Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/34352e3138382e3132342e302f32322d3234203d3e20323635363036.roa
File:                     34352e3138382e3132342e302f32322d3234203d3e20323635363036.roa (raw, json)
Hash identifier:          0HZY/OU0B5PnaoDotnKIoc0/2dgWlzYBOZymyWVafQQ=
Subject key identifier:   89:B0:01:2A:BA:16:9E:BB:FC:77:68:01:8C:CC:4B:8B:0B:5E:CA:78
Certificate issuer:       /CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
Certificate serial:       17E161F8C1E35CC80704F10C6A89CC570F88760A
Authority key identifier: C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/34352e3138382e3132342e302f32322d3234203d3e20323635363036.roa
Signing time:             Tue 04 Feb 2025 18:42:58 +0000
ROA not before:           Tue 04 Feb 2025 18:37:58 +0000
ROA not after:            Tue 03 Feb 2026 18:42:58 +0000
asID:                     265606
IP address blocks:        45.188.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e1:61:f8:c1:e3:5c:c8:07:04:f1:0c:6a:89:cc:57:0f:88:76:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
        Validity
            Not Before: Feb  4 18:37:58 2025 GMT
            Not After : Feb  3 18:42:58 2026 GMT
        Subject: CN=89B0012ABA169EBBFC7768018CCC4B8B0B5ECA78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:da:77:14:f8:5f:65:e1:f7:36:7b:63:23:54:
                    8c:d4:90:65:c8:41:f1:0a:90:58:0c:f5:9f:eb:74:
                    fa:d2:0c:30:6b:da:b0:6e:ba:ec:43:41:fa:9c:cc:
                    7a:65:62:06:20:aa:4d:b4:45:c2:56:87:d6:ae:12:
                    d3:9c:2e:a8:a3:bd:ae:82:3b:0d:08:71:de:71:46:
                    62:fd:4d:c3:32:90:27:6f:4e:2b:15:23:c6:4e:c5:
                    5e:dd:32:76:d6:ad:a5:91:4a:ad:06:11:94:e0:e4:
                    62:fc:11:1d:da:cc:7b:e1:cf:aa:b9:91:95:f9:e9:
                    9b:d4:01:1e:3d:a6:03:97:86:d2:cd:89:14:86:27:
                    32:f4:4b:4f:0a:4b:47:ec:0c:10:14:23:d4:75:cc:
                    a7:46:f4:7b:ef:5c:5e:b4:62:08:be:5b:08:cb:2c:
                    08:94:21:53:d8:89:c2:3d:4c:a9:ad:08:b4:0c:1b:
                    4f:84:bb:52:76:95:8e:3e:ff:da:9f:ef:f7:8c:e0:
                    18:7e:44:bd:0a:62:89:2c:89:30:ea:c1:38:ee:89:
                    d7:6c:23:21:3b:5e:90:bc:64:84:9b:65:16:a9:af:
                    9e:d2:27:8b:0d:65:15:2f:73:21:95:06:6f:da:96:
                    f8:62:62:88:03:e5:ed:02:1c:63:da:99:42:38:cf:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B0:01:2A:BA:16:9E:BB:FC:77:68:01:8C:CC:4B:8B:0B:5E:CA:78
            X509v3 Authority Key Identifier:
                keyid:C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/34352e3138382e3132342e302f32322d3234203d3e20323635363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:17:b9:65:33:c7:40:e7:eb:46:50:9b:e9:c3:80:72:54:28:
         54:7f:01:e5:8d:e0:ee:4c:7e:9b:07:cf:1c:5c:50:e1:e0:82:
         c3:f8:8c:ea:6c:26:10:19:64:6c:a2:b5:ab:0c:47:58:62:35:
         d8:1c:8d:a0:69:21:bd:d2:22:ad:24:cb:4d:29:48:50:1c:a0:
         14:4e:39:f2:eb:34:b5:d2:31:9d:d9:2f:ae:41:a7:6c:12:1a:
         73:e4:de:65:5a:6e:c7:e1:95:99:ef:ee:c5:a2:5a:c2:f0:f1:
         18:2c:f2:0c:69:7a:1d:09:55:0e:fa:57:61:87:ec:ed:fc:cc:
         1a:6d:30:1c:fa:3c:1f:d1:11:b8:79:b1:f1:94:ef:5d:9c:a1:
         ef:78:3e:f8:c6:3d:f6:8e:fa:92:11:fb:32:d4:65:ef:16:e4:
         e5:58:ac:24:43:d4:1e:90:a5:cb:65:0f:ab:ca:f2:51:f6:d8:
         6f:ae:27:c4:ff:a7:4b:cf:ca:e3:53:0a:d6:b7:3a:fe:81:7f:
         28:0d:a7:e8:7d:64:ee:0e:69:21:0a:f7:02:7a:16:64:45:e1:
         28:05:27:8c:d1:7c:49:29:4e:10:21:3e:54:9b:ab:e2:43:45:
         b8:80:48:83:01:2c:cd:9c:c3:2d:ca:f4:52:de:10:9d:be:26:
         73:5d:3c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:21:00 2025 by rpki-client