Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/34352e3233332e3134312e302f32342d3234203d3e20323636373831.roa
File:                     34352e3233332e3134312e302f32342d3234203d3e20323636373831.roa (raw, json)
Hash identifier:          h1vDF8Jj13syBm8zH51tBHTo5n9leZpg+patZIoSEN8=
Subject key identifier:   08:D2:ED:37:9E:4C:67:76:92:B8:A6:47:4B:E1:95:67:DF:ED:54:3B
Certificate issuer:       /CN=74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483
Certificate serial:       1EB809802241F5895142BFB1A2C47DA722606F4C
Authority key identifier: 74:AA:43:08:C5:C1:EF:C7:C5:C0:06:F2:CC:6F:5C:7B:E6:02:14:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/34352e3233332e3134312e302f32342d3234203d3e20323636373831.roa
Signing time:             Thu 24 Apr 2025 12:15:01 +0000
ROA not before:           Thu 24 Apr 2025 12:10:01 +0000
ROA not after:            Thu 23 Apr 2026 12:15:01 +0000
asID:                     266781
IP address blocks:        45.233.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b8:09:80:22:41:f5:89:51:42:bf:b1:a2:c4:7d:a7:22:60:6f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483
        Validity
            Not Before: Apr 24 12:10:01 2025 GMT
            Not After : Apr 23 12:15:01 2026 GMT
        Subject: CN=08D2ED379E4C677692B8A6474BE19567DFED543B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:81:84:22:97:b9:a1:a7:4b:e9:89:11:22:
                    4e:b5:e8:36:0f:9d:dd:c9:91:a5:be:7f:38:5c:12:
                    43:d9:70:25:c6:ec:ce:3e:dd:af:88:74:a1:0f:d9:
                    ee:40:13:2b:9e:f9:e3:7f:fb:7f:b4:4a:84:2e:dc:
                    7b:d7:41:1b:c5:36:23:62:3e:f1:6e:62:69:2d:31:
                    25:2e:6a:e4:a7:a9:11:d2:b9:d1:76:5e:a1:7b:ef:
                    e7:ab:e6:11:92:93:b1:fa:0c:84:ca:bb:4e:18:95:
                    13:d1:62:d2:41:53:3e:ad:68:34:52:16:7b:da:38:
                    73:41:3b:bb:d0:55:f6:dc:75:42:54:c9:98:8e:ef:
                    c9:13:03:47:da:3b:2c:a8:ef:9b:01:cb:bb:7b:f3:
                    2f:a3:4d:33:e8:20:c4:ee:84:8b:6d:65:10:16:78:
                    76:73:dd:a7:80:56:18:af:f0:1f:d4:ec:33:80:1f:
                    78:f1:2e:70:0e:75:94:63:60:54:0a:21:7f:17:d0:
                    64:4b:24:69:36:2b:16:0b:95:10:0e:8b:7a:22:fd:
                    b8:0c:09:6f:b1:99:ff:ce:27:4e:b2:b6:ae:5a:5f:
                    43:95:58:78:c6:20:e6:3a:4a:1e:c4:3a:50:22:bd:
                    07:b3:0b:d9:6b:0d:11:dc:31:83:10:fb:ce:34:2d:
                    a7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D2:ED:37:9E:4C:67:76:92:B8:A6:47:4B:E1:95:67:DF:ED:54:3B
            X509v3 Authority Key Identifier:
                keyid:74:AA:43:08:C5:C1:EF:C7:C5:C0:06:F2:CC:6F:5C:7B:E6:02:14:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/34352e3233332e3134312e302f32342d3234203d3e20323636373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:c9:37:38:3d:66:2e:07:d4:2d:d8:8b:cb:5a:1f:44:4f:74:
         1d:86:90:27:97:d4:b1:4d:3a:c6:6e:a2:a1:99:70:9b:2e:60:
         3a:c9:22:99:9c:88:88:b9:10:de:6a:21:64:af:af:96:55:bf:
         6c:b6:b3:ac:b8:2a:0b:07:fd:37:4b:02:ce:47:a3:0e:57:e3:
         86:73:42:1d:d7:d7:78:f4:0c:50:b5:37:78:2b:07:3a:29:f2:
         f3:40:79:e6:b0:1b:ba:b8:d0:5e:a7:4f:82:35:2d:44:2f:b5:
         b6:13:d2:f0:43:af:b2:c5:82:24:e6:3f:65:0a:14:4c:ec:7f:
         6b:cb:34:e2:07:ca:86:a4:55:d2:34:77:b3:3d:6d:e6:ee:17:
         57:1b:b6:7e:2b:2d:9c:32:d9:43:07:40:04:74:0d:22:76:8a:
         30:1d:77:12:71:44:8c:72:55:69:28:40:53:80:fc:48:60:99:
         63:78:e6:2a:f9:c7:cb:78:fe:6c:3a:23:34:d3:f3:09:04:b7:
         b3:b1:da:cf:ab:93:8e:e7:72:62:56:5e:38:26:55:b9:99:48:
         f1:fc:8c:7f:8f:4c:25:f5:6d:0b:7d:ff:76:e5:ed:13:71:9d:
         98:9e:61:02:c3:ed:52:21:23:20:2b:d1:2e:1d:3b:28:07:9f:
         61:a3:28:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:25 2025 by rpki-client on console.sobornost.net