Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/34352e3232352e332e302f32342d3234203d3e20323635383537.roa
File:                     34352e3232352e332e302f32342d3234203d3e20323635383537.roa (raw, json)
Hash identifier:          wkLkCjW7oVjKPrtwq4NY49S0vkcf9AlFCWgMaBNvd2o=
Subject key identifier:   9A:BA:3A:EB:AC:9C:28:AD:E6:99:3E:49:CA:5C:DD:A5:E1:61:61:F2
Certificate issuer:       /CN=B1225D42FCF145DB2561F136DC359390925409AD
Certificate serial:       6589D65D2F821483BE9147325AA11B2F6B29EF8D
Authority key identifier: B1:22:5D:42:FC:F1:45:DB:25:61:F1:36:DC:35:93:90:92:54:09:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1225D42FCF145DB2561F136DC359390925409AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/34352e3232352e332e302f32342d3234203d3e20323635383537.roa
Signing time:             Tue 04 Feb 2025 18:24:35 +0000
ROA not before:           Tue 04 Feb 2025 18:19:35 +0000
ROA not after:            Tue 03 Feb 2026 18:24:35 +0000
asID:                     265857
IP address blocks:        45.225.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1225D42FCF145DB2561F136DC359390925409AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:89:d6:5d:2f:82:14:83:be:91:47:32:5a:a1:1b:2f:6b:29:ef:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1225D42FCF145DB2561F136DC359390925409AD
        Validity
            Not Before: Feb  4 18:19:35 2025 GMT
            Not After : Feb  3 18:24:35 2026 GMT
        Subject: CN=9ABA3AEBAC9C28ADE6993E49CA5CDDA5E16161F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:c5:a7:1c:55:45:15:43:6f:05:92:f8:ad:
                    a3:b3:5a:27:90:5e:51:2f:05:5f:84:a6:b5:1c:f2:
                    e7:56:69:85:fa:c6:a2:ba:26:4b:5d:26:1b:9a:4e:
                    90:7a:6d:33:56:e9:4c:57:54:5a:8e:35:14:d3:59:
                    45:0b:2e:e7:16:f4:29:69:70:26:24:4c:04:e9:3c:
                    8c:23:7a:8e:d5:30:18:dd:cf:f6:89:27:45:db:e9:
                    72:f2:9e:9f:d0:3d:37:10:88:e2:5c:f3:8c:4d:c6:
                    43:d6:3b:76:74:0f:b4:3b:a3:b7:ee:d6:7c:96:8f:
                    e3:db:1f:8c:bd:cf:0b:5a:d5:67:85:df:80:3e:36:
                    ce:b6:d6:23:84:52:5f:6d:65:a4:78:0f:c3:6c:c8:
                    3e:d5:61:b7:ed:7b:1c:5a:81:17:46:05:bc:aa:5f:
                    ee:57:a3:3b:f4:b7:f4:d2:cf:62:aa:ee:d6:13:f4:
                    fe:86:22:4e:e5:d8:d3:33:db:c2:12:8d:8c:44:b1:
                    8b:31:17:e9:26:30:68:38:7f:c7:fa:14:bf:de:92:
                    22:f5:71:7a:1f:2d:ed:bb:cd:df:28:7a:f5:73:a7:
                    b2:f7:c4:c8:84:a9:1b:d4:99:ca:6a:fc:4c:39:d8:
                    00:82:3a:c1:de:1e:6d:0d:57:97:8e:ab:57:ff:67:
                    31:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BA:3A:EB:AC:9C:28:AD:E6:99:3E:49:CA:5C:DD:A5:E1:61:61:F2
            X509v3 Authority Key Identifier:
                keyid:B1:22:5D:42:FC:F1:45:DB:25:61:F1:36:DC:35:93:90:92:54:09:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1225D42FCF145DB2561F136DC359390925409AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/34352e3232352e332e302f32342d3234203d3e20323635383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:65:cb:e1:b8:05:72:43:3d:d7:5a:ab:11:f9:65:13:90:49:
         5e:40:32:36:3d:41:c5:3f:e9:ed:b2:4e:4a:7f:7c:0b:7a:0b:
         d6:04:95:87:c9:cb:86:82:4a:1d:6b:8f:26:b6:63:e5:f1:b6:
         50:8a:19:f0:62:41:2f:ae:06:9b:2b:c9:f9:6f:e6:2f:aa:4a:
         a2:34:3a:c9:48:65:34:d8:0c:5d:3c:55:5d:8a:74:0c:e1:b3:
         1d:b0:6a:e3:7b:6c:e3:d3:62:6b:e2:25:cb:68:0d:c8:7c:62:
         a1:29:45:da:15:2e:71:0b:43:5b:65:30:fd:be:c2:e4:c1:f0:
         af:47:e1:f2:31:a1:ce:cd:64:32:71:d2:8c:40:df:47:ea:17:
         f5:de:ff:fb:75:92:9a:f5:70:f8:df:3f:3c:1a:45:98:61:5d:
         73:88:42:35:d1:15:2c:db:60:98:a0:d4:61:f8:f3:2f:ea:c6:
         bb:9f:80:cd:95:f5:6c:46:c3:b1:c2:57:e2:96:c1:7b:89:37:
         56:e9:d0:71:f9:14:b3:bf:47:61:31:14:07:a5:18:31:a2:42:
         03:e6:0e:39:4f:63:e5:84:bf:dd:aa:da:99:da:32:2b:7e:39:
         7a:80:f7:e6:99:aa:26:5b:1e:f1:d5:d6:1a:26:9c:b0:9a:1f:
         34:50:bf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:47:47 2025 by rpki-client