Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/34352e3137342e38342e302f32322d3235203d3e203238333837.roa
File:                     34352e3137342e38342e302f32322d3235203d3e203238333837.roa (raw, json)
Hash identifier:          cM91lW+zu18SVzeXVLI2ZaRMMMICdsjih7NkhhbjsXY=
Subject key identifier:   4D:2A:BB:0A:4C:66:D3:89:26:2C:49:56:82:07:A1:8A:BC:3C:50:59
Certificate issuer:       /CN=A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13
Certificate serial:       54989DEEE780A1B34451C2E216890F95B2C789F6
Authority key identifier: A4:B2:98:6F:7A:8C:C1:14:EF:B0:0E:4A:3F:4C:5F:6F:4A:69:0D:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/34352e3137342e38342e302f32322d3235203d3e203238333837.roa
Signing time:             Wed 09 Apr 2025 16:14:19 +0000
ROA not before:           Wed 09 Apr 2025 16:09:19 +0000
ROA not after:            Wed 08 Apr 2026 16:14:19 +0000
asID:                     28387
IP address blocks:        45.174.84.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:98:9d:ee:e7:80:a1:b3:44:51:c2:e2:16:89:0f:95:b2:c7:89:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13
        Validity
            Not Before: Apr  9 16:09:19 2025 GMT
            Not After : Apr  8 16:14:19 2026 GMT
        Subject: CN=4D2ABB0A4C66D389262C49568207A18ABC3C5059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:31:9a:c6:29:e8:6b:09:5b:db:30:7c:44:
                    78:9e:51:8c:72:df:e4:38:87:a5:fd:78:37:0f:ba:
                    d2:f2:88:81:38:36:5a:25:64:10:e9:f0:40:a9:61:
                    0e:d1:ad:72:81:ce:4d:cb:39:39:84:e3:35:c7:fa:
                    73:ce:b5:de:41:d9:ff:3d:ad:6b:85:60:b6:34:86:
                    63:4d:fc:05:56:d2:4c:85:fd:a7:20:92:2a:ba:fa:
                    4f:4a:b2:f8:a0:2f:1d:1f:ef:6d:ff:fe:44:40:35:
                    18:50:36:65:d2:e7:2c:61:dd:da:0e:52:ec:cc:85:
                    c2:cc:9c:8d:4d:b7:2a:51:c6:96:f2:1c:54:05:de:
                    4c:b1:07:ee:23:97:60:27:33:a1:a2:93:b4:94:ec:
                    f9:fc:b9:35:da:d1:2a:a9:5a:a5:26:13:09:98:32:
                    ba:13:89:ba:ab:d4:cb:84:75:dc:57:8e:12:74:87:
                    09:b9:be:f5:28:5c:3c:0b:47:4a:64:0b:22:3c:f7:
                    a4:d3:56:2d:18:cb:c8:44:80:2b:2d:25:fb:67:c8:
                    ca:1e:54:de:ba:cc:47:73:c0:f9:32:8f:86:d3:6e:
                    1b:77:41:9f:b9:40:d0:8b:a5:d8:7a:64:72:70:62:
                    22:3a:e2:1d:a3:68:1a:81:36:dd:98:00:8e:13:49:
                    08:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2A:BB:0A:4C:66:D3:89:26:2C:49:56:82:07:A1:8A:BC:3C:50:59
            X509v3 Authority Key Identifier:
                keyid:A4:B2:98:6F:7A:8C:C1:14:EF:B0:0E:4A:3F:4C:5F:6F:4A:69:0D:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/34352e3137342e38342e302f32322d3235203d3e203238333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:6b:a3:9e:e8:30:2d:bc:0d:fb:2f:fc:06:01:34:4b:0d:7d:
         ec:e9:94:dc:6d:3b:c6:95:31:64:85:78:9f:a8:97:43:48:28:
         61:da:bb:10:bf:b2:9a:bf:86:d5:90:fd:97:bc:68:b6:21:29:
         3f:c7:1e:2b:5a:2c:e0:ff:eb:d0:a5:d2:5f:3c:a4:2e:d2:c2:
         a8:ac:d1:68:f9:e5:2f:8c:25:85:ef:a9:e9:d5:a7:d7:d3:9c:
         10:e8:81:ed:90:06:cc:2a:ab:6c:f5:24:55:98:0d:50:24:78:
         ae:b2:16:a2:3f:13:f3:fc:cf:2b:a4:21:2a:a6:64:04:7d:b3:
         61:db:57:8f:49:6c:e7:98:9e:1d:d0:0a:f9:e2:86:cc:57:93:
         78:8c:89:40:85:c3:0a:5a:cf:ee:89:8b:60:8c:4f:bd:02:70:
         90:f2:92:ca:b8:19:32:33:12:39:b6:68:1b:c4:25:00:68:cf:
         a1:13:20:f9:5f:cb:85:fa:e1:ae:45:58:62:2d:eb:6a:84:2d:
         49:59:c7:1d:07:6b:f0:4c:02:f6:32:52:d9:3b:4b:a8:b0:11:
         cb:6a:99:55:21:ed:36:3a:5d:0f:ba:72:ed:7d:da:c1:03:79:
         1a:9c:38:b9:fc:51:39:2d:f3:2d:f9:01:0d:ae:47:31:50:30:
         c7:3e:55:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:35 2025 by rpki-client on console.sobornost.net