Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/34352e3138342e3130382e302f32322d3232203d3e20323639373833.roa
File:                     34352e3138342e3130382e302f32322d3232203d3e20323639373833.roa (raw, json)
Hash identifier:          kl4rmnhPchWiKsQLMm7VKygfi4JEqU4PsDudk+keCIw=
Subject key identifier:   76:FC:6F:F0:47:42:02:F4:6E:D1:6E:B2:D4:F0:41:D4:15:BE:71:E4
Certificate issuer:       /CN=E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93
Certificate serial:       3074A98E95DBE095D32858A26B36EFF7247B1646
Authority key identifier: E5:A9:09:25:49:B8:3C:DF:7A:FA:AC:8B:F8:A5:65:0A:DC:B9:8E:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/34352e3138342e3130382e302f32322d3232203d3e20323639373833.roa
Signing time:             Tue 04 Feb 2025 18:53:39 +0000
ROA not before:           Tue 04 Feb 2025 18:48:39 +0000
ROA not after:            Tue 03 Feb 2026 18:53:39 +0000
asID:                     269783
IP address blocks:        45.184.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:74:a9:8e:95:db:e0:95:d3:28:58:a2:6b:36:ef:f7:24:7b:16:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93
        Validity
            Not Before: Feb  4 18:48:39 2025 GMT
            Not After : Feb  3 18:53:39 2026 GMT
        Subject: CN=76FC6FF0474202F46ED16EB2D4F041D415BE71E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2c:e7:36:33:91:24:4e:57:9e:15:a0:7b:32:
                    9a:f8:ac:d1:e8:29:de:71:9e:bd:ff:1e:77:22:2c:
                    c9:9d:c2:99:63:b8:92:ca:d4:48:1d:ab:da:6d:db:
                    44:7b:65:75:b3:63:f8:5c:78:88:84:c6:8b:b2:17:
                    4d:e2:44:91:08:04:43:ee:3b:4a:c2:59:6e:50:20:
                    d7:fb:f5:f0:da:2b:23:1a:db:1c:6d:36:bd:b3:d3:
                    0b:80:72:7f:e1:a8:a9:e0:3f:d8:6b:67:8c:c5:e7:
                    0b:26:d9:2e:6f:2c:a7:cb:9c:42:d8:71:92:85:91:
                    e2:6b:3d:68:91:c2:b2:87:1a:ee:3b:a2:7a:a8:2f:
                    00:26:ec:3b:bc:da:9d:92:36:7b:69:a2:43:10:4e:
                    18:b5:4a:90:ed:06:d2:87:97:76:67:5b:1a:12:45:
                    14:69:b6:4e:33:bd:67:57:b9:2a:9e:b4:e6:5a:83:
                    d3:fc:56:42:11:a4:8f:47:dc:cc:b3:81:15:aa:6b:
                    9f:ef:1a:68:44:3e:4e:4d:13:dd:25:ec:00:21:1b:
                    7d:b6:91:52:1d:35:40:6d:42:b4:a9:85:bc:0e:3e:
                    ec:1d:50:2a:72:95:94:09:a3:b9:c8:a4:5a:f7:85:
                    23:46:9e:e4:b5:f3:dc:18:8c:92:08:1f:77:ff:db:
                    68:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FC:6F:F0:47:42:02:F4:6E:D1:6E:B2:D4:F0:41:D4:15:BE:71:E4
            X509v3 Authority Key Identifier:
                keyid:E5:A9:09:25:49:B8:3C:DF:7A:FA:AC:8B:F8:A5:65:0A:DC:B9:8E:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/34352e3138342e3130382e302f32322d3232203d3e20323639373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:0d:f9:3b:05:db:e6:ac:1a:01:63:3c:5d:cb:93:6d:b2:3c:
         17:c0:eb:5f:f0:d7:ee:89:c1:df:57:de:b1:eb:46:50:51:c3:
         a7:62:81:0d:cd:71:2e:62:50:b6:b2:ba:0f:bc:e6:71:96:d2:
         67:f7:74:23:5d:3a:68:d1:13:0a:42:c5:3e:e0:35:e9:6c:5f:
         88:d3:a3:51:88:47:43:3e:d5:89:2d:76:8e:2c:4d:36:cf:b7:
         9c:8f:0f:a6:b5:a2:19:90:3f:6a:2d:5d:05:71:38:41:17:48:
         f7:e4:76:e1:16:84:05:50:0e:28:40:ae:2b:90:e7:59:78:c4:
         87:91:a7:45:9d:3f:bf:16:99:dd:13:39:0b:31:2f:c8:b3:be:
         62:00:c3:b5:a5:55:53:e1:75:b1:72:3c:7b:63:96:64:70:42:
         62:7f:02:04:59:4a:a1:c4:e4:c6:dc:99:62:5b:7c:28:fd:11:
         43:98:60:79:ed:12:c8:77:44:52:bc:a8:87:3c:bb:69:77:08:
         b0:dc:74:e6:c3:f2:3a:98:44:05:b4:a4:6f:24:64:19:d8:b0:
         71:2a:51:79:d2:c0:8c:8a:d4:71:e3:ad:e1:6d:57:86:d1:45:
         d0:2f:13:f8:97:1b:5c:32:a2:23:15:15:9f:8f:77:a5:4b:cf:
         18:57:33:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:13 2025 by rpki-client