Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/34352e3233302e34342e302f32322d3234203d3e20323639373530.roa
File:                     34352e3233302e34342e302f32322d3234203d3e20323639373530.roa (raw, json)
Hash identifier:          JeB9ejo1wI9NNiJzweisXuyBNBUftU9IcYObRbEoV+M=
Subject key identifier:   E2:E0:9D:E1:38:72:C5:FC:A2:78:43:A0:03:F6:9B:34:B0:DC:DA:F5
Certificate issuer:       /CN=75812974A06BBC586C8B2B8774FD236214956CF8
Certificate serial:       49D62D41F0BED7E1807BF401B193A0C952CAA7BF
Authority key identifier: 75:81:29:74:A0:6B:BC:58:6C:8B:2B:87:74:FD:23:62:14:95:6C:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75812974A06BBC586C8B2B8774FD236214956CF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/34352e3233302e34342e302f32322d3234203d3e20323639373530.roa
Signing time:             Tue 22 Apr 2025 16:15:43 +0000
ROA not before:           Tue 22 Apr 2025 16:10:43 +0000
ROA not after:            Tue 21 Apr 2026 16:15:43 +0000
asID:                     269750
IP address blocks:        45.230.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/75812974A06BBC586C8B2B8774FD236214956CF8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/75812974A06BBC586C8B2B8774FD236214956CF8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75812974A06BBC586C8B2B8774FD236214956CF8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d6:2d:41:f0:be:d7:e1:80:7b:f4:01:b1:93:a0:c9:52:ca:a7:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75812974A06BBC586C8B2B8774FD236214956CF8
        Validity
            Not Before: Apr 22 16:10:43 2025 GMT
            Not After : Apr 21 16:15:43 2026 GMT
        Subject: CN=E2E09DE13872C5FCA27843A003F69B34B0DCDAF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ee:f5:22:f6:3f:fd:b3:66:08:e7:75:7d:10:
                    12:0f:f8:63:9d:d8:d9:40:f7:9b:b3:fe:74:de:a3:
                    1f:a8:71:0e:86:38:a2:61:e7:69:80:44:c4:84:9b:
                    ff:9d:ca:c3:ad:7a:b1:5b:6c:d2:c9:18:73:84:5f:
                    7c:a2:5a:70:cf:5d:fd:70:dd:3b:f6:88:7d:4a:55:
                    10:f6:fc:a6:1f:63:cf:58:43:fb:2d:c2:29:18:81:
                    bd:36:7a:5f:79:3e:81:9d:a9:7e:ec:5a:db:37:9f:
                    1a:e5:f4:22:63:48:99:92:ad:cd:0f:59:2c:52:d1:
                    b0:52:2d:a6:e6:53:d9:46:86:08:4f:58:16:23:60:
                    99:8b:63:21:86:a5:c7:a6:6b:3b:b0:92:e3:5a:25:
                    ce:f2:63:48:65:8d:0d:72:ba:0b:6f:cd:eb:d0:7c:
                    9d:f1:f1:6f:55:3a:c8:c2:ab:db:c8:9b:0b:ce:94:
                    e8:1e:ea:7d:5f:44:9e:ff:90:0e:ef:94:2c:60:9e:
                    b2:9f:4a:aa:bf:c3:48:04:de:a0:08:28:1d:73:87:
                    f4:9f:c9:cf:59:eb:7f:b2:fe:d5:7d:c8:ad:09:a0:
                    24:b3:6e:36:80:bc:c9:62:a2:23:f8:ce:8a:e9:32:
                    1f:fc:7c:d8:b8:fd:3f:a3:26:d3:a1:89:ab:09:86:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E0:9D:E1:38:72:C5:FC:A2:78:43:A0:03:F6:9B:34:B0:DC:DA:F5
            X509v3 Authority Key Identifier:
                keyid:75:81:29:74:A0:6B:BC:58:6C:8B:2B:87:74:FD:23:62:14:95:6C:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/75812974A06BBC586C8B2B8774FD236214956CF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75812974A06BBC586C8B2B8774FD236214956CF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/34352e3233302e34342e302f32322d3234203d3e20323639373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:27:3b:1e:c9:04:2d:b7:f4:60:cb:80:f0:3c:51:e1:99:4b:
         de:84:c3:1d:f9:b6:ac:d7:eb:86:44:f9:dc:b0:ee:1e:01:e4:
         dd:b8:e5:2c:15:7e:e3:47:50:f7:e0:a0:b5:0e:7d:06:c6:cc:
         14:d1:2b:11:b7:bb:0a:b6:9b:5a:39:63:8f:fd:c2:45:3b:7c:
         65:20:03:de:d2:f1:26:8e:fb:0c:f3:dc:b0:a0:00:d2:a7:37:
         3f:98:b3:a5:13:87:bd:45:72:54:6a:e1:15:92:6e:43:4e:97:
         b1:fd:1b:e3:5a:aa:c3:1d:0d:91:8f:22:ba:81:9c:31:2f:67:
         6b:5e:21:18:8a:fc:f7:12:9c:71:9f:0c:5d:fc:07:83:f5:74:
         d6:47:87:fc:56:59:54:ab:ca:2e:d1:9d:c9:31:bf:45:46:82:
         af:05:e4:b0:80:97:a9:ba:ef:ca:e9:a6:64:d1:f0:83:e2:4a:
         7a:f4:c1:92:f1:d6:55:b1:de:3a:bb:35:43:30:7f:e0:b1:4a:
         4a:df:3c:6c:11:f3:7a:5f:c5:f8:56:ce:7e:14:cd:33:96:57:
         37:e8:35:01:af:0e:d4:94:41:37:be:6d:f2:7d:c7:dc:a4:af:
         bc:ff:ae:5a:42:f8:f0:5c:70:e7:03:fc:3d:c6:3f:17:c2:64:
         25:32:13:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:50 2025 by rpki-client on console.sobornost.net