Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/34352e3233382e3231392e302f32342d3234203d3e203233343837.roa
File:                     34352e3233382e3231392e302f32342d3234203d3e203233343837.roa (raw, json)
Hash identifier:          fClo2Z4bAbjkMJ8EvHJhsI63HGd3jGRlNiuiVQnu7WE=
Subject key identifier:   3D:AA:CE:CE:9D:1E:59:A8:FB:52:45:1B:8A:62:25:CA:6A:6D:FA:A7
Certificate issuer:       /CN=46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9
Certificate serial:       2557089329CE552A3833E71FCB4F1D0625BF69F3
Authority key identifier: 46:E0:BE:72:AD:BD:D3:EF:75:63:F2:AB:10:8C:45:62:94:6A:7D:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/34352e3233382e3231392e302f32342d3234203d3e203233343837.roa
Signing time:             Tue 04 Feb 2025 18:39:26 +0000
ROA not before:           Tue 04 Feb 2025 18:34:26 +0000
ROA not after:            Tue 03 Feb 2026 18:39:26 +0000
asID:                     23487
IP address blocks:        45.238.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:57:08:93:29:ce:55:2a:38:33:e7:1f:cb:4f:1d:06:25:bf:69:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9
        Validity
            Not Before: Feb  4 18:34:26 2025 GMT
            Not After : Feb  3 18:39:26 2026 GMT
        Subject: CN=3DAACECE9D1E59A8FB52451B8A6225CA6A6DFAA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:b1:b3:f5:d3:0e:78:a2:ab:f9:4d:6e:19:
                    dd:04:11:23:d5:94:23:51:be:5f:8d:b6:29:fc:63:
                    17:19:ec:82:6c:82:3c:c1:e6:af:b8:6e:71:5a:3e:
                    34:18:73:8d:63:ff:b1:4b:d4:ca:0e:b9:1c:b3:f3:
                    51:b5:14:4d:e4:a8:97:1e:ff:47:d6:43:21:85:65:
                    49:ef:ab:69:fa:a5:bd:ef:ec:f2:9d:dd:3f:82:e0:
                    8e:5d:bb:78:4c:ed:8e:a3:d2:da:46:ba:11:9d:6c:
                    1a:93:ef:be:05:71:4f:7f:3f:63:f1:36:35:3f:52:
                    a1:bc:6e:10:2d:3d:7a:88:56:af:fa:2b:06:4e:63:
                    59:5e:dd:ab:e2:d5:5d:87:7a:cf:44:46:24:bc:51:
                    f7:00:c1:d0:38:c7:0c:ea:95:c0:cb:d8:1c:e2:a1:
                    8d:53:08:53:42:01:41:b3:27:41:df:f0:f2:e5:9d:
                    b4:80:5e:3a:fb:32:db:4d:9a:92:a2:88:40:34:33:
                    5e:d0:a6:3a:bb:6f:ac:0c:65:4a:49:80:23:ab:d3:
                    2c:11:06:72:2f:db:a0:fb:ba:68:aa:87:15:53:b2:
                    ae:98:98:14:f7:be:b3:e1:77:ae:d8:75:b3:12:6b:
                    b9:d0:5f:62:32:49:f0:3b:b3:d2:1e:0a:80:f2:02:
                    58:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AA:CE:CE:9D:1E:59:A8:FB:52:45:1B:8A:62:25:CA:6A:6D:FA:A7
            X509v3 Authority Key Identifier:
                keyid:46:E0:BE:72:AD:BD:D3:EF:75:63:F2:AB:10:8C:45:62:94:6A:7D:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/34352e3233382e3231392e302f32342d3234203d3e203233343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:e1:23:44:26:47:e3:0d:e3:5c:9d:7f:5d:aa:e0:39:a3:df:
         f0:e9:28:af:65:89:33:80:52:3b:8c:2f:a6:62:35:fd:51:62:
         98:7a:d0:0f:7b:73:71:cb:5e:ce:25:f5:f9:eb:cc:b7:5a:97:
         35:ca:3b:1f:b6:8c:07:13:a7:5f:17:c5:4c:e5:8c:94:9f:2f:
         eb:ea:ad:a9:d1:6f:88:c8:f1:f8:e5:92:42:3b:95:7b:f2:44:
         7c:17:fa:80:30:ee:f7:57:52:58:19:00:cb:4d:89:72:41:c1:
         97:14:cf:1d:52:22:da:d0:5b:92:1f:e3:ae:6c:f1:57:b1:6f:
         9d:d8:b2:76:3b:f4:bb:f7:72:ad:81:d3:07:cd:67:f9:13:18:
         eb:81:42:30:9a:8a:dd:74:6c:74:1c:c9:43:44:26:36:1c:7d:
         6f:3c:e1:57:af:69:4a:7c:5d:5b:cd:c6:cc:64:58:dc:a8:08:
         c4:84:2a:91:65:60:c7:b1:31:aa:83:82:a7:ff:72:04:f3:ab:
         e8:c2:ec:d3:14:81:ef:7f:5d:39:17:f0:05:59:60:9c:74:d5:
         25:d8:e9:05:07:84:dc:d7:6a:58:05:82:49:36:57:9e:dc:e5:
         0f:c0:e5:5a:6f:e2:87:09:11:96:c6:24:46:4e:b6:c2:76:07:
         2a:a9:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:54 2025 by rpki-client