Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25E89E32D88E9752343D6253C0E0B2CEE288C4B855B6FADC269156680C1030E9/0/34352e3138382e39322e302f32322d3232203d3e20323635353233.roa
File:                     34352e3138382e39322e302f32322d3232203d3e20323635353233.roa (raw, json)
Hash identifier:          5h33wPI+epaHpwr1hROJSEmzRSr66OvqPkls55sEAiM=
Subject key identifier:   C4:32:20:30:D2:9A:86:F7:02:C7:D5:D1:F6:E8:48:A7:47:96:D2:A5
Certificate issuer:       /CN=45945ED9E7062EDF6788772343BB26B609C7296F
Certificate serial:       65E104A53A774D146C94D1E1E3FDD8DC73EECA36
Authority key identifier: 45:94:5E:D9:E7:06:2E:DF:67:88:77:23:43:BB:26:B6:09:C7:29:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45945ED9E7062EDF6788772343BB26B609C7296F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25E89E32D88E9752343D6253C0E0B2CEE288C4B855B6FADC269156680C1030E9/0/34352e3138382e39322e302f32322d3232203d3e20323635353233.roa
Signing time:             Tue 04 Feb 2025 18:34:19 +0000
ROA not before:           Tue 04 Feb 2025 18:29:19 +0000
ROA not after:            Tue 03 Feb 2026 18:34:19 +0000
asID:                     265523
IP address blocks:        45.188.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25E89E32D88E9752343D6253C0E0B2CEE288C4B855B6FADC269156680C1030E9/0/45945ED9E7062EDF6788772343BB26B609C7296F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25E89E32D88E9752343D6253C0E0B2CEE288C4B855B6FADC269156680C1030E9/0/45945ED9E7062EDF6788772343BB26B609C7296F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45945ED9E7062EDF6788772343BB26B609C7296F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e1:04:a5:3a:77:4d:14:6c:94:d1:e1:e3:fd:d8:dc:73:ee:ca:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45945ED9E7062EDF6788772343BB26B609C7296F
        Validity
            Not Before: Feb  4 18:29:19 2025 GMT
            Not After : Feb  3 18:34:19 2026 GMT
        Subject: CN=C4322030D29A86F702C7D5D1F6E848A74796D2A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:01:fb:a7:7e:a6:97:d4:2c:21:39:d8:70:
                    03:0a:4f:6b:3e:8e:de:c2:94:b0:14:a7:db:d8:55:
                    85:e2:2f:f8:7c:13:ec:a5:1b:3d:8a:31:84:6e:8e:
                    ed:e1:fb:c5:8b:a6:74:d7:d1:74:53:c7:2f:bc:4b:
                    10:c6:3d:dc:02:58:b0:a2:94:87:2c:5a:2f:46:a4:
                    26:64:60:70:d9:77:00:ba:ef:55:63:c8:f4:f7:59:
                    a5:1b:89:4e:19:84:a9:fd:69:cd:24:10:7b:13:6b:
                    17:bf:90:33:30:45:9b:e8:77:76:c1:82:0b:b5:5f:
                    e2:a8:5f:0d:45:a7:df:ae:f5:e7:27:8d:77:62:e1:
                    1e:d2:24:01:80:25:6c:fa:93:9f:e0:e4:90:df:50:
                    9b:9f:15:63:a7:fb:b7:41:ce:ef:3b:9c:57:f0:d4:
                    f9:1e:79:20:72:78:86:7d:68:81:20:f0:78:08:c8:
                    85:fe:73:5a:7f:1b:8c:1c:66:2f:a0:1f:24:bb:06:
                    05:00:0a:6a:82:04:ed:db:29:43:7d:df:ef:3b:3d:
                    11:6c:e2:aa:05:37:5b:a2:5e:e7:7d:bf:c7:3e:be:
                    0e:87:b4:ab:72:30:43:ed:28:3a:2b:c9:e4:5a:d6:
                    f7:fe:4a:2e:88:b8:6a:ff:9f:c6:45:b0:d6:37:10:
                    00:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:32:20:30:D2:9A:86:F7:02:C7:D5:D1:F6:E8:48:A7:47:96:D2:A5
            X509v3 Authority Key Identifier:
                keyid:45:94:5E:D9:E7:06:2E:DF:67:88:77:23:43:BB:26:B6:09:C7:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25E89E32D88E9752343D6253C0E0B2CEE288C4B855B6FADC269156680C1030E9/0/45945ED9E7062EDF6788772343BB26B609C7296F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45945ED9E7062EDF6788772343BB26B609C7296F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25E89E32D88E9752343D6253C0E0B2CEE288C4B855B6FADC269156680C1030E9/0/34352e3138382e39322e302f32322d3232203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:1b:a5:69:3c:9e:e3:d1:e8:eb:eb:e1:cf:18:65:66:5c:9a:
         34:e4:0d:61:27:68:11:40:22:36:d0:94:9a:25:a2:84:e6:35:
         f8:d8:ea:a0:52:1b:f3:b2:f4:30:96:ef:d9:df:30:47:05:f4:
         1e:da:31:c9:a3:39:af:dc:68:08:b0:a0:71:17:09:46:17:85:
         71:c2:32:96:63:2f:ca:11:87:00:9f:8e:ea:26:5c:c2:59:fe:
         86:ac:f4:05:a6:09:35:fc:24:0d:45:7f:7e:1f:9e:ce:cc:07:
         c0:cf:f0:09:b7:e4:39:63:f0:28:1a:33:8e:79:9b:ed:91:fa:
         0d:93:ec:6a:bc:8b:d9:f3:5f:fc:ff:d0:d1:3a:f5:b8:00:ec:
         99:d1:0e:9f:ec:b1:8f:4e:bb:47:f4:3e:cf:9c:68:2d:13:2b:
         ca:fc:db:58:16:ca:f4:de:cf:7a:7b:4c:85:3b:91:11:a1:58:
         39:e3:67:1b:37:70:25:49:05:9e:b1:fa:6a:28:5a:79:14:ae:
         cc:fd:5a:24:15:d6:cb:a0:dd:2e:be:90:e4:9a:25:b3:7b:c1:
         81:7e:d2:e2:f0:0d:78:fe:fa:75:07:68:80:6c:2a:d6:6a:1a:
         31:43:0f:da:c1:49:df:67:55:f5:87:28:37:48:1c:bc:bf:5b:
         e7:bf:4c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:05:24 2025 by rpki-client