Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/34352e3136342e36342e302f32322d3234203d3e20323637363939.roa
File:                     34352e3136342e36342e302f32322d3234203d3e20323637363939.roa (raw, json)
Hash identifier:          fJX7rTzO0Yb4hjd2pvnGenGyvmMicaOzk1Rx6HWY5l4=
Subject key identifier:   B4:8A:99:75:5C:CF:FE:0F:5C:29:2D:4B:FC:ED:4E:AF:AF:9C:E9:0A
Certificate issuer:       /CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
Certificate serial:       2E6BBBCAFB67921666450F91A8716C080C4B9C9C
Authority key identifier: 02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/34352e3136342e36342e302f32322d3234203d3e20323637363939.roa
Signing time:             Tue 04 Feb 2025 18:04:53 +0000
ROA not before:           Tue 04 Feb 2025 17:59:53 +0000
ROA not after:            Tue 03 Feb 2026 18:04:53 +0000
asID:                     267699
IP address blocks:        45.164.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6b:bb:ca:fb:67:92:16:66:45:0f:91:a8:71:6c:08:0c:4b:9c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02B881E65D6C311F6B248CD1A44B07782782D3C5
        Validity
            Not Before: Feb  4 17:59:53 2025 GMT
            Not After : Feb  3 18:04:53 2026 GMT
        Subject: CN=B48A99755CCFFE0F5C292D4BFCED4EAFAF9CE90A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ed:31:55:e1:04:cc:66:c9:0e:36:92:f1:a9:
                    e4:7b:bd:4c:28:e6:da:9b:00:aa:45:2d:25:ad:49:
                    e5:7c:25:61:d1:03:24:e8:95:b2:86:ba:30:0c:58:
                    52:a4:a3:b0:12:81:bf:d8:57:55:f0:1c:3c:84:32:
                    d9:72:d6:9a:2d:6c:3b:9b:0a:c2:6a:fe:4f:a2:7b:
                    2d:d3:60:39:15:27:24:1e:8b:b8:c3:71:aa:c7:1c:
                    47:03:48:d6:44:cd:ad:73:0d:7a:89:ab:53:49:3c:
                    7f:6d:1d:50:90:8f:52:7c:39:32:4d:97:87:02:8d:
                    ff:8a:e3:41:0c:b6:7b:6c:37:b5:af:08:dd:09:05:
                    0d:58:bb:2e:1e:07:39:7f:df:83:2a:a9:a3:03:18:
                    0e:59:51:78:31:99:2c:85:87:67:56:6b:e8:80:26:
                    71:5e:58:f9:ce:49:85:48:b9:1e:8a:74:f8:5b:c5:
                    c8:5e:e6:69:ee:86:ec:cc:c0:f9:54:cd:9f:4e:b8:
                    dd:b7:aa:17:aa:8f:ce:75:99:27:15:7c:a8:3d:50:
                    24:fd:96:dc:21:90:eb:f0:4a:67:c0:b2:5b:57:dd:
                    56:a4:e3:d1:f8:cd:01:d6:b0:9a:cf:51:bd:ff:83:
                    24:b0:cb:ad:fe:ea:7c:08:38:26:d1:b4:f6:d6:7d:
                    cb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8A:99:75:5C:CF:FE:0F:5C:29:2D:4B:FC:ED:4E:AF:AF:9C:E9:0A
            X509v3 Authority Key Identifier:
                keyid:02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/34352e3136342e36342e302f32322d3234203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:5a:23:e7:54:53:77:92:c8:5b:3f:41:d5:74:6a:a6:ba:f6:
         00:e1:5b:f6:2c:a1:a8:c7:8e:8d:29:4e:46:21:0d:59:23:16:
         57:89:d0:fe:8e:e7:9f:16:6f:9b:67:a9:90:6c:bf:02:08:e8:
         3e:b1:c3:5b:af:b5:2e:ef:d4:c0:86:40:34:55:03:a8:9c:96:
         ea:74:1e:3d:16:b0:f8:dc:1b:d2:66:54:fe:8b:94:74:a5:5b:
         49:af:53:61:84:f4:b8:20:5b:1a:54:f8:55:5d:7d:ea:d8:a7:
         f2:38:31:38:26:37:34:80:77:55:2d:64:4f:ca:c3:fb:8e:fb:
         0f:d0:0c:98:da:f8:15:fa:35:d7:0b:fc:15:be:0f:d9:fb:af:
         6e:ab:2a:7f:d0:5c:8d:6b:45:64:88:71:69:60:0f:a9:a2:d2:
         76:f2:69:c1:77:e8:03:18:a6:21:41:e7:b2:15:84:c9:85:c6:
         72:3b:c4:d6:03:a4:9c:ac:9c:57:c7:32:40:fa:66:1d:59:34:
         19:26:36:a9:63:f8:04:15:89:97:28:4e:ea:2c:26:28:cd:57:
         60:d7:29:01:8d:5c:51:80:04:a3:6e:d8:53:f6:7d:7a:42:72:
         04:94:40:cb:f5:36:9e:e4:3f:6f:58:c0:89:a6:fb:08:17:ee:
         e6:97:09:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:05:15 2025 by rpki-client