Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32322d3232203d3e20323636393031.roa
File:                     34352e3136312e3130382e302f32322d3232203d3e20323636393031.roa (raw, json)
Hash identifier:          VlF6Ju6G3UVGsIbMxDgOn4//p7mQ/CQK7AT41fHzjeA=
Subject key identifier:   A4:8B:22:F0:96:E1:A2:96:38:81:2E:C8:ED:5B:80:1F:3E:15:8C:F6
Certificate issuer:       /CN=DB5A38E075D530ECB516C04071D54A6B1DD78CFC
Certificate serial:       6CF4DD92E3E874FE80F96CC8FE7F32AA393EC31B
Authority key identifier: DB:5A:38:E0:75:D5:30:EC:B5:16:C0:40:71:D5:4A:6B:1D:D7:8C:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32322d3232203d3e20323636393031.roa
Signing time:             Tue 04 Feb 2025 18:23:20 +0000
ROA not before:           Tue 04 Feb 2025 18:18:20 +0000
ROA not after:            Tue 03 Feb 2026 18:23:20 +0000
asID:                     266901
IP address blocks:        45.161.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:44:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f4:dd:92:e3:e8:74:fe:80:f9:6c:c8:fe:7f:32:aa:39:3e:c3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB5A38E075D530ECB516C04071D54A6B1DD78CFC
        Validity
            Not Before: Feb  4 18:18:20 2025 GMT
            Not After : Feb  3 18:23:20 2026 GMT
        Subject: CN=A48B22F096E1A29638812EC8ED5B801F3E158CF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:33:1b:73:0c:10:08:dd:9e:8d:d8:89:68:08:
                    5f:bf:78:1b:b0:e9:67:ba:25:2c:91:4b:3a:f6:44:
                    37:b2:ba:eb:f1:71:4e:b1:dc:4d:d7:f5:20:11:71:
                    ac:36:88:1b:00:af:70:5e:48:f8:38:30:a7:51:12:
                    ac:53:5e:4a:4d:15:11:00:f2:93:84:ed:f7:75:54:
                    91:c5:62:19:ba:61:3b:82:fa:c1:a8:15:51:4e:51:
                    a2:1a:7c:71:1f:a7:d7:9c:9f:6b:89:5f:fd:8d:3b:
                    64:32:e8:12:c2:ea:4b:a5:b2:47:90:b3:be:39:2a:
                    28:e0:f7:df:9d:50:b7:d6:15:62:d5:a5:f5:df:e1:
                    c9:2f:d5:01:f5:cb:52:f7:6b:c8:fc:b1:19:da:9b:
                    be:31:24:c3:2a:c7:a1:7d:31:95:17:72:5d:2f:35:
                    3d:32:c6:fe:69:39:05:ec:c1:ec:9a:bb:bf:6d:cb:
                    04:58:44:fe:39:4b:ac:f4:87:17:fa:c8:63:a3:bf:
                    66:3a:c9:88:69:d5:07:c9:9d:2d:48:51:4e:e9:4a:
                    62:bc:7a:2f:9f:ff:40:f6:11:29:b7:fc:b5:68:fe:
                    fc:d1:58:2d:4a:cd:da:ab:4d:0f:7b:30:36:ac:3b:
                    03:8b:a5:90:b7:19:f8:d1:25:aa:0a:8c:f6:78:2c:
                    3a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8B:22:F0:96:E1:A2:96:38:81:2E:C8:ED:5B:80:1F:3E:15:8C:F6
            X509v3 Authority Key Identifier:
                keyid:DB:5A:38:E0:75:D5:30:EC:B5:16:C0:40:71:D5:4A:6B:1D:D7:8C:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32322d3232203d3e20323636393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:a5:68:74:3e:b4:9f:5c:a7:0b:2f:2e:e3:d9:ca:ec:5f:12:
         b2:d2:b2:7e:d1:9c:56:2c:51:3a:56:90:6e:8f:68:2d:70:1d:
         6b:0d:2f:de:07:62:32:8d:80:12:3f:11:13:ae:8d:92:6b:d9:
         aa:c4:39:0a:6b:f3:c0:af:76:b4:a3:6f:9f:11:dc:95:40:25:
         a6:45:35:fb:09:a0:db:d7:69:5d:b4:52:81:4d:be:47:79:af:
         d8:80:65:c4:17:13:67:bd:d6:51:d5:da:88:0b:30:3c:86:33:
         0c:8e:94:4d:31:b9:76:7a:fb:8e:a6:0e:d2:ce:00:26:c9:da:
         3a:59:f2:92:24:e5:a7:42:f5:50:6b:26:95:ed:60:f7:aa:f4:
         67:3f:b2:bb:4c:0b:1e:b5:54:06:0a:89:d0:89:50:24:82:2e:
         a1:56:a6:4f:2a:de:01:f6:d9:f1:74:14:0f:5b:5f:37:32:a3:
         c6:e5:dc:84:dc:ec:b3:ed:98:d4:03:ba:d3:7f:0c:d1:c0:74:
         a8:0b:6b:f5:d1:1a:62:69:36:7e:53:b5:ce:a7:c9:64:b5:cd:
         9e:59:31:31:a0:9b:48:7d:fd:0f:4f:d6:0b:31:90:7b:65:75:
         46:e1:0c:98:b3:5b:d3:bc:d3:93:d6:eb:5f:36:24:a0:56:9d:
         5d:67:3a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:18:17 2025 by rpki-client