Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/34352e3233382e3231362e302f32322d3234203d3e203237393437.roa
File:                     34352e3233382e3231362e302f32322d3234203d3e203237393437.roa (raw, json)
Hash identifier:          2gPPWAyplkrbyfE2urrA7BUwvsmpmMaW8rjHaBC1fjw=
Subject key identifier:   F0:30:34:6B:43:60:BE:0B:49:B7:C5:56:C5:45:1F:F2:9E:8D:02:CF
Certificate issuer:       /CN=46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9
Certificate serial:       5FDAE1EAB6430F11437D834C34A19A621CD15A72
Authority key identifier: 46:E0:BE:72:AD:BD:D3:EF:75:63:F2:AB:10:8C:45:62:94:6A:7D:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/34352e3233382e3231362e302f32322d3234203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:39:25 +0000
ROA not before:           Tue 04 Feb 2025 18:34:25 +0000
ROA not after:            Tue 03 Feb 2026 18:39:25 +0000
asID:                     27947
IP address blocks:        45.238.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:da:e1:ea:b6:43:0f:11:43:7d:83:4c:34:a1:9a:62:1c:d1:5a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9
        Validity
            Not Before: Feb  4 18:34:25 2025 GMT
            Not After : Feb  3 18:39:25 2026 GMT
        Subject: CN=F030346B4360BE0B49B7C556C5451FF29E8D02CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f7:06:0e:67:3e:a6:bf:d2:7d:8b:a3:4b:9f:
                    dc:25:b0:eb:2e:a0:be:6f:86:59:ec:31:7e:9e:02:
                    63:14:ee:d7:a3:61:29:10:04:ea:27:31:3d:9e:02:
                    ae:00:df:c0:b5:c4:0d:6e:2d:4a:ce:e4:57:59:08:
                    88:cc:05:29:8f:af:f8:14:7f:fc:ca:19:36:60:4f:
                    31:fd:16:ef:da:52:b1:be:18:bc:55:e6:ca:ef:eb:
                    c8:a8:c3:f5:8e:8b:c7:a4:e0:dd:7b:31:43:a0:22:
                    60:59:b8:6a:53:b3:5a:7e:27:c2:fa:ef:b2:e6:20:
                    1c:7f:16:4d:e7:41:4e:cd:0e:33:df:34:aa:18:9a:
                    04:54:d3:31:3d:d2:b6:ac:63:98:5e:6a:ac:cb:db:
                    dc:61:8a:27:c0:bd:8d:3f:83:d1:a3:63:6c:1d:fb:
                    b2:50:38:8a:b6:c2:e3:a4:d2:73:68:15:69:54:29:
                    c6:e6:ce:53:4e:80:37:64:88:b6:a4:1e:01:cd:61:
                    04:8b:9f:a9:61:ad:49:32:42:3b:73:99:3e:59:de:
                    ea:1f:7f:5b:d4:fc:e1:4a:87:0e:75:5c:bb:36:19:
                    46:45:70:b1:cd:0f:fc:fe:3d:01:db:ba:60:39:66:
                    1b:72:ff:f3:e1:ce:c1:bd:f3:c0:69:b5:a8:1d:fd:
                    31:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:30:34:6B:43:60:BE:0B:49:B7:C5:56:C5:45:1F:F2:9E:8D:02:CF
            X509v3 Authority Key Identifier:
                keyid:46:E0:BE:72:AD:BD:D3:EF:75:63:F2:AB:10:8C:45:62:94:6A:7D:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/34352e3233382e3231362e302f32322d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:a9:bd:b3:13:ec:2f:a7:78:7d:b7:59:db:02:11:80:e2:5a:
         d4:56:f4:da:4b:63:09:80:86:c5:d1:58:c9:89:c1:47:d0:c8:
         e6:ee:db:c7:7a:6f:78:1b:7a:33:7b:d8:c1:11:27:f5:ff:97:
         cc:dd:6f:cf:77:87:a7:34:27:ad:36:89:e5:e4:55:26:4e:6c:
         7a:7d:30:52:c7:83:8e:41:fe:70:53:78:f6:8f:54:da:74:60:
         cc:28:cc:76:c7:06:76:25:47:a7:d9:09:6c:27:06:f5:f3:2f:
         0e:a5:88:61:51:00:30:e0:27:d3:ac:eb:8c:2c:4c:af:21:3b:
         f7:c2:d8:a5:da:59:7e:9c:c4:1e:e4:02:20:b4:1e:dc:ee:dc:
         e9:66:e9:95:d2:7a:5a:2d:b3:78:0a:8b:16:22:ef:a5:a7:ac:
         16:4f:24:37:a3:25:60:16:4b:36:37:88:15:5b:4f:49:13:61:
         c8:ea:4f:9f:b9:a2:89:80:f3:22:97:3b:d4:21:9c:09:16:f3:
         7f:25:7e:47:05:c1:3a:93:ad:0b:d2:f5:9b:83:96:56:e1:c7:
         f3:99:ef:e3:6d:38:58:fe:f2:c1:40:53:1b:08:19:f6:c2:4e:
         91:3b:8b:5e:e8:d0:5d:91:89:35:95:35:f3:12:65:13:28:ec:
         f0:e7:21:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:28 2025 by rpki-client