Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/34352e3138362e3130382e302f32322d3232203d3e203134373534.roa
File:                     34352e3138362e3130382e302f32322d3232203d3e203134373534.roa (raw, json)
Hash identifier:          efTC49nrWCDTBnd1RrcMqY0qYD/Mlj82t0duyEH2XIY=
Subject key identifier:   7E:E8:77:7B:A3:44:B0:A1:BF:8D:4F:EF:E5:CE:20:78:D0:30:FC:B4
Certificate issuer:       /CN=B0F0C9DD73F6C1475F1456103DA6BB622464669F
Certificate serial:       44BF4EC5090C2DB24A4161B7A675CCCC903E0095
Authority key identifier: B0:F0:C9:DD:73:F6:C1:47:5F:14:56:10:3D:A6:BB:62:24:64:66:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/34352e3138362e3130382e302f32322d3232203d3e203134373534.roa
Signing time:             Thu 06 Feb 2025 06:09:11 +0000
ROA not before:           Thu 06 Feb 2025 06:04:11 +0000
ROA not after:            Thu 05 Feb 2026 06:09:11 +0000
asID:                     14754
IP address blocks:        45.186.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:bf:4e:c5:09:0c:2d:b2:4a:41:61:b7:a6:75:cc:cc:90:3e:00:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F0C9DD73F6C1475F1456103DA6BB622464669F
        Validity
            Not Before: Feb  6 06:04:11 2025 GMT
            Not After : Feb  5 06:09:11 2026 GMT
        Subject: CN=7EE8777BA344B0A1BF8D4FEFE5CE2078D030FCB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:29:6d:8b:8f:6c:34:9a:c1:e7:1a:13:03:
                    bd:df:fc:73:1f:8a:d9:10:38:b8:74:31:67:89:7d:
                    5c:14:ff:cb:07:ec:9d:80:b7:8e:36:c8:87:ae:96:
                    8e:0d:8e:e7:3c:5d:be:73:c1:c6:4b:dc:ea:98:46:
                    db:07:1a:e7:0f:e7:ba:99:87:af:98:8b:52:e3:2d:
                    15:22:e6:ec:b0:81:07:dc:f6:5a:59:5d:47:45:22:
                    8c:c2:77:85:a6:bd:62:8d:f0:74:24:53:89:6c:90:
                    f7:9c:81:a3:74:72:12:59:4c:57:be:75:f6:7f:43:
                    9a:8b:c1:95:04:05:47:df:74:54:97:83:79:59:61:
                    97:f3:c4:d0:27:95:8f:94:67:47:03:92:3c:ba:68:
                    4a:6a:eb:d3:af:9c:e1:2c:43:74:65:db:b0:3a:19:
                    41:91:9e:09:b9:25:5e:f4:7b:23:3b:e5:f1:81:30:
                    1b:42:94:c6:29:6f:f6:aa:22:b3:15:78:c8:61:b8:
                    86:fa:33:96:22:3e:5c:ce:c8:44:7d:ee:f2:80:51:
                    2d:71:8d:3f:7c:99:7e:65:69:01:36:a7:79:15:e7:
                    19:b3:7e:41:d0:42:83:40:74:fa:9c:a4:0a:78:ad:
                    02:de:97:fb:ee:fd:3d:87:dd:ba:53:4b:94:9a:6c:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E8:77:7B:A3:44:B0:A1:BF:8D:4F:EF:E5:CE:20:78:D0:30:FC:B4
            X509v3 Authority Key Identifier:
                keyid:B0:F0:C9:DD:73:F6:C1:47:5F:14:56:10:3D:A6:BB:62:24:64:66:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/34352e3138362e3130382e302f32322d3232203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:05:ff:c6:29:db:68:2c:a4:b3:ed:3f:05:3f:cf:f2:f0:b5:
         1a:df:6e:e4:74:bb:2a:f4:39:1c:ac:01:c8:f2:60:8b:d3:bc:
         e6:f6:3a:9d:68:31:ed:ba:42:e6:00:7f:2b:97:1d:98:65:ce:
         6a:aa:99:ad:74:b4:73:55:c9:a7:72:ae:df:67:4c:af:78:2b:
         de:65:26:ef:bf:5c:b5:06:f4:e2:03:1a:81:de:c6:fd:33:20:
         3f:1d:26:08:64:0b:7e:46:ad:25:1e:bd:8a:7a:6c:f1:d5:c4:
         2b:85:7d:f4:56:e1:58:03:34:5b:cf:7a:5f:c2:a5:ed:2e:81:
         70:b5:a4:8a:b0:84:7e:13:1d:11:7e:d0:9e:da:56:91:a8:03:
         97:2c:f4:7d:a0:40:fe:ba:a3:f6:b4:96:42:93:48:ea:4e:2b:
         b4:8c:d3:c4:1f:b7:d0:46:54:9c:90:1a:16:41:19:25:5a:0b:
         58:3d:e5:de:11:b7:9b:27:24:d7:5f:a3:c7:4d:7d:88:2f:a2:
         e5:a8:8c:ca:49:1e:2a:6f:e0:75:72:ca:75:21:93:93:19:ad:
         08:52:63:ad:ec:9b:35:7b:90:81:06:d7:04:35:7e:23:63:4a:
         d4:05:54:01:5d:9e:f0:a2:1d:8e:6f:8c:73:ac:df:7f:72:5b:
         69:50:d2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:38:11 2025 by rpki-client