Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/34352e3232392e3139322e302f32362d3236203d3e20323637373537.roa
File:                     34352e3232392e3139322e302f32362d3236203d3e20323637373537.roa (raw, json)
Hash identifier:          aXC5kcbhf/4APhD2GihCKcf2vc++YyE+9yKdbncYFOw=
Subject key identifier:   4E:5C:6C:44:D3:B6:A1:2A:8D:2F:97:B4:3E:86:DD:32:6A:91:6D:A3
Certificate issuer:       /CN=096026F2035C01DFDDA491A54F0110D751D4B655
Certificate serial:       4BCA8B2B4D47EADFA27286691F90F92B49E8604C
Authority key identifier: 09:60:26:F2:03:5C:01:DF:DD:A4:91:A5:4F:01:10:D7:51:D4:B6:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/34352e3232392e3139322e302f32362d3236203d3e20323637373537.roa
Signing time:             Tue 04 Feb 2025 18:07:57 +0000
ROA not before:           Tue 04 Feb 2025 18:02:57 +0000
ROA not after:            Tue 03 Feb 2026 18:07:57 +0000
asID:                     267757
IP address blocks:        45.229.192.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 05:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ca:8b:2b:4d:47:ea:df:a2:72:86:69:1f:90:f9:2b:49:e8:60:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096026F2035C01DFDDA491A54F0110D751D4B655
        Validity
            Not Before: Feb  4 18:02:57 2025 GMT
            Not After : Feb  3 18:07:57 2026 GMT
        Subject: CN=4E5C6C44D3B6A12A8D2F97B43E86DD326A916DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4e:db:ad:28:87:07:fd:9d:0b:d2:06:8f:7e:
                    4f:32:2d:0c:26:8b:c9:80:2c:cc:97:c4:be:8f:1c:
                    28:f4:6e:31:86:9b:7c:b7:95:6e:81:c2:29:c4:80:
                    54:4a:e8:04:cc:53:c4:3e:ee:14:de:27:a4:74:3e:
                    33:ac:51:b5:f0:c2:14:16:b6:3c:e5:7e:1b:c3:eb:
                    c4:db:9b:14:7f:46:55:5d:fe:d6:a4:55:8f:02:d9:
                    cd:1a:82:9f:0d:54:da:78:81:94:de:44:45:53:71:
                    38:eb:1c:c0:2a:5d:3a:fe:f8:c0:17:20:68:65:c7:
                    05:9b:cd:d4:b1:4a:9c:28:56:71:41:bb:e4:98:92:
                    9e:b1:44:41:1d:a7:d5:d7:a7:32:ed:af:0b:81:80:
                    e4:ab:92:23:34:88:25:37:2e:39:0a:d0:b8:58:fe:
                    2c:05:76:a1:c4:37:46:4c:2b:5b:9a:5f:09:cc:6f:
                    3d:04:13:ff:1c:56:bb:0b:a4:10:7f:35:fc:c7:0c:
                    b9:d6:43:06:11:9f:59:52:42:4d:57:35:e3:9f:1d:
                    94:e6:f9:a8:c2:c0:6b:11:df:26:68:3e:73:28:51:
                    c8:22:75:57:41:66:75:66:de:86:8e:56:78:f0:37:
                    76:3c:b5:23:4e:c3:30:5b:fd:98:07:58:9a:3a:15:
                    4c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5C:6C:44:D3:B6:A1:2A:8D:2F:97:B4:3E:86:DD:32:6A:91:6D:A3
            X509v3 Authority Key Identifier:
                keyid:09:60:26:F2:03:5C:01:DF:DD:A4:91:A5:4F:01:10:D7:51:D4:B6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/34352e3232392e3139322e302f32362d3236203d3e20323637373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.192.0/26

    Signature Algorithm: sha256WithRSAEncryption
         c1:3d:a3:40:94:f8:d8:a4:27:de:ef:27:51:22:23:9b:4f:9a:
         92:12:06:61:d4:37:45:0a:4f:77:c9:1b:54:e9:63:4d:4d:81:
         78:c1:2c:4d:65:66:70:0c:40:de:02:bf:b1:38:be:2e:aa:de:
         b0:44:b5:75:3c:a1:3a:58:af:0c:95:27:43:8f:9e:8b:a1:d0:
         1e:1e:c6:44:b5:4b:e9:27:9a:a1:20:9a:ce:cb:3b:e7:20:7c:
         e4:33:56:d4:c8:c5:4f:22:82:08:00:aa:be:c0:eb:cc:6d:45:
         7f:61:af:57:1e:40:e5:8f:92:2c:de:e5:d0:ee:e9:da:29:74:
         cb:b3:c1:5c:a8:c1:89:d8:94:7c:53:3b:3e:3e:ad:cd:c6:0f:
         a8:51:c4:a2:8e:01:54:1e:41:0a:58:b4:17:6f:72:dc:78:fe:
         ae:7c:ea:fc:e4:78:ff:bc:3c:f5:e2:e3:f7:ee:d3:5a:d4:66:
         dd:9d:3c:5a:62:33:fc:61:87:67:8c:5a:91:57:aa:d5:c6:0b:
         73:a1:ba:ec:c8:6c:6e:02:ad:81:63:5f:fd:74:e1:f1:66:ac:
         58:e4:45:49:99:81:d1:fa:1c:41:ec:6e:5c:3b:98:33:5a:e7:
         78:79:33:9d:15:9e:5f:5e:3d:f3:02:a0:db:72:48:2a:c1:f5:
         b8:d9:69:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:33:37 2025 by rpki-client