Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/34352e36382e382e302f32322d3234203d3e203131303538.roa
File:                     34352e36382e382e302f32322d3234203d3e203131303538.roa (raw, json)
Hash identifier:          XYoO5ewSeE9XOVsVwIdJka1+R2PjK2CEkss1bOkMUcg=
Subject key identifier:   EF:D6:5D:85:D4:0D:25:20:E8:65:6C:5B:E6:1C:B6:59:5C:47:00:18
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       661DD7E3B7AC7257158FC9E4C4030C430C5A6296
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/34352e36382e382e302f32322d3234203d3e203131303538.roa
Signing time:             Mon 16 Dec 2024 18:05:00 +0000
ROA not before:           Mon 16 Dec 2024 18:00:00 +0000
ROA not after:            Mon 15 Dec 2025 18:05:00 +0000
asID:                     11058
IP address blocks:        45.68.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1d:d7:e3:b7:ac:72:57:15:8f:c9:e4:c4:03:0c:43:0c:5a:62:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Dec 16 18:00:00 2024 GMT
            Not After : Dec 15 18:05:00 2025 GMT
        Subject: CN=EFD65D85D40D2520E8656C5BE61CB6595C470018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1d:35:d5:3e:90:87:98:36:de:ad:71:2c:c1:
                    c5:44:d4:da:e9:93:e9:52:ae:19:2c:60:11:f5:c3:
                    ab:00:1d:40:8d:77:fc:82:1a:7a:79:0a:8a:d6:a1:
                    30:69:3b:95:5b:17:25:ca:92:e6:53:75:26:64:4b:
                    76:dd:d8:7a:f0:4e:15:38:9e:6b:c1:df:6b:9e:35:
                    d8:a3:45:0f:4e:35:26:d2:12:48:e6:dd:be:5d:37:
                    a5:21:6d:fd:96:41:9e:da:7b:06:a6:e5:27:c6:4e:
                    e6:4e:e0:79:24:b2:db:e4:19:a4:68:8d:56:be:19:
                    d4:a1:e3:8e:9f:f4:46:3b:a1:60:dd:02:3e:9d:a8:
                    4e:bd:f2:08:9f:7f:90:ed:ee:c7:c7:2a:a6:07:13:
                    f9:d8:aa:f6:de:f4:3f:4e:f1:f7:a2:be:c9:30:51:
                    8e:78:93:a3:0c:f8:56:dc:c5:d1:85:88:04:21:ac:
                    3d:1a:54:7a:8b:e6:5e:e6:cc:6d:a3:99:6c:48:e3:
                    e1:d5:13:50:33:0f:a4:a8:dc:ef:bf:4d:66:34:aa:
                    c0:87:60:ea:e5:6f:96:9f:80:37:d9:d0:ea:f7:8e:
                    01:bb:35:f1:02:8e:a1:70:5a:72:07:f7:07:0f:fc:
                    b3:4b:dc:6c:9f:6b:84:ba:88:2b:35:f8:4a:21:a5:
                    39:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D6:5D:85:D4:0D:25:20:E8:65:6C:5B:E6:1C:B6:59:5C:47:00:18
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/34352e36382e382e302f32322d3234203d3e203131303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:63:f2:cf:52:54:8b:58:43:23:8d:57:e3:6c:26:b8:60:ed:
         6b:58:99:2f:cc:85:fc:56:83:e1:a1:7b:60:4a:4b:8a:55:26:
         45:11:2c:08:6a:e5:f3:88:0b:1a:a4:21:1b:0a:ca:b2:d4:9b:
         86:f6:08:57:25:35:a1:0a:06:cb:aa:58:cd:4f:07:0d:c9:0f:
         db:5b:ff:52:3c:75:09:7f:89:36:34:15:84:f9:96:30:94:56:
         28:93:11:4d:b6:e7:73:a7:12:ba:fd:06:9f:6e:6d:a1:d5:94:
         cd:13:68:ae:23:a6:8b:35:56:69:90:0a:b6:26:d3:3d:17:52:
         33:95:90:3f:1e:8b:27:8c:f0:3e:cb:59:e4:a9:d8:c1:b5:fb:
         fd:bc:08:6a:ec:a8:43:ac:ce:8d:6e:70:5a:d5:d9:7b:b8:25:
         21:21:96:3e:92:3d:23:54:17:88:b9:27:ca:3a:a2:e2:ec:8d:
         c6:bd:d4:92:b4:73:87:dd:d5:6e:66:17:b1:02:78:c5:81:f8:
         b3:e1:de:83:f1:fd:8a:7c:4b:61:3e:19:66:4f:47:a3:61:43:
         39:01:eb:95:0b:07:88:8b:1a:f2:65:b6:b3:cd:89:86:98:a4:
         0b:40:d1:df:6e:a9:08:b7:da:fc:f1:ea:e7:58:73:18:e2:b7:
         0f:4d:48:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:06 2025 by rpki-client