Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/34352e3139312e34352e302f32342d3234203d3e20323639393030.roa
File:                     34352e3139312e34352e302f32342d3234203d3e20323639393030.roa (raw, json)
Hash identifier:          FZB3qw3n7CHlErJjoT3r7OQHVohxQGTfN5+QPQx+2wA=
Subject key identifier:   51:E1:32:A7:48:2F:34:AE:D6:3E:D8:2F:7F:11:BD:84:EE:AB:79:0F
Certificate issuer:       /CN=C88E06CCAFF9CD22AA83801DCA00A03F91548D6E
Certificate serial:       3506E71E47E82442F834A838F4E4AB407BD93B18
Authority key identifier: C8:8E:06:CC:AF:F9:CD:22:AA:83:80:1D:CA:00:A0:3F:91:54:8D:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/34352e3139312e34352e302f32342d3234203d3e20323639393030.roa
Signing time:             Tue 01 Jul 2025 21:40:00 +0000
ROA not before:           Tue 01 Jul 2025 21:35:00 +0000
ROA not after:            Tue 30 Jun 2026 21:40:00 +0000
asID:                     269900
IP address blocks:        45.191.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:06:e7:1e:47:e8:24:42:f8:34:a8:38:f4:e4:ab:40:7b:d9:3b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C88E06CCAFF9CD22AA83801DCA00A03F91548D6E
        Validity
            Not Before: Jul  1 21:35:00 2025 GMT
            Not After : Jun 30 21:40:00 2026 GMT
        Subject: CN=51E132A7482F34AED63ED82F7F11BD84EEAB790F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:6b:51:13:bc:70:cf:ec:20:bf:8c:9f:d4:
                    4d:ed:cc:cf:d9:05:b2:c2:38:d9:9c:aa:be:f1:81:
                    95:d4:c2:db:91:b5:74:9a:f3:78:29:06:86:82:89:
                    9a:07:85:61:13:6e:e7:9e:b0:7e:82:21:2e:2b:c9:
                    f8:07:38:6a:eb:31:b3:9c:78:a0:f5:a6:c7:a6:a3:
                    c0:cc:c3:71:55:d5:14:33:b9:6d:b2:17:6f:e1:3b:
                    bd:36:ca:86:87:ce:ef:b1:eb:30:09:09:d3:3b:5f:
                    63:3c:23:af:b5:60:78:af:1e:0f:6a:aa:a1:8e:82:
                    33:1c:6f:9e:a2:12:5f:bd:3d:9e:7f:83:11:e6:0c:
                    47:4c:e0:ea:df:d6:3e:b7:ad:6c:a4:11:f5:04:47:
                    4a:6e:36:24:f5:82:c3:70:1b:5c:5a:2f:8e:c4:e8:
                    26:4d:6a:20:45:f1:c3:f2:ed:dc:bf:ef:8c:e4:99:
                    c9:77:6c:b3:29:93:71:72:f5:e5:9b:66:6d:5e:d4:
                    a0:fe:41:9f:d7:fb:a5:9b:58:28:27:e8:8d:fb:79:
                    2e:e8:79:c4:43:13:17:b3:74:ca:7d:73:15:24:e4:
                    6d:ad:f3:48:e0:75:1a:d8:7c:86:53:02:83:a3:af:
                    60:52:27:2c:51:39:0e:61:fc:d5:8e:43:7e:f3:6c:
                    c9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E1:32:A7:48:2F:34:AE:D6:3E:D8:2F:7F:11:BD:84:EE:AB:79:0F
            X509v3 Authority Key Identifier:
                keyid:C8:8E:06:CC:AF:F9:CD:22:AA:83:80:1D:CA:00:A0:3F:91:54:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/34352e3139312e34352e302f32342d3234203d3e20323639393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:f4:d3:72:37:fe:36:4a:42:2b:77:1e:3f:22:a7:91:48:1f:
         56:a0:17:e1:9f:17:4b:bb:c6:a4:e6:f7:c1:c2:f6:66:2b:bb:
         fb:e6:bb:d7:82:27:72:9d:49:d4:5d:86:e5:46:5a:3e:9e:ff:
         a7:7a:31:4b:dc:df:df:17:3d:c3:44:6b:6f:3a:ff:64:d7:ed:
         e6:84:3e:7c:c7:46:ea:3e:01:9a:68:cd:70:45:76:e9:07:b7:
         d1:52:dc:31:85:a7:f0:6d:2c:87:39:18:37:36:44:2a:e3:35:
         aa:eb:43:e4:f3:9d:78:18:e5:7a:6e:3b:17:85:91:62:9a:6f:
         10:87:30:f1:52:2d:af:93:93:f0:6d:20:35:94:ba:45:56:36:
         e6:24:8f:86:47:a4:c7:47:40:2d:24:a5:dd:67:71:1c:e0:45:
         90:47:50:d6:7b:77:ba:9a:77:e9:7c:b8:a2:a9:b7:ed:cd:2c:
         a9:52:00:e8:03:7d:10:12:ae:08:89:d4:e1:bc:51:00:b1:00:
         4d:67:42:27:98:c9:4b:a8:0c:36:31:bd:16:ec:72:a9:9f:fc:
         07:57:92:d0:5b:5f:e9:59:a8:53:fa:53:fe:8e:f5:5d:23:96:
         17:8f:31:f6:34:ff:b8:3d:67:ae:b4:4a:0f:5f:64:b5:fe:61:
         56:0a:33:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:12:20 2025 by rpki-client