Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135342e302f32332d3233203d3e20323639383138.roa
File:                     34352e3138342e3135342e302f32332d3233203d3e20323639383138.roa (raw, json)
Hash identifier:          F2U2f8vSuDWmGzkQpXXn3GFcNBFk+NpzqItxf85JebU=
Subject key identifier:   FC:A2:FA:32:24:FE:F5:1C:71:DF:E7:C3:7D:10:97:08:66:54:E7:3E
Certificate issuer:       /CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
Certificate serial:       42E0B2D2E7C54369A3A7428AF9C52007ED1050EF
Authority key identifier: 73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135342e302f32332d3233203d3e20323639383138.roa
Signing time:             Sat 15 Feb 2025 17:09:55 +0000
ROA not before:           Sat 15 Feb 2025 17:04:55 +0000
ROA not after:            Sat 14 Feb 2026 17:09:55 +0000
asID:                     269818
IP address blocks:        45.184.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e0:b2:d2:e7:c5:43:69:a3:a7:42:8a:f9:c5:20:07:ed:10:50:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
        Validity
            Not Before: Feb 15 17:04:55 2025 GMT
            Not After : Feb 14 17:09:55 2026 GMT
        Subject: CN=FCA2FA3224FEF51C71DFE7C37D1097086654E73E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:16:86:a1:e4:db:c3:c7:bc:68:de:f8:dc:67:
                    ef:07:17:f7:79:05:3b:87:aa:27:80:89:3a:07:0d:
                    66:34:3c:2a:94:69:61:af:49:0c:00:1c:8f:60:80:
                    ac:a1:6e:f1:60:15:66:e0:9c:d1:55:65:88:89:b1:
                    f0:26:5d:c8:87:ee:23:4f:1c:a6:09:6d:7f:2b:2c:
                    c2:94:d5:9f:22:01:48:08:c4:38:0b:2d:70:2d:d9:
                    5e:b0:69:fd:73:aa:98:b7:26:5b:d1:7f:45:9c:81:
                    7f:0c:e6:3f:c3:85:1f:de:8c:1e:54:98:f0:61:0a:
                    85:d0:c0:34:5f:eb:5e:c7:bd:c1:c4:84:05:d8:3d:
                    42:c8:49:85:ec:de:c6:a1:e2:f0:bc:82:9d:16:43:
                    cf:66:e7:2c:f1:6a:fa:8c:87:ab:7c:34:c1:e7:4b:
                    3b:59:23:9a:60:67:17:04:b3:f7:66:f4:65:40:ef:
                    ad:97:b7:be:41:e9:5a:f0:15:6a:84:4d:5c:4a:ce:
                    27:dd:f1:8d:a3:3d:43:79:de:5e:d8:f0:da:61:6a:
                    cd:6f:c4:35:be:3e:36:8b:06:4a:0e:15:dd:ad:7f:
                    43:6e:f6:69:fb:97:7c:b0:9e:41:4e:19:2e:58:fb:
                    57:ea:ca:fa:4c:91:81:50:de:fc:ae:87:88:ea:9f:
                    db:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A2:FA:32:24:FE:F5:1C:71:DF:E7:C3:7D:10:97:08:66:54:E7:3E
            X509v3 Authority Key Identifier:
                keyid:73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135342e302f32332d3233203d3e20323639383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:f4:6d:fd:af:6a:72:b2:49:ed:be:53:f3:67:c4:60:27:f8:
         27:ae:b0:99:78:b4:dd:c4:1d:d3:50:3a:ee:c3:24:80:53:03:
         f0:6f:55:5d:7b:d6:64:91:81:1b:0f:d0:d8:ba:6e:91:ba:05:
         7b:1b:df:66:be:02:ae:77:de:6d:e6:fc:5a:59:c9:5f:71:03:
         6d:6a:b3:fd:dc:3e:85:bd:1e:66:72:cd:81:1d:6c:87:19:02:
         1d:7a:8c:fd:8b:4a:14:49:2a:82:bf:8a:4d:3f:2c:58:64:0f:
         83:0c:a0:73:e8:0f:3d:3b:0f:25:4e:29:0a:69:1d:51:32:09:
         9b:fa:b4:17:a5:50:51:8f:3b:26:55:8b:36:e8:58:52:96:9c:
         60:d3:53:8e:54:b5:7e:6f:b4:6b:91:5d:2e:6b:81:d3:fe:db:
         ca:71:47:d4:d5:c5:9b:77:e4:f9:72:8c:a8:4d:7b:bc:6d:f7:
         6b:2f:fc:ad:3b:b8:99:77:d2:51:3d:5f:6d:7d:85:f6:22:77:
         5e:0e:5a:aa:53:6e:69:8e:bc:78:51:13:82:05:83:75:ea:c4:
         ca:bc:80:3a:d9:14:dc:22:eb:8d:d1:10:80:d2:59:c7:a3:37:
         13:66:08:41:5f:12:e3:82:36:3e:a5:e2:d9:68:11:09:96:43:
         08:45:00:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:05:09 2025 by rpki-client