Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2654899E3AEBC24ECCCB616D423DFC72FCA36F3D085B62709A16ECB0749B8362/0/34352e3138312e3132342e302f32322d3234203d3e20323639373332.roa
File:                     34352e3138312e3132342e302f32322d3234203d3e20323639373332.roa (raw, json)
Hash identifier:          R0SzKXGiBeLHHlkc/gmMlazcqRXq29qJBfMykSl26hU=
Subject key identifier:   0F:A7:9C:29:8C:63:87:C3:60:02:94:D4:A5:BC:5F:CA:F6:D8:C5:70
Certificate issuer:       /CN=7A76D5FEAA7561D126D8C20EB9D065AA9852B696
Certificate serial:       113CEFE48FBBB3455AE0BC8EDF9073269BF1CA49
Authority key identifier: 7A:76:D5:FE:AA:75:61:D1:26:D8:C2:0E:B9:D0:65:AA:98:52:B6:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A76D5FEAA7561D126D8C20EB9D065AA9852B696.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2654899E3AEBC24ECCCB616D423DFC72FCA36F3D085B62709A16ECB0749B8362/0/34352e3138312e3132342e302f32322d3234203d3e20323639373332.roa
Signing time:             Fri 16 May 2025 07:05:00 +0000
ROA not before:           Fri 16 May 2025 07:00:00 +0000
ROA not after:            Fri 15 May 2026 07:05:00 +0000
asID:                     269732
IP address blocks:        45.181.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2654899E3AEBC24ECCCB616D423DFC72FCA36F3D085B62709A16ECB0749B8362/0/7A76D5FEAA7561D126D8C20EB9D065AA9852B696.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2654899E3AEBC24ECCCB616D423DFC72FCA36F3D085B62709A16ECB0749B8362/0/7A76D5FEAA7561D126D8C20EB9D065AA9852B696.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A76D5FEAA7561D126D8C20EB9D065AA9852B696.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3c:ef:e4:8f:bb:b3:45:5a:e0:bc:8e:df:90:73:26:9b:f1:ca:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A76D5FEAA7561D126D8C20EB9D065AA9852B696
        Validity
            Not Before: May 16 07:00:00 2025 GMT
            Not After : May 15 07:05:00 2026 GMT
        Subject: CN=0FA79C298C6387C3600294D4A5BC5FCAF6D8C570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ff:fb:b6:c5:e8:62:d3:59:85:e4:32:17:3e:
                    5d:78:8f:35:c7:79:fd:54:bd:5f:4b:39:45:04:ec:
                    7b:6d:15:07:8c:c2:39:1e:a6:b4:41:8c:c1:87:eb:
                    22:90:01:26:f8:26:9d:0b:c1:63:4d:df:d1:14:f9:
                    e9:d4:77:60:a1:3e:0f:7b:90:7e:ea:f1:bb:f5:6c:
                    ea:c0:01:f1:81:d4:af:d8:7b:1c:a7:41:24:17:81:
                    29:50:11:ef:d9:d3:5b:5f:cb:89:37:56:ce:d6:ca:
                    01:d4:77:23:b0:3f:89:4e:a0:49:8c:a0:d3:01:4a:
                    26:49:86:6c:f0:f1:99:06:eb:f6:a5:51:34:d4:7f:
                    5e:a2:55:a2:10:4e:90:5b:35:a8:15:03:1f:3a:3c:
                    21:17:98:7a:a9:51:12:5b:19:21:f4:fb:30:fc:05:
                    5e:f8:7e:fc:52:6b:3e:ee:ff:ed:c2:1d:1b:d4:09:
                    47:2d:26:cf:63:ba:95:e3:9e:e2:f8:6e:60:e7:91:
                    5d:84:68:0b:60:89:14:ed:fd:4b:4f:35:01:76:6e:
                    98:8c:e6:56:7c:3a:71:25:a7:a3:6c:d7:a8:27:16:
                    8f:8b:1c:a4:d5:08:40:76:ee:f1:f0:27:8b:78:4a:
                    0b:80:22:ab:8d:85:14:6d:51:1a:92:91:95:9a:47:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A7:9C:29:8C:63:87:C3:60:02:94:D4:A5:BC:5F:CA:F6:D8:C5:70
            X509v3 Authority Key Identifier:
                keyid:7A:76:D5:FE:AA:75:61:D1:26:D8:C2:0E:B9:D0:65:AA:98:52:B6:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2654899E3AEBC24ECCCB616D423DFC72FCA36F3D085B62709A16ECB0749B8362/0/7A76D5FEAA7561D126D8C20EB9D065AA9852B696.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A76D5FEAA7561D126D8C20EB9D065AA9852B696.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2654899E3AEBC24ECCCB616D423DFC72FCA36F3D085B62709A16ECB0749B8362/0/34352e3138312e3132342e302f32322d3234203d3e20323639373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:c7:ef:e3:6c:00:8f:6a:4f:43:c9:66:c0:6c:aa:2e:2c:59:
         22:5e:4b:dc:e7:b7:fc:fe:83:a4:7f:ed:66:4b:a7:15:a7:ea:
         85:6c:49:3d:5f:b0:28:f3:1e:e4:58:4c:5e:7a:a3:80:26:18:
         2a:27:1c:96:0c:40:62:4b:ac:a3:1c:f4:2c:1c:2c:eb:56:e7:
         e0:78:17:a4:e0:1b:cc:91:1f:28:99:5a:48:4e:f5:fd:47:58:
         3d:1f:5a:54:75:be:fe:af:16:6d:26:fa:34:69:ae:8c:b9:7a:
         2d:c5:a0:6b:94:c1:a8:ef:c1:a8:06:f5:2a:13:94:71:be:b6:
         90:2e:6e:14:97:c5:f5:f0:6b:0a:9d:e5:f5:7e:c3:6f:4b:19:
         a2:34:be:a5:a2:29:e4:2f:37:5b:4c:87:85:3c:e2:e5:76:e0:
         79:28:c0:56:8b:f3:39:8e:e3:0e:f8:9a:fe:12:7a:78:e2:19:
         67:7b:5b:30:39:22:bb:a6:d3:bb:a4:8d:3a:54:8c:e8:e0:34:
         5f:82:d8:c4:ed:18:5a:7a:49:03:d8:90:1e:58:12:3a:94:99:
         3e:5e:15:66:68:a8:2e:a0:49:d3:21:c5:a0:41:c8:62:e6:d6:
         9f:91:b3:12:cc:1a:53:e5:39:5a:ea:e2:3c:46:a8:4d:39:84:
         7a:de:55:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:13:58 2025 by rpki-client