C623CEFBCAFC4DD7060AC27
Authority key identifier: A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138352e302f32342d3234203d3e20323639383734.roa
Signing time:             Tue 04 Feb 2025 18:04:43 +0000
ROA not before:           Tue 04 Feb 2025 17:59:43 +0000
ROA not after:            Tue 03 Feb 2026 18:04:43 +0000
asID:                     269874
IP address blocks:        45.189.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:82:fa:ac:f1:f2:77:3d:1c:62:3c:ef:bc:af:c4:dd:70:60:ac:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A
        Validity
            Not Before: Feb  4 17:59:43 2025 GMT
            Not After : Feb  3 18:04:43 2026 GMT
        Subject: CN=E3F3984280DFD2371B815B5C25A9C7F631C6309F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:9d:e4:7e:13:aa:e8:45:70:b7:d7:07:4e:
                    b2:23:d0:bc:70:d2:0f:71:f1:1b:79:50:2c:0f:50:
                    e3:7d:9a:8e:00:93:e2:c8:63:cd:e0:1e:a6:c9:4e:
                    7f:c1:58:56:c6:50:43:1a:01:ee:3e:35:06:da:c8:
                    2d:c4:d9:f6:d6:4f:3a:08:a1:2c:33:44:a3:79:b3:
                    98:a5:5b:0c:4c:10:1b:1f:e7:ad:16:cd:f7:07:4b:
                    e8:de:d6:05:00:1b:21:f8:2e:f1:d6:fa:5e:93:58:
                    eb:6b:82:44:5f:e1:57:92:b8:f3:46:ea:bf:7a:77:
                    81:5d:f5:3b:06:78:b5:f6:52:8b:97:66:13:11:bf:
                    d4:ef:c2:0f:2a:6c:cd:90:3e:8d:75:17:8c:b7:63:
                    d1:a3:60:35:a0:9e:c8:16:cd:6f:27:26:da:49:61:
                    2b:fd:9e:bc:be:15:0e:ae:51:62:47:8e:03:90:81:
                    90:09:46:e5:4d:60:08:af:f5:6d:24:59:01:9a:e6:
                    22:73:70:42:4a:91:95:42:9f:e2:31:a7:84:a9:8e:
                    bc:77:5e:93:8d:d8:82:8d:7c:88:33:5d:0d:30:66:
                    23:e5:ac:68:73:c2:d2:09:ae:38:49:95:2f:56:d2:
                    98:ae:89:31:3e:c7:cb:70:34:2e:1a:9f:35:8b:33:
                    0a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F3:98:42:80:DF:D2:37:1B:81:5B:5C:25:A9:C7:F6:31:C6:30:9F
            X509v3 Authority Key Identifier:
                keyid:A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138352e302f32342d3234203d3e20323639383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:87:c7:be:87:36:7d:8f:43:69:67:c7:3c:d7:44:77:b2:27:
         fb:bc:88:b4:b9:1f:b8:4a:53:5c:54:ac:20:d4:1e:3e:62:d7:
         ba:7f:e4:6a:c8:d9:5b:29:47:97:ea:57:d8:42:9b:2e:f9:1a:
         b8:e5:e3:e9:f5:9a:49:59:a2:3f:bb:06:53:06:51:18:ca:2f:
         12:d6:02:c2:eb:ff:ee:78:11:ce:0d:80:9a:bd:96:ef:a2:40:
         b1:31:c2:05:04:65:15:15:f7:9a:50:9d:d3:91:08:6b:a5:89:
         32:c3:bf:fe:bc:bc:8e:1d:cb:fc:d9:17:6f:2b:5a:9c:ef:3d:
         28:5e:21:5f:43:42:90:97:3a:a7:ee:4e:2d:57:be:10:e8:30:
         47:a2:00:e7:5a:36:ce:5e:ca:14:2b:03:4a:a9:c7:c8:13:ea:
         fa:9e:d8:5d:9c:66:f6:9e:b2:ff:32:7f:7a:29:6b:5d:25:35:
         60:19:73:29:50:59:97:70:6a:13:db:39:f8:64:fe:0a:d2:a9:
         4b:8d:c0:9c:62:80:e3:69:ab:47:11:7a:b1:08:1f:65:57:9e:
         f2:a6:25:56:b7:10:fa:93:6f:0e:27:78:9f:b2:ca:b1:30:23:
         98:d8:e3:49:cf:e7:e8:16:2c:15:ed:2e:1d:92:10:08:ae:bb:
         30:97:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:48 2025 by rpki-client