Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/34352e3137312e33362e302f32322d3234203d3e20323634363739.roa
File:                     34352e3137312e33362e302f32322d3234203d3e20323634363739.roa (raw, json)
Hash identifier:          D2Y43ATV1UTqQ132SKniCNeHbGqr/tyZ/kjOf17k2l4=
Subject key identifier:   2C:07:DF:89:D1:C4:96:C6:40:C7:09:BF:24:11:C6:20:B5:74:B0:35
Certificate issuer:       /CN=5506AF01F36FB1CE1124E8FE845AB28B7A0834AE
Certificate serial:       18D14C678A89F5360546F75DA0D4D61706FFBF20
Authority key identifier: 55:06:AF:01:F3:6F:B1:CE:11:24:E8:FE:84:5A:B2:8B:7A:08:34:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/34352e3137312e33362e302f32322d3234203d3e20323634363739.roa
Signing time:             Tue 04 Feb 2025 19:56:39 +0000
ROA not before:           Tue 04 Feb 2025 19:51:39 +0000
ROA not after:            Tue 03 Feb 2026 19:56:39 +0000
asID:                     264679
IP address blocks:        45.171.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d1:4c:67:8a:89:f5:36:05:46:f7:5d:a0:d4:d6:17:06:ff:bf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5506AF01F36FB1CE1124E8FE845AB28B7A0834AE
        Validity
            Not Before: Feb  4 19:51:39 2025 GMT
            Not After : Feb  3 19:56:39 2026 GMT
        Subject: CN=2C07DF89D1C496C640C709BF2411C620B574B035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:b4:e1:5b:ba:2b:43:48:e9:76:ce:c3:e8:
                    bc:4a:af:fa:3b:f5:30:f8:db:bc:5a:6c:50:47:a8:
                    fe:44:bd:6a:f8:f7:43:34:f2:09:c1:52:5a:36:b1:
                    63:65:69:1e:2f:f7:a6:e9:d1:17:73:35:f9:6d:92:
                    ed:0d:f9:11:ec:fb:1d:05:2c:7a:12:b4:be:27:5b:
                    b2:f7:74:a3:6f:e9:e3:0b:f5:7a:f9:5f:f0:15:eb:
                    0d:f1:ce:1f:3b:11:29:fd:15:dd:82:d6:65:40:70:
                    a6:77:1b:52:87:fb:c1:ac:24:c2:d2:92:01:07:41:
                    87:89:84:14:f9:14:f7:98:f7:3e:20:e0:2e:65:77:
                    42:0e:21:ba:68:d9:19:32:8c:fa:50:37:df:37:01:
                    7b:5b:a2:e5:42:90:68:44:0d:3e:6d:0c:f5:8f:c9:
                    c1:3a:72:b9:d9:1f:a2:d3:9f:24:9c:fc:20:d4:41:
                    5b:5a:73:a4:db:0e:54:4e:7d:49:95:5b:82:4e:af:
                    68:34:56:6c:de:ba:6c:ba:85:fc:31:83:eb:89:3c:
                    a1:26:d2:38:a0:a7:3b:c5:f1:2a:0b:a1:76:62:92:
                    44:d9:15:b7:9c:ab:48:92:80:76:7f:c2:87:1e:85:
                    a1:3b:4b:94:43:6a:5c:13:55:33:fe:fe:36:25:27:
                    62:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:07:DF:89:D1:C4:96:C6:40:C7:09:BF:24:11:C6:20:B5:74:B0:35
            X509v3 Authority Key Identifier:
                keyid:55:06:AF:01:F3:6F:B1:CE:11:24:E8:FE:84:5A:B2:8B:7A:08:34:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506AF01F36FB1CE1124E8FE845AB28B7A0834AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18A24C434AEF9EEDADFC802732DF0F2EE9B32C8078A7FD233D30E2FEFB5DC0E2/0/34352e3137312e33362e302f32322d3234203d3e20323634363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:bc:28:d8:ee:6e:c5:e9:36:73:79:21:02:ce:fa:2c:31:11:
         68:24:16:15:91:d9:eb:67:90:30:36:38:87:87:91:54:09:4b:
         21:6f:33:55:98:35:9d:3c:2c:9b:92:17:e9:f5:94:12:d0:86:
         e3:13:7b:a4:d5:f6:45:3a:03:a4:9a:8b:74:c4:b3:23:11:16:
         a2:c2:a4:38:f4:a9:d7:c5:9a:08:ed:09:92:e6:cf:a1:c3:69:
         1c:b6:e0:a8:6b:35:d6:5b:7d:7e:92:7e:dc:ac:a5:5c:eb:1c:
         97:f4:be:b3:38:fc:7a:4e:48:20:16:14:66:4d:c6:d8:b4:61:
         15:33:21:e9:66:ef:e4:86:d1:01:d4:1c:a0:2d:3d:23:9f:19:
         9f:e0:01:2d:8a:a6:da:ed:e0:75:3e:de:55:2e:93:6e:f8:da:
         4a:5a:02:14:db:23:a6:21:ea:8a:9e:69:b2:9b:44:11:63:6a:
         66:9e:2f:50:6a:7a:2e:be:17:1a:4e:c9:ab:f9:87:f9:f0:ba:
         2c:7a:91:5b:a8:51:f3:a3:30:35:f5:f2:29:8b:a1:f4:68:e8:
         74:92:39:23:39:87:0f:3b:6d:0a:ee:20:72:ae:65:f2:d0:e1:
         5b:fd:da:80:8d:f9:36:67:4b:9f:b2:ac:3a:5f:10:e1:78:3d:
         04:12:92:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:41 2025 by rpki-client