Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/34352e37312e3131342e3133362f32392d3239203d3e20323636383934.roa
File:                     34352e37312e3131342e3133362f32392d3239203d3e20323636383934.roa (raw, json)
Hash identifier:          lMAzrLE6Obz3lnl34/pZOuRh+20dWexNCfUSGWmz9yo=
Subject key identifier:   A6:D6:7F:B2:1D:5F:E4:AD:E5:33:6B:7D:4A:49:28:22:9E:36:41:95
Certificate issuer:       /CN=BC6522E3C11015B5E5613800EF79B4EAC428C2BA
Certificate serial:       109FD8938162EEAA27A62BCBC7303415E3D5B3E4
Authority key identifier: BC:65:22:E3:C1:10:15:B5:E5:61:38:00:EF:79:B4:EA:C4:28:C2:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/34352e37312e3131342e3133362f32392d3239203d3e20323636383934.roa
Signing time:             Tue 04 Feb 2025 18:56:14 +0000
ROA not before:           Tue 04 Feb 2025 18:51:14 +0000
ROA not after:            Tue 03 Feb 2026 18:56:14 +0000
asID:                     266894
IP address blocks:        45.71.114.136/29 maxlen: 29
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9f:d8:93:81:62:ee:aa:27:a6:2b:cb:c7:30:34:15:e3:d5:b3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6522E3C11015B5E5613800EF79B4EAC428C2BA
        Validity
            Not Before: Feb  4 18:51:14 2025 GMT
            Not After : Feb  3 18:56:14 2026 GMT
        Subject: CN=A6D67FB21D5FE4ADE5336B7D4A4928229E364195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:39:c1:49:02:fe:be:9e:56:bf:e5:e4:13:59:
                    1c:00:5f:6b:9d:8d:11:e8:2a:3a:5b:70:e2:d1:90:
                    24:c3:1e:a1:e0:88:c5:2b:99:82:2a:25:62:66:0e:
                    38:22:a4:c6:0c:89:a1:9a:b3:ae:f0:cd:e7:18:ff:
                    14:52:11:1d:02:b1:6d:34:7f:ac:f3:a2:3f:27:b9:
                    a7:e1:15:ed:b8:0e:75:df:2e:69:be:b0:cc:03:c2:
                    9e:40:d0:fb:90:c3:36:f4:9e:22:e7:e9:06:fb:eb:
                    f5:cd:04:7d:13:73:ca:af:10:c6:98:a7:d0:73:a2:
                    47:68:7a:f7:c5:b3:4e:fd:b2:e1:7f:cc:53:a7:f8:
                    13:50:4d:b3:e4:d2:bc:22:e4:ef:18:68:b5:c3:ba:
                    4a:b3:59:32:6c:18:b0:a2:2f:fc:8e:a6:f7:ce:31:
                    dc:86:af:5f:63:a9:9a:c1:5c:80:83:48:de:0f:91:
                    e1:5d:ca:31:45:9a:72:24:2c:2c:57:f3:e1:d2:93:
                    c2:c8:16:fa:47:23:94:04:be:58:b0:14:d6:fc:5f:
                    d0:31:da:a9:45:a5:1b:8d:73:6c:e1:39:36:42:cf:
                    a6:8f:d4:a8:17:08:2b:99:db:c6:3b:2b:dc:71:e0:
                    88:c0:1e:7f:46:5d:ee:40:b7:02:3c:e9:99:d3:f2:
                    65:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D6:7F:B2:1D:5F:E4:AD:E5:33:6B:7D:4A:49:28:22:9E:36:41:95
            X509v3 Authority Key Identifier:
                keyid:BC:65:22:E3:C1:10:15:B5:E5:61:38:00:EF:79:B4:EA:C4:28:C2:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/34352e37312e3131342e3133362f32392d3239203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.114.136/29

    Signature Algorithm: sha256WithRSAEncryption
         2e:ed:f9:42:f4:cc:2b:4e:f2:8a:e2:46:50:a5:c5:4c:60:2c:
         7a:de:9d:ba:2d:87:e1:66:22:22:ce:8d:5a:d3:6b:21:e1:f1:
         f2:4e:fd:b0:1b:3c:d0:34:eb:44:02:be:bc:5b:59:a6:83:02:
         58:60:17:c7:40:49:e4:43:54:a1:70:d5:53:b6:0f:96:48:53:
         b4:dc:db:2f:57:a7:ab:87:99:fd:2d:9f:7f:df:dc:ea:01:ac:
         55:e9:52:97:8b:ee:ba:79:44:c8:73:fb:4a:9e:68:86:74:9c:
         1b:6c:61:ce:09:6b:24:ba:b9:e6:a2:3b:c5:f0:ef:42:fc:f6:
         67:9b:29:fb:94:44:29:07:3b:7b:4c:f8:a4:68:7e:83:dc:d1:
         80:11:f0:da:3a:10:4e:1e:ec:26:85:10:e6:8c:38:96:b5:16:
         fd:d3:04:b7:0a:6f:92:6a:44:a1:40:6b:eb:79:3c:41:da:8d:
         97:55:fa:5a:66:9d:1f:76:8f:6c:01:62:0e:75:96:5f:ab:ab:
         19:cc:f8:74:da:ea:09:9e:b1:19:25:9e:a3:b8:b3:da:72:e0:
         60:b0:c8:f9:2a:96:05:23:bc:df:ba:36:70:f5:0a:66:ba:5d:
         60:d4:2f:ab:6a:85:b4:fd:a5:db:1a:5b:12:e3:36:d0:3b:78:
         4f:ed:67:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:01 2025 by rpki-client