Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/34352e3136392e3136342e302f32322d3234203d3e203438323532.roa
File:                     34352e3136392e3136342e302f32322d3234203d3e203438323532.roa (raw, json)
Hash identifier:          lHGdbm0jarU0A1RgdgQoJfAO8SJILH4uKlJM5Za1Bx0=
Subject key identifier:   6A:F7:FD:61:0F:C4:F0:E7:51:9D:79:05:C2:07:D7:12:AB:2F:49:53
Certificate issuer:       /CN=23B95CF72FE276BEB53EBBC11D213ED7A3BE995B
Certificate serial:       2BC6D2ACB53932648FE1A3DADBA4E7240EC3EDCB
Authority key identifier: 23:B9:5C:F7:2F:E2:76:BE:B5:3E:BB:C1:1D:21:3E:D7:A3:BE:99:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/34352e3136392e3136342e302f32322d3234203d3e203438323532.roa
Signing time:             Tue 04 Feb 2025 18:10:08 +0000
ROA not before:           Tue 04 Feb 2025 18:05:08 +0000
ROA not after:            Tue 03 Feb 2026 18:10:08 +0000
asID:                     48252
IP address blocks:        45.169.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 06:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c6:d2:ac:b5:39:32:64:8f:e1:a3:da:db:a4:e7:24:0e:c3:ed:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23B95CF72FE276BEB53EBBC11D213ED7A3BE995B
        Validity
            Not Before: Feb  4 18:05:08 2025 GMT
            Not After : Feb  3 18:10:08 2026 GMT
        Subject: CN=6AF7FD610FC4F0E7519D7905C207D712AB2F4953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:17:41:df:6b:3c:f4:fa:c0:1d:3f:94:5b:68:
                    63:58:0b:b1:61:6c:55:7b:ba:e5:79:d5:0f:43:cc:
                    c4:1d:ea:c2:8c:14:e9:ed:2a:94:00:fd:74:5d:77:
                    b5:31:0e:91:41:f2:f2:42:e1:4d:b8:2b:04:a8:7a:
                    e3:0f:3b:86:86:8d:0b:55:78:64:99:f1:30:e2:b4:
                    2f:0f:a1:fa:0d:bf:e1:04:28:e2:af:38:56:11:72:
                    b6:f5:09:36:6e:e7:ce:c7:fa:59:c6:8a:5c:ae:a3:
                    ac:a3:d3:72:92:87:31:a6:7b:0e:34:79:c3:2a:eb:
                    4c:43:a5:09:cb:c7:20:6f:34:d1:21:0a:67:90:34:
                    38:02:91:82:73:83:e4:be:04:f3:49:e3:5f:a5:ac:
                    95:46:8e:7d:34:08:f5:82:8b:40:ec:76:2b:50:8f:
                    b2:5e:f2:38:af:f1:b1:ed:7a:5c:36:dd:31:9d:d5:
                    e0:db:f8:58:35:74:83:4a:7b:ef:af:04:52:72:44:
                    9a:74:01:29:50:90:3f:5d:c9:e4:a3:70:eb:29:4d:
                    e4:12:75:e5:7a:f2:c9:16:11:1e:5e:dc:18:57:b6:
                    ed:0d:63:17:ea:16:c5:90:4b:a9:49:70:e7:eb:34:
                    50:6c:c6:71:2f:4a:b4:25:a7:15:47:f9:d9:42:55:
                    8c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F7:FD:61:0F:C4:F0:E7:51:9D:79:05:C2:07:D7:12:AB:2F:49:53
            X509v3 Authority Key Identifier:
                keyid:23:B9:5C:F7:2F:E2:76:BE:B5:3E:BB:C1:1D:21:3E:D7:A3:BE:99:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23B95CF72FE276BEB53EBBC11D213ED7A3BE995B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1702E1A3DF1D1A79A56BD5C10CAA1F95F3CE7660852C9B5974427E47DF65C9B8/0/34352e3136392e3136342e302f32322d3234203d3e203438323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:81:7f:7f:13:c0:a6:b7:bd:62:a5:21:d7:99:b2:c4:fb:13:
         6a:90:e4:06:0e:bf:e5:f0:52:f6:c1:59:5f:c2:07:2e:9d:62:
         c8:0f:f1:c0:21:2a:80:2b:a6:08:0b:79:ee:1f:7a:ed:1a:d4:
         d9:d5:9c:1b:0c:d8:85:00:ae:76:6b:7f:cb:94:62:15:6f:59:
         cb:30:9e:b6:96:02:14:31:fa:80:a7:a4:99:ba:56:05:ce:3a:
         78:58:38:8e:aa:1f:71:f4:26:b4:0f:13:62:b2:b0:da:41:6c:
         60:c9:b9:e1:45:38:41:25:2e:bd:d7:af:1b:df:c3:58:03:ca:
         42:7a:48:2c:e3:5a:0c:e6:38:05:ec:fc:4d:9f:a7:88:82:37:
         28:ad:04:87:1e:bb:e3:b1:ce:53:c8:f6:6e:f8:83:9c:8f:ae:
         16:3f:6e:58:24:36:27:b1:71:ae:c9:87:ca:3a:b7:7d:9a:b6:
         bc:86:56:60:ef:7f:9b:06:60:63:38:5e:08:b6:0c:6a:83:bf:
         e9:28:3a:d5:fe:79:cd:fc:82:d3:a3:34:6a:82:75:53:88:c6:
         4d:45:06:f4:79:d5:26:63:4d:3e:45:56:15:10:34:a4:5a:6b:
         07:55:1e:1d:63:55:ed:07:57:dd:a2:22:ea:d4:31:2f:da:c2:
         3c:ee:2a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:17:02 2025 by rpki-client