Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32332d3234203d3e20323636393033.roa
File:                     34352e3136322e322e302f32332d3234203d3e20323636393033.roa (raw, json)
Hash identifier:          to8aLCwKRi3lVkRl5Og1J03uvQt0p6FTkbEsc63gsuQ=
Subject key identifier:   1C:A0:37:BA:C0:69:AB:B3:34:12:77:CF:C0:44:0C:01:9E:FC:CD:DB
Certificate issuer:       /CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
Certificate serial:       0F54D71172DB446D0EE33B56685CB640B6D8FB01
Authority key identifier: E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32332d3234203d3e20323636393033.roa
Signing time:             Wed 14 May 2025 22:18:59 +0000
ROA not before:           Wed 14 May 2025 22:13:59 +0000
ROA not after:            Wed 13 May 2026 22:18:59 +0000
asID:                     266903
IP address blocks:        45.162.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 16:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:54:d7:11:72:db:44:6d:0e:e3:3b:56:68:5c:b6:40:b6:d8:fb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
        Validity
            Not Before: May 14 22:13:59 2025 GMT
            Not After : May 13 22:18:59 2026 GMT
        Subject: CN=1CA037BAC069ABB3341277CFC0440C019EFCCDDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7b:1b:27:83:b9:8f:e4:b6:59:40:44:bd:8d:
                    8c:5a:d2:12:74:39:c2:d1:44:9f:24:3b:84:5c:f3:
                    e2:53:e6:d8:5c:32:30:a2:38:27:58:8f:38:8d:a2:
                    a5:21:d7:f3:14:e0:d3:73:ce:bc:05:ee:59:f0:66:
                    45:e1:89:9f:41:a8:21:96:a3:5a:7d:2e:9c:ec:36:
                    02:69:1a:5b:d9:d4:19:20:79:53:d7:b7:11:9c:e7:
                    83:37:9c:7e:90:10:19:5e:c9:d1:c9:61:db:8a:f1:
                    91:d5:a4:fe:00:40:79:6a:18:23:52:32:44:53:2d:
                    02:9a:21:22:7d:40:9c:23:38:4b:4b:1f:4a:e7:5e:
                    91:88:df:a9:98:b2:6c:91:67:6e:98:e1:6e:4a:86:
                    af:15:fc:bb:27:3e:04:4c:28:c2:6c:3f:67:bf:c6:
                    3c:d5:77:c5:c2:17:66:c7:63:3f:e2:07:6e:33:af:
                    8a:7f:2f:39:f3:3c:b5:fc:cf:9c:3c:bd:5b:f7:42:
                    69:d8:91:a1:59:48:ee:21:d6:85:94:ee:a5:86:0a:
                    7e:22:64:57:85:94:18:8a:43:be:19:c0:82:d1:19:
                    6e:5e:a4:d0:e5:73:cf:49:42:6e:d1:92:49:38:f4:
                    1f:7c:1e:4f:db:b8:41:85:ae:82:83:07:ba:5e:63:
                    59:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A0:37:BA:C0:69:AB:B3:34:12:77:CF:C0:44:0C:01:9E:FC:CD:DB
            X509v3 Authority Key Identifier:
                keyid:E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32332d3234203d3e20323636393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:19:39:11:5a:2e:de:5d:36:33:a5:a4:96:c3:88:70:82:31:
         44:c1:44:6d:cf:e2:25:57:ab:d8:c8:ff:55:cc:ee:01:62:4e:
         ed:84:ce:5e:87:a1:75:66:18:0c:d4:c0:07:d3:e0:8e:51:84:
         b4:3e:b6:a9:4c:24:8e:a8:50:bf:81:3f:d5:5c:d9:c4:3d:86:
         fe:3f:20:e7:13:5d:0d:4a:1b:86:05:fd:b6:c5:d9:dd:26:a6:
         65:d0:11:83:9b:a5:8f:17:c8:c8:34:72:97:ac:ab:9e:6d:45:
         03:52:7e:5e:8c:31:6e:0b:2b:e4:4f:56:99:2b:a2:da:08:ae:
         b1:c9:e9:06:d7:ba:9e:37:8e:4c:63:23:11:11:ae:d8:b2:92:
         85:d0:09:68:a3:69:07:b8:b2:1a:06:59:38:cb:bd:57:f6:64:
         a7:40:91:96:e4:92:de:a4:c4:9a:ff:e6:c4:06:5e:fa:74:a8:
         b0:2c:2d:88:02:00:16:21:0e:33:d7:87:89:23:1a:db:5e:e1:
         ef:45:2b:90:3a:41:22:a6:fa:48:e0:46:07:0a:b0:ad:57:80:
         bd:ee:6f:dd:04:38:19:a4:b5:84:96:5f:0e:16:62:38:43:85:
         c0:d3:03:d6:74:2e:18:ac:6e:5c:81:ae:17:4a:2e:d7:80:8c:
         cd:35:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:29:14 2025 by rpki-client