Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/34352e3138312e3132302e302f32322d3234203d3e203631353033.roa
File:                     34352e3138312e3132302e302f32322d3234203d3e203631353033.roa (raw, json)
Hash identifier:          oWrkls2deepm+YNSem85MWBRym/XbPB8dEW3u1NbbCI=
Subject key identifier:   AB:4C:DF:E6:69:F4:FB:FE:E4:DE:94:0C:22:8E:C8:47:A5:9B:DA:99
Certificate issuer:       /CN=7F71B1B6812BF46371D2DCB57923AF0A2DB3927D
Certificate serial:       13DA10EEFA88B045CBA0D4B4CA2DE6E1FAF73D29
Authority key identifier: 7F:71:B1:B6:81:2B:F4:63:71:D2:DC:B5:79:23:AF:0A:2D:B3:92:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/34352e3138312e3132302e302f32322d3234203d3e203631353033.roa
Signing time:             Tue 04 Feb 2025 18:29:39 +0000
ROA not before:           Tue 04 Feb 2025 18:24:39 +0000
ROA not after:            Tue 03 Feb 2026 18:29:39 +0000
asID:                     61503
IP address blocks:        45.181.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:da:10:ee:fa:88:b0:45:cb:a0:d4:b4:ca:2d:e6:e1:fa:f7:3d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F71B1B6812BF46371D2DCB57923AF0A2DB3927D
        Validity
            Not Before: Feb  4 18:24:39 2025 GMT
            Not After : Feb  3 18:29:39 2026 GMT
        Subject: CN=AB4CDFE669F4FBFEE4DE940C228EC847A59BDA99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3d:e8:89:3f:ff:af:2e:d2:82:26:5a:43:cc:
                    3e:d2:b3:f6:57:9f:74:d5:42:35:ec:97:68:79:19:
                    de:2a:ad:0a:87:ab:84:75:6f:50:ad:ed:01:fa:37:
                    e0:18:5e:7b:ac:71:0d:4d:3c:ee:07:ae:3d:d7:7a:
                    03:0e:b5:ab:40:fc:47:4f:12:1f:3a:dc:c3:31:51:
                    e9:00:02:a9:d8:28:a4:11:ca:d9:e5:ef:83:6d:62:
                    56:e0:22:8f:d9:01:b6:a2:0c:5d:44:1a:ce:c0:36:
                    30:b7:6a:f4:36:b4:ba:11:b5:c3:43:cf:42:eb:45:
                    17:e3:40:e4:d6:89:38:12:bb:08:0b:fe:d1:2a:31:
                    bc:7b:f4:b8:35:3c:20:d0:38:52:85:32:a0:12:7a:
                    82:7e:ca:67:c1:c5:37:f9:f7:36:64:42:6b:de:5a:
                    21:88:53:67:3b:0d:07:76:bf:0b:8b:c4:c2:9e:f7:
                    76:ac:c4:5c:bc:45:37:2f:20:7b:f6:31:88:bb:12:
                    76:9e:f8:7d:e6:ee:58:a7:26:2c:09:17:3d:19:a4:
                    2f:dc:97:de:17:d6:13:17:84:ad:c7:e9:fb:10:0c:
                    5c:e4:6b:a7:c2:fc:fd:0e:28:7d:69:52:b5:41:11:
                    0d:a1:a0:7d:c2:9f:fa:fc:cc:29:4c:9b:bf:2f:a2:
                    ad:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4C:DF:E6:69:F4:FB:FE:E4:DE:94:0C:22:8E:C8:47:A5:9B:DA:99
            X509v3 Authority Key Identifier:
                keyid:7F:71:B1:B6:81:2B:F4:63:71:D2:DC:B5:79:23:AF:0A:2D:B3:92:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/34352e3138312e3132302e302f32322d3234203d3e203631353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:b0:d4:8f:18:4f:bb:85:6e:99:fe:fb:ef:fd:d5:04:38:f9:
         61:dd:29:81:ff:e5:8e:c5:50:b0:e1:5d:4a:50:27:bd:22:d2:
         47:e9:95:cb:ed:20:ec:96:7e:47:75:50:9d:be:0e:0f:69:f5:
         81:6d:d7:0a:d9:79:4d:9c:f9:ef:a9:80:6a:64:33:21:98:f5:
         a7:75:b2:a8:60:3b:d2:80:95:e0:36:3f:72:60:dc:a8:3e:f4:
         d9:82:4c:f6:56:77:f5:bc:3a:0b:f2:90:2f:14:30:72:30:4f:
         f9:01:39:0e:38:04:69:f2:c0:8a:e6:01:6c:1d:b0:7a:24:6a:
         69:32:1f:f5:2e:0e:af:f7:50:bf:e2:24:87:1e:4d:72:65:c8:
         c2:08:2b:73:1f:af:4d:7e:fd:9a:0f:06:aa:99:9e:8d:40:65:
         62:8d:44:d1:6f:8a:59:64:68:9e:9f:f1:c3:61:ec:d2:06:7a:
         e3:56:42:50:cb:96:b1:fa:6c:bc:7b:51:6a:f6:5c:24:b5:11:
         f7:7c:2a:e5:ad:eb:a8:90:f4:91:6e:f7:47:f2:7d:78:15:e0:
         35:a3:e8:3f:cd:44:6f:48:04:3b:1e:d2:02:39:bd:e4:e5:e3:
         79:96:c8:75:d9:30:53:af:2f:28:60:34:e3:ef:c6:d7:47:40:
         7e:fc:f5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:04:10 2025 by rpki-client