Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE0DDE60EB8F649C90E1066A03BF1385487D1C6123A71F5BA57A096866A2D0A7/0/34352e3138362e34372e302f32342d3234203d3e20323732383032.roa
File:                     34352e3138362e34372e302f32342d3234203d3e20323732383032.roa (raw, json)
Hash identifier:          w6PBN20SUGB6KvUDdC6xzJL9O+J84POv4i6xjyro9oE=
Subject key identifier:   62:D8:B2:79:BF:BF:C2:EE:00:DE:02:D8:42:E5:94:9E:C8:F3:53:71
Certificate issuer:       /CN=EC1C2A938F2643280F8BA752CD45833244CBC4CB
Certificate serial:       31E73BD2E4082A9A7BD63E6E0DD610783BE5D134
Authority key identifier: EC:1C:2A:93:8F:26:43:28:0F:8B:A7:52:CD:45:83:32:44:CB:C4:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1C2A938F2643280F8BA752CD45833244CBC4CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE0DDE60EB8F649C90E1066A03BF1385487D1C6123A71F5BA57A096866A2D0A7/0/34352e3138362e34372e302f32342d3234203d3e20323732383032.roa
Signing time:             Mon 26 May 2025 12:45:00 +0000
ROA not before:           Mon 26 May 2025 12:40:00 +0000
ROA not after:            Mon 25 May 2026 12:45:00 +0000
asID:                     272802
IP address blocks:        45.186.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE0DDE60EB8F649C90E1066A03BF1385487D1C6123A71F5BA57A096866A2D0A7/0/EC1C2A938F2643280F8BA752CD45833244CBC4CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE0DDE60EB8F649C90E1066A03BF1385487D1C6123A71F5BA57A096866A2D0A7/0/EC1C2A938F2643280F8BA752CD45833244CBC4CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1C2A938F2643280F8BA752CD45833244CBC4CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 07:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e7:3b:d2:e4:08:2a:9a:7b:d6:3e:6e:0d:d6:10:78:3b:e5:d1:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC1C2A938F2643280F8BA752CD45833244CBC4CB
        Validity
            Not Before: May 26 12:40:00 2025 GMT
            Not After : May 25 12:45:00 2026 GMT
        Subject: CN=62D8B279BFBFC2EE00DE02D842E5949EC8F35371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:24:7b:a8:b4:99:8c:43:43:89:c4:87:49:b7:
                    ec:4b:48:34:0b:03:28:ab:08:0f:fc:b5:80:8b:32:
                    56:2b:30:d0:5c:76:f9:2d:09:36:13:d2:16:a0:cf:
                    ae:be:22:78:1d:6d:a8:72:27:55:a0:63:44:a9:7d:
                    e4:a3:96:93:1b:4b:a4:de:8b:ac:ad:28:d1:7f:22:
                    d8:b5:79:61:20:43:02:d3:f9:8b:d6:32:06:10:9d:
                    99:9e:b6:a7:2c:c0:16:ed:7a:0d:0b:2f:3c:10:d3:
                    3d:68:d7:99:77:21:07:02:2d:27:b8:42:2e:fa:0b:
                    92:54:96:27:1d:b4:b0:6e:6e:54:f7:cb:41:ea:22:
                    95:9c:97:6d:00:6e:a6:3a:bb:d1:f7:05:fb:fe:18:
                    37:fe:6a:9e:f4:97:22:5d:d8:cb:59:55:00:aa:a5:
                    ca:e5:8b:3d:a4:47:c3:9d:a5:3f:b6:53:79:70:1c:
                    22:59:c5:06:40:80:cd:b6:fa:2d:8e:1f:25:c6:e7:
                    a6:0e:a7:36:43:84:c7:0d:51:0d:b3:dc:06:0c:b1:
                    2f:f2:65:0d:b4:fe:3f:08:6b:59:23:91:b5:fa:55:
                    5a:43:f8:6a:e3:01:f1:81:9e:d4:0b:88:8a:e9:04:
                    de:04:2b:e9:9a:f4:6c:d0:2f:10:5d:fb:27:4b:ad:
                    03:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D8:B2:79:BF:BF:C2:EE:00:DE:02:D8:42:E5:94:9E:C8:F3:53:71
            X509v3 Authority Key Identifier:
                keyid:EC:1C:2A:93:8F:26:43:28:0F:8B:A7:52:CD:45:83:32:44:CB:C4:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE0DDE60EB8F649C90E1066A03BF1385487D1C6123A71F5BA57A096866A2D0A7/0/EC1C2A938F2643280F8BA752CD45833244CBC4CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1C2A938F2643280F8BA752CD45833244CBC4CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE0DDE60EB8F649C90E1066A03BF1385487D1C6123A71F5BA57A096866A2D0A7/0/34352e3138362e34372e302f32342d3234203d3e20323732383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:3e:43:d5:de:7a:7c:b0:6e:33:5b:31:0b:59:04:2d:23:e0:
         ac:a0:47:38:ff:43:4a:3f:48:0b:fc:c8:81:a6:ca:62:69:dd:
         c5:31:1f:a2:96:0c:d4:56:90:9a:fb:be:50:45:be:52:04:9e:
         d1:33:3c:af:5d:c7:c4:c3:5b:de:65:fe:11:71:2b:af:46:f0:
         df:df:d6:08:d1:e7:0e:fa:f0:51:3e:63:28:c8:f5:e1:46:72:
         c7:69:c8:fa:48:33:d9:16:d9:3d:c3:84:92:39:06:2a:25:1d:
         f0:42:99:b1:0b:72:8d:8f:6c:74:94:cc:fa:e1:fe:95:4e:53:
         f8:f3:9e:d7:d1:9e:93:db:98:4b:02:4d:73:af:19:79:5d:15:
         44:27:a7:00:de:21:8e:6a:de:c3:85:2f:04:0a:d4:5f:16:a7:
         be:ec:4b:e2:1d:b0:4b:d1:99:4d:41:15:ee:db:b6:e7:7e:b6:
         12:7f:81:13:bd:2f:30:4e:7d:6e:95:de:be:6a:51:21:1a:87:
         ae:54:77:70:ae:69:b8:33:80:96:43:67:3a:19:d1:a6:c2:81:
         21:19:36:58:97:a7:35:2d:68:a5:2d:2d:81:9e:28:e6:c4:de:
         60:01:51:cb:9b:25:41:4b:f6:04:7e:a1:46:b9:28:7d:b2:52:
         5b:d7:a5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:07:02 2025 by rpki-client