Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/34352e3138372e34382e302f32322d3234203d3e20323639383535.roa
File:                     34352e3138372e34382e302f32322d3234203d3e20323639383535.roa (raw, json)
Hash identifier:          GFkeIZvOBfE0613STIqrCMRTvuuA/NMRb4mLnONtqL4=
Subject key identifier:   BF:E2:97:04:B9:14:57:03:EF:61:40:D4:4E:1B:A8:64:6C:6F:AA:82
Certificate issuer:       /CN=2DBD5E6445B18A49C070373764E221FE2FF0BE85
Certificate serial:       66CC5AFC8381D687C5C3CD473B438F58A5821297
Authority key identifier: 2D:BD:5E:64:45:B1:8A:49:C0:70:37:37:64:E2:21:FE:2F:F0:BE:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/34352e3138372e34382e302f32322d3234203d3e20323639383535.roa
Signing time:             Tue 04 Feb 2025 18:34:08 +0000
ROA not before:           Tue 04 Feb 2025 18:29:08 +0000
ROA not after:            Tue 03 Feb 2026 18:34:08 +0000
asID:                     269855
IP address blocks:        45.187.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:cc:5a:fc:83:81:d6:87:c5:c3:cd:47:3b:43:8f:58:a5:82:12:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DBD5E6445B18A49C070373764E221FE2FF0BE85
        Validity
            Not Before: Feb  4 18:29:08 2025 GMT
            Not After : Feb  3 18:34:08 2026 GMT
        Subject: CN=BFE29704B9145703EF6140D44E1BA8646C6FAA82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2a:48:98:e4:31:ac:b3:01:21:6b:83:94:43:
                    2c:cf:54:73:bf:fe:46:40:87:eb:ec:9a:6a:50:43:
                    1c:64:a6:2f:a4:bd:fa:22:6e:bb:01:a1:c5:70:bf:
                    63:1c:20:7e:39:0d:4a:d9:e3:7f:8e:53:9a:f1:45:
                    0a:c4:c1:a1:69:25:09:5a:97:81:31:2b:82:42:bd:
                    b8:33:64:df:2b:b1:54:25:9a:0a:df:0e:b6:c7:c0:
                    37:3f:c6:4d:e7:c3:95:28:eb:eb:ea:61:6e:9e:13:
                    a0:7f:36:34:5a:38:52:47:7c:e9:dc:88:a2:2f:40:
                    05:29:60:f0:77:55:8b:30:56:da:c3:e9:8e:b2:3b:
                    37:21:42:ec:91:e0:af:92:a3:40:26:dc:db:10:b9:
                    b6:12:de:e7:a7:6d:e0:0f:36:af:d8:5c:96:a2:f0:
                    50:09:6e:ad:05:c1:a3:f2:cb:e6:f4:63:22:c8:10:
                    50:5a:8f:04:d6:d1:69:2c:f0:f4:4e:d8:b9:4d:c3:
                    8e:3a:da:96:37:15:0f:38:d6:5c:f9:09:9b:af:6e:
                    cd:96:b3:7c:f6:0e:19:72:ab:33:46:c6:1f:e9:0f:
                    e4:0a:31:0f:48:ea:d5:86:60:52:a2:9d:46:9b:6c:
                    41:8a:6e:f4:36:63:57:cc:9d:d2:86:9e:64:db:06:
                    75:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E2:97:04:B9:14:57:03:EF:61:40:D4:4E:1B:A8:64:6C:6F:AA:82
            X509v3 Authority Key Identifier:
                keyid:2D:BD:5E:64:45:B1:8A:49:C0:70:37:37:64:E2:21:FE:2F:F0:BE:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DBD5E6445B18A49C070373764E221FE2FF0BE85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0112F343F1452E36A8A156373A6DF4A1F08853C62976DFAB74C02068161E8EA9/0/34352e3138372e34382e302f32322d3234203d3e20323639383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:f0:f0:d5:83:9f:6d:5b:b7:eb:49:22:bc:e8:9d:cb:f0:42:
         c0:45:53:0b:c9:5e:66:21:e4:1d:d0:8c:ed:aa:2d:c9:82:b4:
         50:6a:6f:7a:bc:4d:ff:a5:b0:f8:86:af:6f:f8:9d:91:1c:04:
         f4:5c:dd:94:95:9c:c9:ae:c8:b8:56:f1:02:b7:06:26:21:f1:
         a8:4f:7b:cb:27:4a:6b:c7:2e:7a:d2:1f:32:af:2e:db:3d:d6:
         ff:92:4a:dd:7b:d4:b0:fd:6e:e7:ec:8d:91:c5:9a:5b:7c:19:
         2f:05:e9:87:2e:b4:36:f6:e6:85:09:a5:75:5d:05:5b:bd:e0:
         87:34:de:30:b1:a3:3f:db:fb:9a:91:72:79:e8:b7:a6:42:cb:
         d2:8c:4c:0a:a8:cf:3c:4a:3f:5a:59:c5:32:68:f8:fa:a2:5b:
         a9:22:f4:08:2c:ea:7e:d8:10:c1:4f:69:89:09:8a:30:b0:04:
         9e:5d:b1:f8:70:56:f3:b8:0b:30:d8:72:bf:dc:2d:5c:92:98:
         64:17:2c:93:6a:e8:88:72:72:be:95:dc:fe:aa:72:cf:98:d7:
         38:1c:63:2d:26:da:c6:94:83:f3:8a:f9:c5:68:f1:8a:38:a2:
         b2:f0:91:40:fa:52:d8:8d:a7:26:5b:cf:a5:ec:4c:cc:41:e8:
         3c:44:94:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:13 2025 by rpki-client