Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F9FBB2699111A95E3BE071C7F445DCA458971F08F3FC37D1B492306EE7A3A04/0/34352e3233392e3130382e302f32322d3234203d3e20323636383535.roa
File:                     34352e3233392e3130382e302f32322d3234203d3e20323636383535.roa (raw, json)
Hash identifier:          QsacDLcbKvkpZNAkBjH/2GtCAhcBRQt18dgBMewk5o0=
Subject key identifier:   0E:20:2C:04:93:B2:CE:A2:74:3C:96:EA:13:46:1F:79:DE:A0:E0:E4
Certificate issuer:       /CN=1F1ACF357F348642F94FD093D208BB296CB9D290
Certificate serial:       72AFA54D0EC19A1A7EF2E1AB748C6047E5691308
Authority key identifier: 1F:1A:CF:35:7F:34:86:42:F9:4F:D0:93:D2:08:BB:29:6C:B9:D2:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F1ACF357F348642F94FD093D208BB296CB9D290.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F9FBB2699111A95E3BE071C7F445DCA458971F08F3FC37D1B492306EE7A3A04/0/34352e3233392e3130382e302f32322d3234203d3e20323636383535.roa
Signing time:             Tue 04 Feb 2025 18:35:56 +0000
ROA not before:           Tue 04 Feb 2025 18:30:56 +0000
ROA not after:            Tue 03 Feb 2026 18:35:56 +0000
asID:                     266855
IP address blocks:        45.239.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F9FBB2699111A95E3BE071C7F445DCA458971F08F3FC37D1B492306EE7A3A04/0/1F1ACF357F348642F94FD093D208BB296CB9D290.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F9FBB2699111A95E3BE071C7F445DCA458971F08F3FC37D1B492306EE7A3A04/0/1F1ACF357F348642F94FD093D208BB296CB9D290.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F1ACF357F348642F94FD093D208BB296CB9D290.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:af:a5:4d:0e:c1:9a:1a:7e:f2:e1:ab:74:8c:60:47:e5:69:13:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F1ACF357F348642F94FD093D208BB296CB9D290
        Validity
            Not Before: Feb  4 18:30:56 2025 GMT
            Not After : Feb  3 18:35:56 2026 GMT
        Subject: CN=0E202C0493B2CEA2743C96EA13461F79DEA0E0E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7a:7f:b8:12:9a:dc:6f:b2:6d:f2:63:0f:ac:
                    06:a2:db:7f:d3:c0:56:f5:27:6c:5b:7a:db:1d:cd:
                    ed:48:03:92:3c:08:32:c7:46:d0:e8:ad:5a:48:3c:
                    78:0c:36:4f:d7:d2:8a:7b:60:4c:2c:cb:9c:a0:6f:
                    f7:df:09:0b:11:60:59:9e:73:07:f8:49:d9:9e:74:
                    35:e6:0c:92:60:fb:3f:c5:06:fc:a8:81:38:9e:9e:
                    40:02:0a:8c:a6:d6:e7:57:37:63:b4:46:e2:4a:0c:
                    ae:d5:5b:8c:11:be:24:69:bb:2c:9b:9f:ff:92:46:
                    73:b6:bd:cf:70:90:b4:43:18:73:91:68:1d:57:b9:
                    97:ec:12:18:da:5f:b9:c4:05:9a:67:71:ed:db:51:
                    30:f6:89:aa:88:b2:19:f0:0b:93:e2:65:9b:b0:83:
                    fe:0e:10:e1:fc:b8:19:8c:c3:7e:e9:ce:73:c1:26:
                    b0:88:0e:2e:54:b4:5d:dc:3b:5a:4f:3e:f2:1d:f9:
                    96:59:a8:07:2c:19:d9:68:3f:04:ad:76:d1:0f:69:
                    c3:f3:aa:ed:87:d7:7f:07:a3:82:fd:15:81:1b:ee:
                    20:94:2b:59:80:1a:75:b3:84:eb:3b:1d:f2:b3:94:
                    7f:b8:d0:68:bc:72:d9:74:db:8c:8f:6c:e6:ce:ed:
                    a0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:20:2C:04:93:B2:CE:A2:74:3C:96:EA:13:46:1F:79:DE:A0:E0:E4
            X509v3 Authority Key Identifier:
                keyid:1F:1A:CF:35:7F:34:86:42:F9:4F:D0:93:D2:08:BB:29:6C:B9:D2:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F9FBB2699111A95E3BE071C7F445DCA458971F08F3FC37D1B492306EE7A3A04/0/1F1ACF357F348642F94FD093D208BB296CB9D290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F1ACF357F348642F94FD093D208BB296CB9D290.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F9FBB2699111A95E3BE071C7F445DCA458971F08F3FC37D1B492306EE7A3A04/0/34352e3233392e3130382e302f32322d3234203d3e20323636383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:98:ac:9c:11:25:f3:22:7d:8a:d7:de:58:4e:ed:40:6f:a5:
         93:c6:f8:eb:31:f6:9b:fd:0b:e8:24:8f:3b:1b:f6:fc:a1:1a:
         72:0a:12:9d:c7:1a:96:c6:17:86:48:2b:da:b6:24:65:f0:b8:
         55:ab:4d:d6:7f:f5:b1:30:47:a8:b7:b1:03:e1:5c:16:19:c5:
         46:04:c3:f4:ba:7b:9f:45:f5:f9:74:34:f6:b8:38:a7:6f:ac:
         89:f9:d1:e0:e8:02:e4:2d:c5:1a:46:3d:18:f3:ac:7d:09:3b:
         b2:6a:d4:59:0e:c8:7a:49:93:e5:9c:69:78:c1:18:7d:b2:af:
         96:08:23:08:fc:2f:6b:46:21:96:89:bf:12:af:68:ae:d4:53:
         8c:34:2f:35:de:32:b2:33:5b:06:9f:cc:fb:a1:98:ea:fc:8e:
         08:31:71:67:55:48:42:f0:89:e5:25:91:13:3d:93:bf:33:29:
         d2:12:ac:3b:44:ea:d6:69:de:5b:b7:b6:b0:99:11:5b:84:fc:
         8f:0e:84:ac:2c:5f:9f:ad:18:6e:ac:e7:45:8f:41:1c:19:eb:
         28:57:da:68:58:ce:c9:d6:f6:c0:ec:33:a8:09:14:49:a4:17:
         be:a8:d2:50:09:71:7d:32:82:dd:48:87:49:94:ed:c2:f4:1a:
         a6:94:a7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:09:59 2025 by rpki-client