Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3686CD8A969604D0D5B19FAE7F9309F785C327E550C07CE374F3E8C2E347ED5/0/34352e3136312e3133332e302f32342d3234203d3e20323635383136.roa
File:                     34352e3136312e3133332e302f32342d3234203d3e20323635383136.roa (raw, json)
Hash identifier:          cAYNLBF2Y7A8HflX3GsNbQ9at5UCC0oMUZe+8+Hden4=
Subject key identifier:   22:C1:39:2D:86:B5:67:6D:A2:5C:1B:EC:5B:AA:90:A7:32:0F:67:48
Certificate issuer:       /CN=A330BD21030D07AFF1FBD97CD56DA2E61D2817FB
Certificate serial:       3CB3616BDEE2A9ADEEB56F94DD6A890803030A37
Authority key identifier: A3:30:BD:21:03:0D:07:AF:F1:FB:D9:7C:D5:6D:A2:E6:1D:28:17:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A330BD21030D07AFF1FBD97CD56DA2E61D2817FB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3686CD8A969604D0D5B19FAE7F9309F785C327E550C07CE374F3E8C2E347ED5/0/34352e3136312e3133332e302f32342d3234203d3e20323635383136.roa
Signing time:             Sat 10 May 2025 14:05:00 +0000
ROA not before:           Sat 10 May 2025 14:00:00 +0000
ROA not after:            Sat 09 May 2026 14:05:00 +0000
asID:                     265816
IP address blocks:        45.161.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3686CD8A969604D0D5B19FAE7F9309F785C327E550C07CE374F3E8C2E347ED5/0/A330BD21030D07AFF1FBD97CD56DA2E61D2817FB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3686CD8A969604D0D5B19FAE7F9309F785C327E550C07CE374F3E8C2E347ED5/0/A330BD21030D07AFF1FBD97CD56DA2E61D2817FB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A330BD21030D07AFF1FBD97CD56DA2E61D2817FB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b3:61:6b:de:e2:a9:ad:ee:b5:6f:94:dd:6a:89:08:03:03:0a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A330BD21030D07AFF1FBD97CD56DA2E61D2817FB
        Validity
            Not Before: May 10 14:00:00 2025 GMT
            Not After : May  9 14:05:00 2026 GMT
        Subject: CN=22C1392D86B5676DA25C1BEC5BAA90A7320F6748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:aa:16:5e:57:fb:94:10:a0:c0:8c:be:4a:f7:
                    28:2a:a8:12:d5:07:08:90:04:4e:06:67:13:77:88:
                    3f:ee:cf:73:5c:42:d1:28:d0:27:f1:05:d4:a7:43:
                    dd:ee:e5:a1:fb:8c:41:4f:89:9a:08:9e:3f:00:22:
                    c8:03:3b:7c:09:93:1a:ce:e2:e6:48:1a:7f:8c:c8:
                    03:c4:35:64:fc:eb:75:dc:01:9c:c7:fd:d7:a9:6c:
                    ed:32:8e:1c:0d:da:ae:1a:d6:ec:a9:45:74:d3:8a:
                    8d:4f:81:c7:b7:50:74:05:7e:77:02:bc:39:70:ba:
                    e7:70:d4:42:3d:e1:0c:ca:e3:ed:1e:08:94:5f:74:
                    fd:32:29:59:d2:9c:47:9c:42:0d:8c:e3:9e:1a:86:
                    e3:8b:76:d4:08:e5:37:31:39:3b:4a:79:a1:ce:18:
                    90:2e:1e:0a:e3:1e:9c:4b:bf:f9:3e:26:3f:b7:6a:
                    04:8a:b3:cf:c4:d5:4e:26:8d:9c:20:40:db:d9:ec:
                    69:c1:57:f0:27:d5:ef:33:3b:0a:6a:4d:cd:8a:24:
                    ed:ff:fd:43:8f:69:d6:3e:10:cd:00:92:e4:a6:9e:
                    07:62:39:21:fa:3c:bf:f8:3e:c4:fe:33:c7:5c:71:
                    d4:ba:79:10:b1:c7:c6:bf:93:2c:53:13:fa:fa:af:
                    22:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C1:39:2D:86:B5:67:6D:A2:5C:1B:EC:5B:AA:90:A7:32:0F:67:48
            X509v3 Authority Key Identifier:
                keyid:A3:30:BD:21:03:0D:07:AF:F1:FB:D9:7C:D5:6D:A2:E6:1D:28:17:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3686CD8A969604D0D5B19FAE7F9309F785C327E550C07CE374F3E8C2E347ED5/0/A330BD21030D07AFF1FBD97CD56DA2E61D2817FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A330BD21030D07AFF1FBD97CD56DA2E61D2817FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3686CD8A969604D0D5B19FAE7F9309F785C327E550C07CE374F3E8C2E347ED5/0/34352e3136312e3133332e302f32342d3234203d3e20323635383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:ef:2e:8b:ea:df:8b:26:03:e5:20:65:01:45:1b:24:43:96:
         ab:50:c8:0b:60:57:59:3b:ff:74:da:c2:e9:2c:ac:8a:f6:ae:
         74:ea:a2:87:93:56:5a:5f:40:01:09:82:5c:84:e2:a1:a7:23:
         0f:45:09:9c:d5:7c:57:9e:83:58:91:85:a1:b1:d7:c7:09:34:
         d0:ff:62:9d:3d:40:2f:39:c9:dc:5f:01:bd:89:e1:ec:b3:c9:
         65:c6:d9:4a:46:3f:cc:a6:f2:c6:fc:a5:b9:0f:c7:3a:40:8e:
         3f:aa:30:3f:86:02:5b:db:a3:ba:d0:69:81:0a:40:60:17:fc:
         47:a4:30:8e:44:5b:0a:f9:6d:75:08:fe:e0:a8:31:cc:0a:23:
         29:40:35:b2:a5:b5:d7:eb:22:20:18:d2:59:cd:52:f2:33:48:
         68:f1:ad:5a:ba:f4:21:e0:7b:5d:f4:23:37:1e:78:93:8a:71:
         75:43:28:7d:53:a1:c1:b9:c1:e0:8b:e0:19:1c:8f:27:62:4e:
         5c:e3:8c:35:d0:f0:27:8f:58:d4:66:3c:72:3b:74:8e:5e:5c:
         96:a0:10:8a:28:32:2a:3e:17:47:af:3d:b4:3a:bc:3b:9c:cd:
         21:a1:e4:e4:99:30:05:24:b7:bb:57:63:dd:20:66:0c:e9:ad:
         c5:77:b7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:51:44 2025 by rpki-client