Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234342e302f32322d3232203d3e20323637393239.roa
File:                     34352e3137392e3234342e302f32322d3232203d3e20323637393239.roa (raw, json)
Hash identifier:          aI+P2LfKX+iY/JmTPlVJcLT1qUnmMBuFV78WgI76myM=
Subject key identifier:   05:92:E2:F2:0C:D0:9D:FE:4A:28:E5:60:B4:7A:C2:EE:B1:8B:49:59
Certificate issuer:       /CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
Certificate serial:       5716FE3853385C33DB19C44C97A54710F1D6D3CD
Authority key identifier: B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234342e302f32322d3232203d3e20323637393239.roa
Signing time:             Tue 04 Feb 2025 18:29:21 +0000
ROA not before:           Tue 04 Feb 2025 18:24:21 +0000
ROA not after:            Tue 03 Feb 2026 18:29:21 +0000
asID:                     267929
IP address blocks:        45.179.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 16:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:16:fe:38:53:38:5c:33:db:19:c4:4c:97:a5:47:10:f1:d6:d3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
        Validity
            Not Before: Feb  4 18:24:21 2025 GMT
            Not After : Feb  3 18:29:21 2026 GMT
        Subject: CN=0592E2F20CD09DFE4A28E560B47AC2EEB18B4959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0f:a3:39:41:da:03:47:02:89:e5:a8:06:4e:
                    4e:6c:e5:6c:97:9c:ba:fb:50:b1:88:da:fc:2b:ca:
                    96:fc:52:79:d9:f8:a7:c3:9a:c5:e2:86:85:c0:9f:
                    6b:3d:79:24:d7:d4:40:b8:5b:a5:27:8e:e4:e2:0f:
                    46:5e:71:58:6e:29:e5:f5:52:d7:00:7f:46:94:07:
                    cf:99:d1:99:99:e7:47:17:6b:18:09:52:5a:30:75:
                    fd:b7:8d:31:1d:45:26:aa:dc:e2:4b:9d:4b:62:5c:
                    58:e7:03:24:21:6c:56:c5:02:13:c6:06:14:b3:d2:
                    9b:7e:1a:88:23:66:1e:1f:43:e9:c3:00:44:66:e5:
                    dd:d8:2b:7b:be:68:bd:d7:36:56:1d:e9:95:f2:b4:
                    9d:93:b9:84:72:43:a8:d8:62:c9:1a:7a:77:c9:1d:
                    ba:78:9a:2d:f2:8b:a5:00:8b:95:7d:75:3b:50:b1:
                    3c:e8:16:af:ed:78:bb:07:b9:21:a5:8d:cd:f3:c8:
                    5b:e6:98:6a:51:22:9b:cc:98:b6:fb:61:82:4a:33:
                    cb:63:45:18:52:f2:52:77:c5:d5:49:7e:14:8a:0b:
                    f1:e7:55:38:34:8a:6b:d0:25:52:59:53:9a:d6:37:
                    66:1a:4d:1d:da:e2:0e:8e:21:42:2b:d5:a8:fd:ab:
                    5e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:92:E2:F2:0C:D0:9D:FE:4A:28:E5:60:B4:7A:C2:EE:B1:8B:49:59
            X509v3 Authority Key Identifier:
                keyid:B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234342e302f32322d3232203d3e20323637393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:9e:54:16:22:91:7c:10:d3:d5:13:b0:d7:91:4b:86:e2:21:
         17:95:0e:25:3e:86:d7:6a:9b:d7:d6:34:b5:23:33:70:68:65:
         bd:20:1e:91:df:36:ef:dd:85:0b:ba:50:78:bc:1d:62:c2:46:
         35:8f:f0:d1:80:20:b2:b6:29:9b:22:5a:da:84:f3:51:34:0f:
         e5:80:f3:40:5d:24:d2:c9:cc:36:85:20:ac:69:e4:65:e1:c1:
         ce:55:22:6d:d6:35:7e:06:c3:13:48:af:37:9f:40:50:98:44:
         bf:03:27:91:f4:6a:57:87:f1:7f:ad:af:8b:f5:b5:8f:27:af:
         db:9a:58:bb:32:a3:37:97:1f:34:07:de:90:7b:2b:90:30:6b:
         08:0f:50:b7:7c:12:e9:cd:41:95:7a:8c:03:e3:ca:b9:31:64:
         37:50:b4:60:06:ab:98:3b:b1:d2:3a:7c:de:1c:e8:62:ce:6f:
         a4:2d:d5:57:7c:63:bf:a7:3f:ea:a3:57:cf:18:32:07:e4:81:
         03:b3:cf:16:61:7c:99:3f:c1:09:2c:ab:ce:16:4c:a5:09:44:
         47:3b:ae:ca:1d:42:ec:84:08:c5:a2:2d:f8:50:ea:7f:7f:14:
         f6:88:39:8a:28:b4:d8:e0:e5:1a:f8:db:ca:bb:db:34:c9:35:
         18:6d:5d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:21 2025 by rpki-client