Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/34352e3233342e3131362e302f32322d3235203d3e20323636373732.roa
File:                     34352e3233342e3131362e302f32322d3235203d3e20323636373732.roa (raw, json)
Hash identifier:          bgKJjRuVV1D8jXIsQU4yZx40FiJycrHLudTvz7EvDjU=
Subject key identifier:   BF:09:92:26:D9:06:95:70:6A:20:B7:76:20:1B:FF:AF:FF:52:44:88
Certificate issuer:       /CN=C59D456B5A7958D801EFD7AD79135F812D7051FD
Certificate serial:       617F63F0CE218E5F2BD4AD6FF83D5E0AF41F99B8
Authority key identifier: C5:9D:45:6B:5A:79:58:D8:01:EF:D7:AD:79:13:5F:81:2D:70:51:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/34352e3233342e3131362e302f32322d3235203d3e20323636373732.roa
Signing time:             Tue 04 Feb 2025 18:23:22 +0000
ROA not before:           Tue 04 Feb 2025 18:18:22 +0000
ROA not after:            Tue 03 Feb 2026 18:23:22 +0000
asID:                     266772
IP address blocks:        45.234.116.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7f:63:f0:ce:21:8e:5f:2b:d4:ad:6f:f8:3d:5e:0a:f4:1f:99:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C59D456B5A7958D801EFD7AD79135F812D7051FD
        Validity
            Not Before: Feb  4 18:18:22 2025 GMT
            Not After : Feb  3 18:23:22 2026 GMT
        Subject: CN=BF099226D90695706A20B776201BFFAFFF524488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:93:e3:d7:41:24:2f:1e:6d:08:c0:08:0a:0e:
                    4e:d8:38:27:c1:fc:58:a7:fa:cc:da:19:59:e4:73:
                    ce:19:a5:f0:b9:00:9e:24:b2:59:50:30:12:76:90:
                    5b:dd:8b:5c:db:a3:58:80:0b:d2:bc:a2:f4:95:1d:
                    d0:97:62:cf:bf:bc:fb:b0:4c:3d:da:00:ae:f5:dd:
                    10:53:5f:1c:1f:1b:67:06:0f:66:ae:e4:20:81:53:
                    2d:08:b7:a7:51:85:43:53:20:a5:17:6d:57:2b:58:
                    ba:27:c0:87:87:3b:36:c5:74:93:ca:99:01:86:44:
                    2b:e5:5d:ac:91:6f:a8:c7:1b:6e:21:a6:c2:42:3f:
                    4c:b4:aa:bc:72:81:ff:4d:0b:93:67:10:0f:cb:1e:
                    e9:33:22:a8:29:71:2c:5c:d0:d3:ff:84:78:e4:89:
                    46:a1:b2:1a:12:46:72:df:5b:b2:55:4e:84:75:71:
                    6d:96:44:b8:5d:f5:07:7b:aa:b1:fc:af:df:2c:d7:
                    89:2a:53:c8:b5:39:e8:38:46:1a:fd:5f:65:9c:49:
                    f5:fe:fd:d9:cf:6d:bc:96:62:35:cf:7d:fc:46:09:
                    7d:80:a6:96:54:37:63:41:e1:8c:de:30:bd:95:97:
                    ff:65:6b:88:f9:96:63:ff:5f:32:8d:e9:a6:2d:a0:
                    c7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:09:92:26:D9:06:95:70:6A:20:B7:76:20:1B:FF:AF:FF:52:44:88
            X509v3 Authority Key Identifier:
                keyid:C5:9D:45:6B:5A:79:58:D8:01:EF:D7:AD:79:13:5F:81:2D:70:51:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/34352e3233342e3131362e302f32322d3235203d3e20323636373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:87:cc:21:2a:da:09:7e:14:fb:be:13:96:80:70:a9:73:7d:
         cb:d8:b8:6d:bc:63:07:17:a3:da:bf:75:f6:67:9d:8e:bd:96:
         6b:ca:f4:8a:3e:a5:cc:a0:2d:93:f4:50:f0:84:26:fc:7a:88:
         c2:04:43:c6:fc:10:f3:70:80:97:c2:e6:1e:9d:6a:a9:bd:51:
         04:21:55:27:45:7b:b3:11:d6:6b:d7:28:db:13:d3:87:a1:cc:
         20:74:4e:0e:dd:29:10:85:b9:2f:95:8c:20:3a:04:a9:be:96:
         de:79:a1:0f:fe:6f:dc:1a:7b:7d:cb:75:fb:99:27:94:60:6d:
         92:bd:85:ac:d2:3a:ca:99:06:0c:ef:70:d9:e6:2d:5b:45:9b:
         44:d8:50:11:a7:08:bb:e8:fb:95:5e:d8:61:1c:34:04:49:71:
         d7:e2:92:71:0c:9e:0c:e0:ec:73:11:5d:41:ec:d5:b9:ba:a5:
         3d:43:9a:87:c5:e9:8b:a8:24:d4:84:bb:e3:c8:ea:ab:57:ab:
         34:1b:90:c5:d3:fd:28:19:cc:86:23:f2:f0:a1:6e:68:88:31:
         27:e4:be:26:94:b3:96:2b:b1:03:f4:29:df:11:70:8b:9f:c2:
         3f:b7:34:7f:25:aa:75:be:f2:c4:b0:70:98:e3:0f:24:18:eb:
         dc:59:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:23:00 2025 by rpki-client