Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/34352e3137312e3131322e302f32322d3234203d3e203532343635.roa
File:                     34352e3137312e3131322e302f32322d3234203d3e203532343635.roa (raw, json)
Hash identifier:          cobPEq72YHhaiBgjkkaqcLsH7j+JPFAz0WSnsqH1g5Y=
Subject key identifier:   D5:79:17:61:35:61:C5:96:D1:28:4C:04:E5:1B:BE:F6:DE:EA:D2:D9
Certificate issuer:       /CN=4F53112E85AD3BA5456323CC85F3FD8B078B8EAA
Certificate serial:       084CACBAC1C6658141DAD2A6ABB38F7EA354D5E4
Authority key identifier: 4F:53:11:2E:85:AD:3B:A5:45:63:23:CC:85:F3:FD:8B:07:8B:8E:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/34352e3137312e3131322e302f32322d3234203d3e203532343635.roa
Signing time:             Tue 03 Jun 2025 15:20:55 +0000
ROA not before:           Tue 03 Jun 2025 15:15:55 +0000
ROA not after:            Tue 02 Jun 2026 15:20:55 +0000
asID:                     52465
IP address blocks:        45.171.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4c:ac:ba:c1:c6:65:81:41:da:d2:a6:ab:b3:8f:7e:a3:54:d5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F53112E85AD3BA5456323CC85F3FD8B078B8EAA
        Validity
            Not Before: Jun  3 15:15:55 2025 GMT
            Not After : Jun  2 15:20:55 2026 GMT
        Subject: CN=D57917613561C596D1284C04E51BBEF6DEEAD2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:01:96:d2:fe:6f:61:fd:ea:e3:e5:b3:0b:
                    e9:2d:48:91:c2:30:dd:75:73:71:6e:3a:d9:48:1d:
                    74:80:7c:25:48:d5:d1:43:d0:95:ed:fb:de:af:9d:
                    5f:29:31:a2:e0:31:87:60:c1:40:5d:82:d0:53:4d:
                    59:c4:e7:bb:8e:4b:04:b4:b0:fa:86:11:cd:7c:c1:
                    5a:e2:4c:a8:bf:01:3b:9a:7a:fb:2a:49:c2:2f:63:
                    62:52:85:e8:fa:cc:1a:59:3c:e5:57:c8:a3:47:d5:
                    ff:b0:dd:f1:ec:3e:6c:2f:5d:8f:00:88:ce:a0:e2:
                    07:e5:55:e2:15:13:a0:b2:75:e9:86:96:a6:48:1b:
                    d1:01:f9:59:98:b5:dd:4d:a9:60:13:da:4b:73:4e:
                    77:72:e5:1f:f8:50:03:4f:59:68:60:15:d1:7b:46:
                    3d:1a:07:53:66:d7:d6:c5:1a:43:7e:4b:2e:01:fa:
                    d1:e9:2e:0d:94:8f:2d:4b:44:56:d0:67:39:0e:07:
                    d3:97:ba:01:1c:16:ad:e2:2e:37:2c:70:02:96:b5:
                    72:c7:4f:a2:eb:e8:5b:9f:a8:13:83:5f:27:f7:ac:
                    3a:da:79:1a:7a:bb:58:cb:fc:15:43:1b:91:ed:10:
                    27:48:91:eb:13:41:9d:1b:3f:1f:93:24:70:ad:04:
                    09:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:79:17:61:35:61:C5:96:D1:28:4C:04:E5:1B:BE:F6:DE:EA:D2:D9
            X509v3 Authority Key Identifier:
                keyid:4F:53:11:2E:85:AD:3B:A5:45:63:23:CC:85:F3:FD:8B:07:8B:8E:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F53112E85AD3BA5456323CC85F3FD8B078B8EAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/34352e3137312e3131322e302f32322d3234203d3e203532343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:2f:8d:68:3a:e7:f2:17:b7:a0:ef:16:e0:93:ef:64:61:f6:
         0b:d4:27:a8:92:4b:07:f2:95:9c:29:2d:3f:b3:d1:69:25:65:
         08:65:3a:a7:d4:e3:c1:ad:68:9f:49:c6:d3:da:b2:ce:40:ba:
         5c:41:f8:44:a4:63:c4:7a:d2:36:4f:6e:ee:de:0e:20:ed:4b:
         8b:6a:95:cb:4f:08:21:c5:03:d1:7e:09:b6:2b:d0:fa:ba:55:
         4d:bc:1f:a4:2b:b4:cc:23:ba:e6:2c:cc:80:da:35:17:d3:6f:
         14:26:7e:68:63:78:d9:c3:1d:37:be:f2:74:b6:e6:72:01:4e:
         c6:e6:e6:d4:a3:5b:0e:cb:4a:7c:53:02:51:c9:3e:73:da:45:
         a8:21:df:40:ed:83:f2:1b:fe:42:90:de:78:f2:1d:b2:69:4c:
         86:80:73:72:89:73:52:bd:f2:54:7c:80:fc:55:01:19:74:cd:
         8b:d6:a4:2c:6b:87:57:3b:92:1d:a1:c2:4d:65:c9:0c:26:ef:
         8c:15:17:03:82:60:8e:25:21:0c:a7:32:cb:83:ff:84:e5:21:
         13:d9:1f:be:ce:3b:e4:e6:c8:4f:90:32:d4:a5:81:db:9b:be:
         e0:62:34:44:d9:a7:0b:2e:56:43:62:06:43:83:ae:a6:9e:dd:
         43:2b:ca:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:03:20 2025 by rpki-client