Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230322e302f32342d3234203d3e20323635363933.roa
File:                     34352e3137392e3230322e302f32342d3234203d3e20323635363933.roa (raw, json)
Hash identifier:          81ETs3q9q5xyD8qziFJyztSQTwtYtuo3XXkW9Ad2rK0=
Subject key identifier:   A5:93:A2:57:7F:7D:41:02:B1:40:40:AC:55:17:77:13:3A:1E:A2:BD
Certificate issuer:       /CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
Certificate serial:       518D80A0322CE44FBD78FE5D89B4FCB7D5F188A1
Authority key identifier: C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230322e302f32342d3234203d3e20323635363933.roa
Signing time:             Wed 07 May 2025 00:17:50 +0000
ROA not before:           Wed 07 May 2025 00:12:50 +0000
ROA not after:            Wed 06 May 2026 00:17:50 +0000
asID:                     265693
IP address blocks:        45.179.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 04:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8d:80:a0:32:2c:e4:4f:bd:78:fe:5d:89:b4:fc:b7:d5:f1:88:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
        Validity
            Not Before: May  7 00:12:50 2025 GMT
            Not After : May  6 00:17:50 2026 GMT
        Subject: CN=A593A2577F7D4102B14040AC551777133A1EA2BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:98:23:c6:40:50:f6:8f:86:3b:30:dd:0c:
                    3f:c1:42:76:e9:d8:a2:29:bf:c2:ae:2f:53:60:69:
                    e5:37:94:35:89:99:9f:49:ce:80:b5:20:11:78:5e:
                    f1:ca:35:f3:99:2c:b8:41:04:ac:1e:04:63:a2:ed:
                    2a:08:53:48:a6:5d:3a:82:c0:87:15:e7:c7:58:75:
                    49:6e:06:61:b5:e1:59:ff:f6:48:1d:6d:8b:36:b1:
                    12:c0:da:d9:e8:e2:99:8f:66:94:33:00:82:7f:73:
                    07:de:9e:d9:99:c3:2f:32:e9:38:5c:04:cc:c5:ec:
                    40:40:87:60:e6:e7:ac:bf:c0:c4:06:77:ae:72:f8:
                    24:54:b4:e7:4c:e6:6a:1a:80:4a:ba:e0:bc:ed:2f:
                    b1:9a:25:58:57:22:d6:4a:b9:82:0a:73:93:9d:a0:
                    b9:74:38:40:20:ce:de:36:d0:bb:6d:66:5e:0f:8b:
                    5f:47:87:4e:6f:fa:8e:75:8a:ea:b5:cd:4a:53:48:
                    74:e4:50:be:c6:77:7f:26:3b:4f:79:be:47:3b:cc:
                    37:60:7b:2c:94:f8:92:88:22:a7:9c:01:15:c1:8b:
                    f9:73:0b:f3:ab:dd:49:a8:58:8d:63:17:b9:55:80:
                    c3:22:2c:60:9f:9d:98:7c:10:18:9b:b3:83:35:af:
                    63:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:93:A2:57:7F:7D:41:02:B1:40:40:AC:55:17:77:13:3A:1E:A2:BD
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230322e302f32342d3234203d3e20323635363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:5e:c8:b4:55:aa:33:b2:fb:fd:d5:3c:0e:db:7c:99:a1:6a:
         51:f8:45:a2:69:b4:1b:76:98:3d:aa:0f:83:64:24:b9:bd:d7:
         ba:6d:e2:a1:01:65:c4:4a:df:f1:be:ed:1c:25:ba:80:36:03:
         76:b2:de:ef:e0:c7:bb:92:3a:85:04:19:8e:71:7f:6b:35:46:
         a5:16:d5:74:97:ae:e8:9d:1b:ad:8e:6d:23:7e:a9:fc:1d:e3:
         33:be:fe:14:13:ce:65:aa:38:e5:6c:21:f1:e8:07:5d:5d:39:
         bd:5e:bc:1f:fe:c2:8b:35:2f:9e:83:17:80:6f:a5:33:08:f3:
         ee:e3:c9:c6:7f:c3:bd:95:b0:2f:76:5c:bb:25:f1:f9:58:cf:
         a5:0f:ab:22:b5:50:91:6f:48:75:04:43:a5:2b:e5:92:f1:ec:
         ec:17:56:a2:d8:cc:29:cb:d5:91:a3:17:c5:67:c1:2a:d2:85:
         85:4c:3f:3e:69:ec:2d:7e:da:17:3a:d0:18:e8:08:2c:39:40:
         37:22:30:7b:5b:50:a5:c7:ec:b2:8c:bc:68:1c:5c:c1:e6:94:
         c0:98:b6:77:4a:6e:f8:e9:44:7b:67:3f:56:a0:fd:fb:8c:dd:
         ba:12:bb:3c:6d:16:e7:71:61:24:90:29:f5:74:1f:d9:f2:7a:
         43:cc:2b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:54:41 2025 by rpki-client