Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/34352e3137322e3234382e302f32322d3232203d3e20323637383031.roa
File:                     34352e3137322e3234382e302f32322d3232203d3e20323637383031.roa (raw, json)
Hash identifier:          bKKRmHYEFiVNzAVc2qZ+ZP/3lEjJ89UPeGiSK1CLIe4=
Subject key identifier:   C2:62:7C:75:F4:76:B3:DC:0D:D7:B6:F5:32:5C:32:0B:90:DD:0A:64
Certificate issuer:       /CN=9644ECC99A7803741A541FDFD8422B9726740EA2
Certificate serial:       0DDE9E03BCEDFAD4FCA761D89834B909A8B3CD65
Authority key identifier: 96:44:EC:C9:9A:78:03:74:1A:54:1F:DF:D8:42:2B:97:26:74:0E:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9644ECC99A7803741A541FDFD8422B9726740EA2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/34352e3137322e3234382e302f32322d3232203d3e20323637383031.roa
Signing time:             Tue 04 Feb 2025 18:46:49 +0000
ROA not before:           Tue 04 Feb 2025 18:41:49 +0000
ROA not after:            Tue 03 Feb 2026 18:46:49 +0000
asID:                     267801
IP address blocks:        45.172.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/9644ECC99A7803741A541FDFD8422B9726740EA2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/9644ECC99A7803741A541FDFD8422B9726740EA2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9644ECC99A7803741A541FDFD8422B9726740EA2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 04:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:de:9e:03:bc:ed:fa:d4:fc:a7:61:d8:98:34:b9:09:a8:b3:cd:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9644ECC99A7803741A541FDFD8422B9726740EA2
        Validity
            Not Before: Feb  4 18:41:49 2025 GMT
            Not After : Feb  3 18:46:49 2026 GMT
        Subject: CN=C2627C75F476B3DC0DD7B6F5325C320B90DD0A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:05:19:8f:f4:1e:f7:cd:d7:11:10:64:6e:
                    1d:78:24:74:ed:8b:c6:45:c0:49:c3:19:83:f5:22:
                    98:12:a4:e0:31:51:e1:34:e3:7c:1c:6f:ad:21:5c:
                    b0:03:1c:f9:29:34:6e:07:59:74:61:3b:73:4b:9e:
                    4e:01:04:d6:4a:80:da:f0:2c:b1:2c:36:cd:0c:0e:
                    82:f1:ee:67:74:21:1b:48:62:4e:26:37:00:15:41:
                    da:1f:7e:fe:6b:5b:8b:33:61:80:0c:f9:e2:16:7d:
                    28:f3:06:c5:cb:2d:96:f4:08:0a:80:e3:28:3e:6f:
                    43:df:84:56:a9:f3:ec:49:47:25:a5:3f:9e:b2:de:
                    0a:ea:8f:c0:25:ca:88:5f:66:2e:75:e4:1e:79:29:
                    ec:41:dd:72:13:ea:76:46:e3:c2:98:6f:03:68:c0:
                    28:b9:10:44:57:b6:58:45:64:f1:f0:b8:26:43:36:
                    d7:67:8d:c4:92:96:57:d2:d9:d9:07:71:06:a3:c3:
                    49:ae:70:69:c9:5f:3a:52:f5:0b:0a:65:c6:81:52:
                    65:f7:5e:09:1f:d8:e7:48:80:6d:02:ba:c8:9e:78:
                    b2:a6:62:5c:48:df:7e:bc:fd:b4:d3:01:47:26:da:
                    f7:26:21:8e:ba:ff:43:2b:f7:f8:14:b2:74:7e:30:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:62:7C:75:F4:76:B3:DC:0D:D7:B6:F5:32:5C:32:0B:90:DD:0A:64
            X509v3 Authority Key Identifier:
                keyid:96:44:EC:C9:9A:78:03:74:1A:54:1F:DF:D8:42:2B:97:26:74:0E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/9644ECC99A7803741A541FDFD8422B9726740EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9644ECC99A7803741A541FDFD8422B9726740EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/34352e3137322e3234382e302f32322d3232203d3e20323637383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:dc:2f:d3:a5:01:71:1e:b7:2b:f5:a4:0c:13:3d:a4:95:ea:
         c3:e0:4a:be:be:64:0c:4f:83:03:79:e8:0b:b4:00:0c:40:be:
         74:9b:9c:9c:ac:9e:57:6d:c5:53:86:c0:b6:9e:2a:74:e3:1c:
         b8:11:c8:2d:7f:df:37:71:8b:b8:ab:e4:3e:c2:eb:0b:8f:91:
         c0:b1:a5:1e:34:8a:ce:d2:3d:ee:27:03:e8:c9:56:2d:27:40:
         5a:ec:e8:bb:ec:e3:ab:a5:77:c7:97:ea:f1:ee:34:2c:c8:1b:
         e1:55:dc:1c:88:b7:50:5d:c9:e2:1c:ed:01:8c:c5:97:eb:e7:
         ac:01:98:71:a8:1e:d6:5f:b0:a1:62:a5:55:1f:6e:f6:a8:64:
         37:00:5d:fa:df:2c:e7:62:8e:77:4e:43:3a:59:1c:9b:2a:a2:
         25:5b:83:d1:d5:f0:5d:4c:06:5f:77:8d:de:c8:ca:ea:cd:c4:
         9d:a0:c1:2f:59:6f:75:cd:68:d1:f5:86:f5:74:8f:47:b8:44:
         77:31:8b:2b:a8:2f:75:53:33:2c:de:bb:ff:56:d3:e6:a3:3e:
         35:29:1c:a6:f7:8f:84:f0:3d:b2:5e:d7:2b:2f:0c:97:99:52:
         5b:c7:7b:98:fe:c2:f9:08:03:bb:f4:56:49:e6:9e:ca:e5:88:
         e2:f1:e1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:47:32 2025 by rpki-client