Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138322e302f32342d3234203d3e20323637373034.roa
File:                     34352e3136322e3138322e302f32342d3234203d3e20323637373034.roa (raw, json)
Hash identifier:          G6A/4u4O605MjRwAWS1uY5O4AWWS1GhXJo9ZMujgCg0=
Subject key identifier:   06:A0:E3:73:60:C7:D7:A7:76:DA:04:50:03:A8:DF:E9:BB:B6:B0:DE
Certificate issuer:       /CN=BD9037968409387615A2867C81BDF4EE88009203
Certificate serial:       3663A19B538D611C52085D27EF550D7D098C9FD9
Authority key identifier: BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138322e302f32342d3234203d3e20323637373034.roa
Signing time:             Thu 29 May 2025 19:20:29 +0000
ROA not before:           Thu 29 May 2025 19:15:29 +0000
ROA not after:            Thu 28 May 2026 19:20:29 +0000
asID:                     267704
IP address blocks:        45.162.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 21:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:63:a1:9b:53:8d:61:1c:52:08:5d:27:ef:55:0d:7d:09:8c:9f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9037968409387615A2867C81BDF4EE88009203
        Validity
            Not Before: May 29 19:15:29 2025 GMT
            Not After : May 28 19:20:29 2026 GMT
        Subject: CN=06A0E37360C7D7A776DA045003A8DFE9BBB6B0DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7a:21:1d:02:ff:1b:bd:5e:b9:b0:14:59:00:
                    a1:4e:3a:f5:0a:c6:a1:39:c4:d6:ea:a3:98:f6:f0:
                    68:2c:9e:fd:bd:62:7c:0f:29:80:3a:ad:a3:82:d4:
                    3e:30:f8:c5:cf:83:9a:c9:97:f1:5b:a3:7f:fa:30:
                    0b:2a:b8:ad:98:44:ad:18:1e:69:fd:36:da:8a:b6:
                    7f:30:c6:b7:50:45:6a:9c:92:e9:ba:1e:ce:6b:18:
                    cb:70:48:52:3c:b4:3a:c0:1b:b2:f0:6f:21:ce:12:
                    cc:37:f8:8e:45:c6:ec:f2:aa:e7:e7:30:01:14:db:
                    7a:62:80:6e:73:80:fb:03:b3:e7:6d:82:de:e1:18:
                    d2:80:93:10:99:c6:64:73:7f:97:4c:7c:c1:81:46:
                    eb:e3:1f:f3:ee:4d:f8:be:f8:ed:04:0a:66:7b:02:
                    49:05:14:81:60:d1:0a:4d:67:d3:f0:98:30:11:ca:
                    85:d7:f9:7d:4f:83:b2:88:0a:82:55:52:53:15:15:
                    14:71:6d:4c:80:a4:c5:95:a8:d7:7d:46:ba:32:a1:
                    8b:6a:ff:fe:bd:bb:e3:40:a6:ad:31:23:e2:48:d3:
                    6d:be:b4:40:d2:6f:8a:b3:b6:fa:10:0e:c6:75:2e:
                    e7:23:a0:c4:fd:ee:ad:0d:71:62:ad:74:33:4a:26:
                    20:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A0:E3:73:60:C7:D7:A7:76:DA:04:50:03:A8:DF:E9:BB:B6:B0:DE
            X509v3 Authority Key Identifier:
                keyid:BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138322e302f32342d3234203d3e20323637373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:c6:a9:92:c6:68:93:23:d6:01:ee:cc:ea:2d:01:7d:a5:3c:
         a6:f9:32:b9:e4:83:fd:38:6d:f2:dd:db:3a:ce:03:cf:89:fd:
         ba:64:63:a9:21:76:0f:cf:a8:bb:bc:7c:8a:84:43:92:4e:f9:
         b7:bd:fa:3e:ce:b6:a2:75:7f:d9:a1:f0:a9:5d:72:85:0c:30:
         68:5d:24:02:d4:53:d4:fa:51:80:50:84:12:21:fc:c1:bb:18:
         5a:ce:f0:f9:51:9f:ae:af:e4:18:bc:2b:7a:1f:1f:aa:22:ec:
         94:a1:fa:2a:f0:e6:82:00:83:86:17:2c:aa:51:ce:82:b7:78:
         64:b7:bd:84:58:fe:6d:4b:3d:ae:ed:eb:e8:d9:df:a2:c2:a6:
         de:3d:f3:cb:93:61:56:41:45:d8:72:24:18:6e:96:11:15:32:
         00:26:7b:bc:3c:4b:c5:b6:8b:70:24:d1:44:21:a7:8e:33:c8:
         39:d5:c3:61:f5:f1:b5:06:69:43:33:ef:11:18:b6:71:31:b6:
         68:5a:6c:05:0c:30:ee:8b:85:48:f7:61:fb:44:50:df:78:38:
         49:a9:58:79:06:44:6d:83:2c:23:a0:dc:22:54:5f:d4:27:b2:
         5f:53:33:4c:bd:0b:ae:d0:e1:f4:88:dc:6c:14:ab:c8:6c:44:
         77:cc:3d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 12:06:07 2025 by rpki-client