Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/34352e3138342e3130302e302f32332d3233203d3e20323639373639.roa
File:                     34352e3138342e3130302e302f32332d3233203d3e20323639373639.roa (raw, json)
Hash identifier:          IY1YG2xPd965VK8BGIpCGeGRN9oxLsSJ0sMuQ83D1uk=
Subject key identifier:   1A:AB:DF:BD:A3:49:8F:1A:21:6B:03:C7:D0:FE:04:E8:36:3E:81:BA
Certificate issuer:       /CN=777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A
Certificate serial:       613257953553EBFC09E751F7BF8B582FC80F5EE1
Authority key identifier: 77:75:95:F3:FA:C1:85:2A:DF:D7:FD:5C:20:A4:C1:9D:2B:E9:6F:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/34352e3138342e3130302e302f32332d3233203d3e20323639373639.roa
Signing time:             Tue 04 Feb 2025 18:12:50 +0000
ROA not before:           Tue 04 Feb 2025 18:07:50 +0000
ROA not after:            Tue 03 Feb 2026 18:12:50 +0000
asID:                     269769
IP address blocks:        45.184.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:32:57:95:35:53:eb:fc:09:e7:51:f7:bf:8b:58:2f:c8:0f:5e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A
        Validity
            Not Before: Feb  4 18:07:50 2025 GMT
            Not After : Feb  3 18:12:50 2026 GMT
        Subject: CN=1AABDFBDA3498F1A216B03C7D0FE04E8363E81BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:f5:68:54:78:c9:47:a6:51:10:ee:dd:66:
                    0f:49:b1:e7:1f:64:06:c0:ed:b4:02:01:a6:dd:d1:
                    a0:c7:7e:a0:9e:e2:d8:70:c8:2e:12:ff:ce:87:86:
                    58:b9:4a:6a:10:4f:56:22:88:95:19:7b:dc:9f:32:
                    dc:11:ad:c8:1c:4a:14:69:f3:a0:bf:87:4a:39:dc:
                    34:42:2c:8f:63:0b:e5:cd:57:8d:35:82:72:f1:6d:
                    c3:4a:64:37:12:be:cc:a9:8e:ee:2b:f8:77:62:e0:
                    9d:76:eb:57:47:27:29:11:f3:e8:ef:72:f1:4e:9e:
                    bc:a7:1d:86:8f:3b:33:50:a2:0d:13:e6:54:8c:77:
                    23:0e:3d:74:b3:24:39:ab:70:54:31:68:85:a3:cd:
                    1e:ce:4e:b2:df:81:19:fc:74:a7:f5:02:f1:6c:23:
                    07:a9:f4:95:5f:0a:b6:4d:68:c5:56:ac:5f:a3:5c:
                    d3:67:a3:a5:02:61:0d:a7:9a:7a:78:1b:6b:6c:27:
                    d7:9e:f7:b0:16:6a:bb:63:f1:45:6d:98:97:fd:8b:
                    41:d7:c1:c6:4c:24:79:1b:00:70:ef:4d:f5:40:19:
                    be:fc:50:6d:44:58:ce:44:36:7a:56:e9:3f:de:71:
                    84:78:3e:f3:47:2b:82:fa:f9:14:39:f9:6e:82:a7:
                    57:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AB:DF:BD:A3:49:8F:1A:21:6B:03:C7:D0:FE:04:E8:36:3E:81:BA
            X509v3 Authority Key Identifier:
                keyid:77:75:95:F3:FA:C1:85:2A:DF:D7:FD:5C:20:A4:C1:9D:2B:E9:6F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/777595F3FAC1852ADFD7FD5C20A4C19D2BE96F1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/312FCC972BFCA282A74E643E42BE2DBAF446A0132FECB897C18F163FC9C11A46/0/34352e3138342e3130302e302f32332d3233203d3e20323639373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:0f:af:d5:4d:35:3c:00:8d:79:60:11:5a:f7:54:b0:33:ea:
         fa:69:27:76:1b:fb:97:69:4e:b9:0d:82:6d:cd:6a:35:f7:5d:
         c2:d7:d3:b6:4f:57:9d:7d:4b:d1:80:99:04:c5:25:e1:01:6d:
         97:31:01:36:73:23:23:fd:de:b5:40:5e:a2:9f:62:12:c9:c3:
         cd:0a:76:e3:d0:84:39:f2:d7:bf:ab:fd:52:2e:7a:df:07:cc:
         69:c8:0b:32:90:4d:4b:b0:83:91:25:80:bd:7e:3d:72:d5:e2:
         48:d7:1a:de:7d:fb:54:a0:9d:fe:f3:cd:60:fe:9b:ab:ce:fe:
         9f:a4:77:25:58:a1:7f:81:d7:79:e0:33:00:6e:16:1d:bf:11:
         3d:88:a7:cd:22:73:91:45:8f:38:8b:94:ea:c7:ea:9f:2f:87:
         c8:aa:e5:6a:40:d1:56:63:00:71:ae:a5:8a:74:4c:d6:8d:5a:
         67:0f:5f:0d:0a:14:83:bd:25:e3:8a:d8:b0:3f:61:5d:c5:2b:
         2c:32:d5:d4:93:00:c0:b7:4b:94:c2:ac:d0:cc:cf:bf:30:84:
         03:ba:b4:0f:ac:f5:54:db:b7:1f:b6:5f:19:6d:72:19:06:37:
         7b:b4:ef:ac:9f:b8:94:f3:1e:a8:3a:42:04:94:72:69:9d:8f:
         19:7a:a7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:07:03 2025 by rpki-client