Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/34352e3233382e32302e302f32322d3234203d3e20323636383330.roa
File:                     34352e3233382e32302e302f32322d3234203d3e20323636383330.roa (raw, json)
Hash identifier:          V3py5lbcLoOCmxYwOpDj6F+MTyq8IqDm6FrEtnKT+gA=
Subject key identifier:   03:3F:0D:F2:D8:2F:4F:21:07:8E:FB:9F:A2:43:E1:3C:CC:F2:F4:6A
Certificate issuer:       /CN=F9EA39151165D2A448DFE339D82161C0BE689819
Certificate serial:       60DF87034E30290997C758E8604872E0B92596
Authority key identifier: F9:EA:39:15:11:65:D2:A4:48:DF:E3:39:D8:21:61:C0:BE:68:98:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9EA39151165D2A448DFE339D82161C0BE689819.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/34352e3233382e32302e302f32322d3234203d3e20323636383330.roa
Signing time:             Tue 04 Feb 2025 18:53:59 +0000
ROA not before:           Tue 04 Feb 2025 18:48:59 +0000
ROA not after:            Tue 03 Feb 2026 18:53:59 +0000
asID:                     266830
IP address blocks:        45.238.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/F9EA39151165D2A448DFE339D82161C0BE689819.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/F9EA39151165D2A448DFE339D82161C0BE689819.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9EA39151165D2A448DFE339D82161C0BE689819.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:df:87:03:4e:30:29:09:97:c7:58:e8:60:48:72:e0:b9:25:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9EA39151165D2A448DFE339D82161C0BE689819
        Validity
            Not Before: Feb  4 18:48:59 2025 GMT
            Not After : Feb  3 18:53:59 2026 GMT
        Subject: CN=033F0DF2D82F4F21078EFB9FA243E13CCCF2F46A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:02:61:73:b6:0f:4f:b5:93:eb:bd:d1:93:fe:
                    72:ae:41:17:b9:73:9b:75:ff:b6:9a:09:08:e3:23:
                    c3:0a:2d:9c:d1:11:96:e5:c1:25:f6:72:7b:d0:74:
                    9c:df:ce:f5:cf:cf:a5:d1:fb:36:29:11:de:87:80:
                    7a:17:0a:a9:1d:54:38:9c:90:11:26:1c:f8:aa:db:
                    1d:16:50:e8:3f:18:6e:92:6b:d2:c6:38:21:20:37:
                    0c:99:4c:af:91:8e:34:e6:b4:f0:8c:a9:16:63:38:
                    77:0b:84:5e:92:84:49:56:d8:0b:f5:a9:16:a4:c4:
                    c1:ca:9e:a4:0b:6c:a7:d1:20:0b:69:46:b7:20:f8:
                    e5:2e:4d:bf:2b:28:cb:01:80:aa:1e:52:9c:bb:06:
                    b8:87:bd:78:e7:e1:8a:b8:95:ae:a6:f4:0e:2c:39:
                    aa:bd:38:a4:97:b4:37:f6:48:4d:47:18:19:40:b9:
                    8e:ca:ec:af:c4:e9:2d:6e:13:b8:ce:3c:22:23:c0:
                    fe:97:6a:bd:a5:a3:98:a9:e7:38:f7:be:c5:1a:14:
                    88:5b:14:1a:c7:71:5d:21:dc:14:32:ab:a2:3b:1e:
                    4d:69:45:ec:d7:31:09:63:46:b4:a8:8a:a2:af:ba:
                    44:9e:f6:76:7f:00:87:7b:76:c1:67:8a:8e:fe:e5:
                    ed:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3F:0D:F2:D8:2F:4F:21:07:8E:FB:9F:A2:43:E1:3C:CC:F2:F4:6A
            X509v3 Authority Key Identifier:
                keyid:F9:EA:39:15:11:65:D2:A4:48:DF:E3:39:D8:21:61:C0:BE:68:98:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/F9EA39151165D2A448DFE339D82161C0BE689819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9EA39151165D2A448DFE339D82161C0BE689819.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1133E312FEA2FE97F59A2B4FEFA34CD930F3CE505E7B1163E45A6575076465A2/0/34352e3233382e32302e302f32322d3234203d3e20323636383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:cd:af:dd:c3:7d:48:ed:3d:8a:a3:42:ee:2c:24:75:2c:ec:
         4c:ac:74:c0:75:2e:dd:b6:32:d5:64:43:4e:7f:80:7f:c1:ab:
         84:37:ba:16:f8:e2:d5:50:fc:2c:56:78:e4:98:5a:5f:c0:a7:
         2c:a1:ac:d0:cf:4b:62:ab:86:de:c5:8f:df:f6:8d:3e:a0:10:
         47:75:c4:c0:02:47:c0:41:d0:52:0c:ef:fc:35:d3:5e:06:47:
         6b:f4:0c:22:51:ef:f0:0b:af:9f:77:ac:20:62:f0:f9:4a:66:
         6b:ba:6e:57:21:c9:ed:ef:8c:c0:96:08:2b:09:f9:42:a9:d8:
         02:22:57:ff:47:a0:b5:de:3c:39:2d:c9:23:40:a0:38:c7:37:
         d5:3b:56:9f:50:50:5a:ea:dc:16:c2:68:ea:c8:8e:16:52:48:
         8a:63:1a:35:28:ef:96:e9:5b:db:6c:1a:d1:dc:33:86:54:94:
         01:d6:65:72:a0:f7:50:04:74:f6:83:e5:d9:72:3e:cd:8f:df:
         45:cc:7d:3f:35:32:73:ee:f0:23:72:24:0c:59:c0:91:02:42:
         12:12:bf:af:cb:e8:59:08:ef:bf:2e:11:3c:f4:c4:f9:a7:3a:
         56:7a:ce:4b:d2:aa:02:84:37:51:a0:38:7f:b8:35:9c:62:71:
         c8:92:2f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:50:06 2025 by rpki-client