Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/34352e3138382e3231392e302f32342d3234203d3e20323639383434.roa
File:                     34352e3138382e3231392e302f32342d3234203d3e20323639383434.roa (raw, json)
Hash identifier:          o1CtWFmm1iYAEHlmYU6qbJHOxBRSEcrAqO3Y+pjmBQI=
Subject key identifier:   02:72:1C:EF:AC:89:75:FF:42:CA:47:9E:52:21:84:93:5B:B0:1A:C0
Certificate issuer:       /CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790
Certificate serial:       4D449E17063B3BA7B21A7FFE4E48D57C9F288B83
Authority key identifier: FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/34352e3138382e3231392e302f32342d3234203d3e20323639383434.roa
Signing time:             Tue 04 Feb 2025 19:58:01 +0000
ROA not before:           Tue 04 Feb 2025 19:53:01 +0000
ROA not after:            Tue 03 Feb 2026 19:58:01 +0000
asID:                     269844
IP address blocks:        45.188.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl
                          rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:44:9e:17:06:3b:3b:a7:b2:1a:7f:fe:4e:48:d5:7c:9f:28:8b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790
        Validity
            Not Before: Feb  4 19:53:01 2025 GMT
            Not After : Feb  3 19:58:01 2026 GMT
        Subject: CN=02721CEFAC8975FF42CA479E522184935BB01AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:52:a4:0a:f1:4d:80:69:f8:99:1b:dd:b8:b1:
                    3b:ec:ad:b3:2d:78:81:3d:49:49:79:d8:e1:ae:88:
                    c4:89:79:15:c0:bb:60:06:9b:d5:0b:63:a3:46:69:
                    38:27:ea:58:24:26:da:5e:2b:00:a2:f1:73:d2:e0:
                    3d:c5:c1:18:26:48:b9:95:2f:83:2c:cc:dd:07:b3:
                    f7:1d:2c:cb:58:87:f6:5e:65:03:5f:c8:dd:1c:87:
                    1a:55:9f:ee:70:76:e5:fc:d4:82:7d:9a:19:b7:1e:
                    1e:b7:25:45:0a:e2:ae:70:c0:b3:73:25:05:89:a5:
                    a3:9c:40:a0:6a:57:b5:14:b8:cf:63:84:09:80:92:
                    44:b0:fe:0b:80:00:25:ef:1c:5e:00:ee:bd:b8:97:
                    25:4c:1b:68:9e:d4:53:73:d5:d4:62:ff:4c:5a:75:
                    89:48:ae:f4:9c:e1:a3:3e:dd:8e:a4:1c:2a:55:e0:
                    28:3f:f9:e3:dc:8e:9a:b6:50:1f:e9:b3:7b:21:c3:
                    a8:da:34:6e:30:ad:07:1c:fe:d6:69:b6:79:d1:cf:
                    55:b6:4a:82:fe:ca:ba:09:04:cf:0c:c4:fe:28:eb:
                    91:96:27:34:1a:59:4e:e5:60:78:2b:53:1b:23:c9:
                    80:ea:c5:70:d4:a5:9c:bf:5b:ac:67:a6:96:29:f6:
                    3a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:72:1C:EF:AC:89:75:FF:42:CA:47:9E:52:21:84:93:5B:B0:1A:C0
            X509v3 Authority Key Identifier:
                keyid:FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/34352e3138382e3231392e302f32342d3234203d3e20323639383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:dc:1a:e8:7e:1d:d2:13:fd:07:97:c4:74:43:f2:3d:3e:92:
         5b:15:97:8b:cc:75:de:e0:39:67:57:fd:aa:84:58:47:dd:d4:
         4b:ed:e0:57:71:2f:91:1c:3d:88:03:3d:c0:ab:95:bd:3b:e6:
         19:0b:73:15:54:34:94:59:dd:a3:1e:e1:4d:81:18:91:e7:d7:
         37:67:3c:35:e8:70:81:4f:47:7f:81:2f:89:8e:f8:6c:0d:a2:
         a5:21:b9:c7:dd:32:c3:6e:27:38:6c:74:21:fd:82:ed:ca:7e:
         fb:b2:d1:d5:d7:26:4c:b9:d4:03:ea:60:85:13:39:4a:ee:9b:
         7b:eb:26:29:a8:17:79:a0:8c:03:f9:15:8c:86:7f:43:33:c0:
         b9:87:c5:a3:cc:fd:9a:89:26:70:42:fd:17:d0:54:79:d2:5a:
         db:a2:4c:81:97:99:b2:20:6d:a7:5e:2c:c2:9c:9b:e0:92:e8:
         c1:42:9d:e6:e5:4f:fc:f5:1d:54:74:93:63:b6:aa:28:fb:17:
         9f:e3:63:9f:d5:10:5a:7a:ba:a8:bd:7f:42:6a:4f:e5:7f:cf:
         9b:c7:98:69:46:25:3c:3d:33:4d:ab:4a:66:9a:d7:5d:9d:45:
         01:36:2e:55:7b:63:56:b4:a5:87:5b:e6:11:ee:38:5d:94:b6:
         4d:f9:ec:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:56:22 2025 by rpki-client