Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/34352e3232382e36332e302f32342d3234203d3e20323636363737.roa
File:                     34352e3232382e36332e302f32342d3234203d3e20323636363737.roa (raw, json)
Hash identifier:          XhSmqvS8btI6SxWJ0e3cgMmbEBQj/hJhgsvD8vL13xE=
Subject key identifier:   2F:EA:BC:25:EC:FA:EB:88:8B:82:50:F1:5A:01:C1:99:F2:70:39:9A
Certificate issuer:       /CN=3ADE8F28C8077395C8518736031DE38C090CDF1B
Certificate serial:       1FAD670980CBDA7CFD568672D3FDE8C09773EDB7
Authority key identifier: 3A:DE:8F:28:C8:07:73:95:C8:51:87:36:03:1D:E3:8C:09:0C:DF:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/34352e3232382e36332e302f32342d3234203d3e20323636363737.roa
Signing time:             Thu 29 May 2025 21:20:35 +0000
ROA not before:           Thu 29 May 2025 21:15:35 +0000
ROA not after:            Thu 28 May 2026 21:20:35 +0000
asID:                     266677
IP address blocks:        45.228.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ad:67:09:80:cb:da:7c:fd:56:86:72:d3:fd:e8:c0:97:73:ed:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ADE8F28C8077395C8518736031DE38C090CDF1B
        Validity
            Not Before: May 29 21:15:35 2025 GMT
            Not After : May 28 21:20:35 2026 GMT
        Subject: CN=2FEABC25ECFAEB888B8250F15A01C199F270399A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3f:ee:52:18:56:89:68:14:d8:8c:61:89:8f:
                    7c:30:91:07:5e:af:a4:5f:87:da:04:7b:ea:2f:a4:
                    b0:2c:09:f5:95:e7:21:d0:41:40:88:68:80:01:a2:
                    d0:82:29:07:f5:9a:63:73:5a:de:c5:46:55:7e:d8:
                    9d:63:eb:67:7b:85:98:6a:79:77:56:85:58:0c:ca:
                    ee:17:3b:e7:50:49:59:05:6d:11:e5:76:a7:b4:a0:
                    04:71:cb:f7:50:99:e7:1b:8c:b7:86:b8:12:db:7a:
                    c0:1b:52:55:c4:14:fe:31:e9:2d:d9:18:17:ad:31:
                    24:bd:ed:69:a7:70:a7:d5:30:9f:b0:f8:77:06:3f:
                    cb:c3:38:02:a9:d4:30:f9:bb:69:13:00:e6:fa:51:
                    15:c6:69:67:a9:13:4d:71:f9:90:35:73:a1:0c:75:
                    f7:41:f5:67:8e:fe:8c:90:0b:87:bf:57:d5:5e:40:
                    ba:d8:5d:12:86:7a:d5:27:90:9c:7a:3e:86:29:ad:
                    b0:29:1d:d1:eb:c0:3b:44:46:e3:0f:12:51:b6:2c:
                    09:a6:78:86:aa:c0:74:d3:82:0e:90:73:d3:fa:88:
                    ad:9e:53:dd:ff:db:41:09:15:f0:b6:92:c1:3e:54:
                    ce:76:a0:52:40:4e:70:4a:9b:01:63:b6:b1:0d:05:
                    14:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EA:BC:25:EC:FA:EB:88:8B:82:50:F1:5A:01:C1:99:F2:70:39:9A
            X509v3 Authority Key Identifier:
                keyid:3A:DE:8F:28:C8:07:73:95:C8:51:87:36:03:1D:E3:8C:09:0C:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/34352e3232382e36332e302f32342d3234203d3e20323636363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:65:f5:5a:44:01:07:fa:8f:7d:b1:2a:c3:6f:9e:d9:50:41:
         81:66:a4:03:e4:38:8f:ec:4f:7f:a3:c2:dc:1c:fd:90:3f:2d:
         ea:81:1b:e8:8a:4b:47:c7:5f:2f:4e:2b:40:35:e5:cf:e1:c3:
         85:04:45:a5:a4:6b:72:4a:42:9e:b5:43:30:ab:c9:9d:f0:09:
         af:1b:72:10:92:2c:7f:23:74:e0:00:46:0a:c7:fa:1c:ab:f6:
         a4:3f:32:92:a0:20:a1:da:fa:f5:85:2b:4d:53:ad:59:8c:af:
         4b:1f:3c:1e:6a:61:d1:6d:4d:e8:c3:b2:b0:73:f3:3c:c9:5d:
         64:15:30:97:51:44:69:5c:6f:58:95:0a:de:75:cd:c4:73:c9:
         e7:40:d2:02:e5:ad:80:4f:c6:f9:d9:12:c6:19:6a:9a:d6:22:
         8e:cd:09:63:c5:ea:78:03:0e:8d:2c:fb:cd:af:05:8f:1b:3f:
         1c:bd:82:b3:97:85:cb:83:27:c0:eb:30:a4:ae:b4:27:0f:40:
         16:ee:8e:04:69:df:5d:1d:58:17:a2:34:4f:15:4a:01:09:17:
         d4:10:05:d3:ef:ad:86:29:ba:3f:0a:41:02:a0:5f:94:2f:e8:
         49:1c:ba:08:92:d8:82:6d:fc:ce:0b:a9:0e:60:ad:0a:f0:44:
         79:5a:14:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:52:36 2025 by rpki-client