Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e203532343638.roa
File:                     34352e3233392e34342e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          W1P0JJHyVrkCN2RvwUkvswikCLB04L6FchuhIvxucGI=
Subject key identifier:   F7:18:6A:3E:27:71:3C:8D:B7:C0:81:E0:D9:FD:97:A7:39:55:DF:AA
Certificate issuer:       /CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Certificate serial:       5BD64140E6D5117FD687F20C84B553FDAFBD3641
Authority key identifier: 8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e203532343638.roa
Signing time:             Thu 03 Apr 2025 16:50:00 +0000
ROA not before:           Thu 03 Apr 2025 16:45:00 +0000
ROA not after:            Thu 02 Apr 2026 16:50:00 +0000
asID:                     52468
IP address blocks:        45.239.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d6:41:40:e6:d5:11:7f:d6:87:f2:0c:84:b5:53:fd:af:bd:36:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
        Validity
            Not Before: Apr  3 16:45:00 2025 GMT
            Not After : Apr  2 16:50:00 2026 GMT
        Subject: CN=F7186A3E27713C8DB7C081E0D9FD97A73955DFAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:f2:da:22:e9:bf:13:a8:8a:d4:60:d2:d4:
                    6b:85:27:1c:0e:ac:58:b8:a4:58:32:a9:5c:1b:95:
                    2c:e3:8e:fe:34:24:8e:02:84:17:69:82:88:da:4a:
                    5d:22:2d:42:14:cd:0d:e7:f2:ae:c5:74:59:88:c5:
                    5d:71:db:8c:f6:8b:87:6d:6c:9e:7c:f1:e7:d8:11:
                    fd:35:00:39:af:c0:ca:a4:29:2c:03:31:23:48:1d:
                    ef:7c:33:42:e6:fa:d1:3d:8e:c7:f0:78:7e:97:57:
                    78:98:7d:ed:3c:bf:74:d2:5c:35:b3:b0:95:d7:73:
                    7a:e2:f6:95:7f:ae:7d:3c:2e:f4:ad:ff:1e:a9:03:
                    08:3d:15:5f:57:0a:4d:5a:c5:60:61:e0:ad:76:b5:
                    48:b4:d8:2f:f7:ba:20:99:00:99:a1:1e:be:8f:25:
                    81:4b:e2:17:6f:66:c8:d7:e5:73:cb:e9:a1:98:13:
                    e7:33:7e:00:ec:8b:ba:ad:02:f0:f3:39:c2:d9:16:
                    30:7a:54:6b:2a:a8:c5:b7:1b:de:0e:2e:c5:6c:2e:
                    47:a4:b3:35:81:37:af:7c:a2:b0:78:ea:ad:b1:4e:
                    c3:f2:13:e3:39:e0:73:84:e7:5e:f0:e0:5e:b0:79:
                    dd:c1:25:e1:d0:92:78:60:1a:1d:58:c9:ef:76:32:
                    8f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:18:6A:3E:27:71:3C:8D:B7:C0:81:E0:D9:FD:97:A7:39:55:DF:AA
            X509v3 Authority Key Identifier:
                keyid:8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:6c:33:5e:4b:44:ff:3a:a9:a3:bc:2d:31:09:fb:cf:36:16:
         9a:28:12:68:01:ae:e9:2c:ad:8a:bd:dc:59:57:da:2d:b9:53:
         10:65:3b:03:88:0b:8f:bc:90:01:84:d2:71:8e:89:29:34:e7:
         f7:38:e7:88:11:33:82:8b:74:08:ee:c6:67:32:fa:99:88:e5:
         61:e0:89:c1:fc:4a:b7:a7:a2:40:3b:54:02:5f:3c:aa:e8:4d:
         28:1f:58:03:c8:a3:77:57:e8:c7:0c:93:58:40:c5:ea:64:e3:
         ff:a8:f3:c0:de:89:52:77:03:a9:91:d7:87:4b:63:2d:89:90:
         ff:48:e5:fc:ba:11:00:20:6a:d4:77:a6:db:26:8d:38:99:31:
         90:ca:7a:6c:90:34:b0:96:c0:90:25:a6:57:1e:82:e8:ce:f9:
         4f:10:df:b8:cd:95:de:70:51:8c:b8:e3:92:b1:70:b6:6a:81:
         e1:16:76:c3:1a:4f:2a:05:90:54:90:25:22:62:f2:46:0e:bb:
         d1:86:69:0c:76:57:49:d4:72:64:7a:48:eb:30:f0:d2:2e:e4:
         81:c1:77:42:64:c8:ea:6d:db:e1:43:eb:a5:b5:44:fc:00:ea:
         05:f5:52:76:3a:93:c7:06:ae:f3:92:8c:5f:87:70:02:9c:ea:
         81:4d:2b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:27 2025 by rpki-client on console.sobornost.net