Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/34352e3139302e3136382e302f32332d3234203d3e20323639393031.roa
File:                     34352e3139302e3136382e302f32332d3234203d3e20323639393031.roa (raw, json)
Hash identifier:          HxsOLIL9fhhKX1vP8lDX2/JbZlqyhZI1Ws0+BpBobjw=
Subject key identifier:   20:E0:78:62:A9:46:80:0C:49:6D:42:A3:3F:3F:25:9B:07:7B:93:94
Certificate issuer:       /CN=3ADE18BE908E59DAF6EDF98BC507574C686B73FF
Certificate serial:       1169D7AFA75C578AAF8B7BA86FCC6F6522DE7AD5
Authority key identifier: 3A:DE:18:BE:90:8E:59:DA:F6:ED:F9:8B:C5:07:57:4C:68:6B:73:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/34352e3139302e3136382e302f32332d3234203d3e20323639393031.roa
Signing time:             Tue 04 Feb 2025 18:48:48 +0000
ROA not before:           Tue 04 Feb 2025 18:43:48 +0000
ROA not after:            Tue 03 Feb 2026 18:48:48 +0000
asID:                     269901
IP address blocks:        45.190.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:69:d7:af:a7:5c:57:8a:af:8b:7b:a8:6f:cc:6f:65:22:de:7a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ADE18BE908E59DAF6EDF98BC507574C686B73FF
        Validity
            Not Before: Feb  4 18:43:48 2025 GMT
            Not After : Feb  3 18:48:48 2026 GMT
        Subject: CN=20E07862A946800C496D42A33F3F259B077B9394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:38:59:30:55:0f:5a:32:07:ab:7c:63:28:
                    2e:c6:2c:8b:48:db:41:08:56:15:ec:c6:67:d9:17:
                    a3:ff:36:0e:02:bb:81:e8:f4:86:45:bc:04:5c:52:
                    93:96:5e:8d:94:85:dc:c3:74:2e:01:e4:44:69:c3:
                    1f:e1:01:be:ce:5c:f2:13:d4:ed:8c:aa:99:b3:7b:
                    55:f5:01:8a:ea:37:35:9e:22:41:af:46:2b:e6:e9:
                    8d:74:09:4b:db:f0:97:cb:1a:d6:28:77:78:4f:10:
                    49:68:23:b0:d4:b6:08:8b:3f:07:14:e8:ee:e7:3b:
                    8e:3e:cf:8b:68:36:89:ca:62:ba:4c:ca:69:07:30:
                    dd:7d:bb:63:45:71:25:ba:67:a2:76:fa:b8:32:f6:
                    27:f1:de:40:e9:1c:a4:35:3e:cc:99:ff:46:b0:75:
                    bc:f4:24:13:67:ba:af:dc:e2:b8:2d:73:96:bf:d1:
                    c4:16:4b:80:6b:5f:e1:8f:a1:f2:66:e1:1d:a2:10:
                    dd:1b:04:85:69:5c:c6:39:e3:41:7f:a7:88:c4:84:
                    5b:3e:2f:be:03:2c:0c:68:75:fc:ed:1b:12:af:90:
                    6d:63:fb:28:c0:af:da:9c:5c:b1:7a:6e:80:ab:c0:
                    20:71:40:6f:e0:f7:90:99:29:9a:e2:7c:6f:a7:c0:
                    0a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E0:78:62:A9:46:80:0C:49:6D:42:A3:3F:3F:25:9B:07:7B:93:94
            X509v3 Authority Key Identifier:
                keyid:3A:DE:18:BE:90:8E:59:DA:F6:ED:F9:8B:C5:07:57:4C:68:6B:73:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE18BE908E59DAF6EDF98BC507574C686B73FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14E923ACF6CC9BCC8A04F486E81A28636AA85C4697AC042C3A9994E7E2B34258/0/34352e3139302e3136382e302f32332d3234203d3e20323639393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:2a:3b:db:9a:5f:6c:dc:19:d7:39:a2:d0:e2:7f:9f:58:12:
         a2:9e:8e:27:ef:f2:0d:0e:d2:38:66:27:de:a6:2c:7c:13:4b:
         4b:5d:f8:b4:22:e8:5d:14:16:aa:74:48:f2:b8:12:9b:fd:b6:
         6b:42:4f:bb:13:e6:95:59:54:bd:40:4e:a6:eb:f5:cf:ea:56:
         9a:43:e2:32:67:43:cf:be:e3:b8:0c:b1:eb:85:31:14:53:ab:
         15:a0:64:c2:ea:44:bc:2d:10:04:e5:ac:62:51:97:2c:54:4b:
         24:93:59:ad:80:61:07:97:22:b5:9b:19:61:36:03:c2:86:f6:
         bd:11:7a:44:5e:ce:b1:69:50:57:be:e6:25:19:72:9e:6f:11:
         1e:9e:e3:fd:c2:e4:66:02:ad:f3:39:d2:4b:c2:1a:3b:1a:d6:
         80:00:89:0c:9c:2c:48:35:fc:61:e8:c0:91:73:70:b7:49:0a:
         db:35:c4:e0:96:85:20:98:31:be:b6:7d:26:34:0f:1a:f4:57:
         2a:f7:41:17:2d:b1:30:c5:5d:0f:69:ba:6d:79:a1:00:ba:b1:
         f9:23:32:f7:cb:5d:9e:19:21:d3:38:14:88:19:65:ad:61:c1:
         96:ae:0c:bc:72:57:65:dc:26:98:d4:08:c7:fe:2f:5d:c7:7d:
         b8:bf:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:43 2025 by rpki-client