Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/34352e3138342e38342e302f32322d3234203d3e20323639373933.roa
File:                     34352e3138342e38342e302f32322d3234203d3e20323639373933.roa (raw, json)
Hash identifier:          SDJonh48aJeZtXxUPo+95dBlk1pWXBa9WM2Ou89cXnA=
Subject key identifier:   C7:EF:59:DA:E9:A1:BB:6E:0D:68:A3:4E:BA:4E:8F:69:60:4A:23:12
Certificate issuer:       /CN=09A3AC3476BC01A1345B72745540D0D3983BC32E
Certificate serial:       41AF6B5ECDFA3D77CD9DAA2020B39E939AB2D710
Authority key identifier: 09:A3:AC:34:76:BC:01:A1:34:5B:72:74:55:40:D0:D3:98:3B:C3:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/34352e3138342e38342e302f32322d3234203d3e20323639373933.roa
Signing time:             Tue 04 Feb 2025 18:24:05 +0000
ROA not before:           Tue 04 Feb 2025 18:19:05 +0000
ROA not after:            Tue 03 Feb 2026 18:24:05 +0000
asID:                     269793
IP address blocks:        45.184.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:af:6b:5e:cd:fa:3d:77:cd:9d:aa:20:20:b3:9e:93:9a:b2:d7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A3AC3476BC01A1345B72745540D0D3983BC32E
        Validity
            Not Before: Feb  4 18:19:05 2025 GMT
            Not After : Feb  3 18:24:05 2026 GMT
        Subject: CN=C7EF59DAE9A1BB6E0D68A34EBA4E8F69604A2312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:01:32:02:20:3e:5e:80:08:fa:3a:88:00:
                    75:c4:1c:e7:af:df:98:59:31:13:5a:2b:08:60:46:
                    d2:54:3c:5d:1f:76:00:ed:08:8a:d3:fa:a1:7e:02:
                    b5:1b:6b:4e:74:56:b0:1a:fd:2c:9e:cf:63:fe:4c:
                    a9:3e:84:0e:44:7f:c6:c0:c1:78:cd:35:f9:ee:fc:
                    cd:10:70:05:3f:f6:31:6f:dc:63:6b:86:65:05:5f:
                    b6:50:21:96:fa:36:3f:9e:f1:3a:30:e8:18:54:2d:
                    21:58:33:b7:71:fe:1b:c2:e2:48:cf:b1:c7:c9:72:
                    ef:f0:23:98:ac:1a:25:a7:58:cb:b2:4b:76:be:20:
                    94:f5:33:4a:0d:19:19:c3:6a:23:02:f1:31:e2:f1:
                    7e:3a:ba:40:90:11:b9:6a:71:78:11:87:30:5b:bb:
                    c2:03:1e:90:09:e4:34:dc:62:2f:5c:fc:a1:cd:ea:
                    44:57:e2:0d:c7:3f:7a:24:a5:55:6b:ad:df:6f:bb:
                    28:ce:07:83:a8:10:88:a6:73:d7:18:5d:fe:e9:0b:
                    35:b1:b7:38:b8:53:df:fc:c0:b3:c7:e4:bd:69:29:
                    3b:22:0a:38:e5:6f:22:30:b2:0b:e6:ec:86:24:59:
                    6e:5d:e4:ee:65:f0:a4:29:f2:88:5d:14:8f:5e:c4:
                    d2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EF:59:DA:E9:A1:BB:6E:0D:68:A3:4E:BA:4E:8F:69:60:4A:23:12
            X509v3 Authority Key Identifier:
                keyid:09:A3:AC:34:76:BC:01:A1:34:5B:72:74:55:40:D0:D3:98:3B:C3:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/34352e3138342e38342e302f32322d3234203d3e20323639373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:bd:07:21:ee:a0:0e:f9:4f:38:da:43:c3:c1:85:f2:e2:a6:
         6d:f4:0e:0d:f7:4c:09:cb:ea:e4:b1:b4:fa:20:46:ed:6e:20:
         45:c0:71:1a:57:5b:a3:fe:e4:a6:9e:81:40:90:8b:29:e1:a6:
         bb:6c:fc:a3:c9:c1:8a:bc:8d:60:1f:67:95:ff:cb:ce:cb:84:
         6c:6a:4c:6a:d8:a9:46:88:64:b7:ce:a5:3c:8d:c0:da:10:ff:
         8c:34:68:43:5a:f7:dd:8f:8b:05:37:dc:8a:ca:cc:c5:da:0b:
         fd:57:e6:d6:2c:77:f4:30:34:5c:bb:03:de:8e:a5:fd:31:93:
         11:c2:0b:69:e8:31:47:dd:47:b0:f4:ed:21:f6:14:fb:cf:c0:
         e3:3d:a8:47:4b:9f:4b:5d:34:2d:f2:df:80:8e:bb:ed:06:1d:
         df:f4:37:ac:27:f1:74:1b:68:54:67:6f:78:71:e7:8a:83:90:
         24:ac:33:31:ed:9d:d8:a8:8b:13:81:33:78:a4:f7:11:d4:2c:
         96:dd:02:1b:5a:ae:76:9f:f6:04:52:df:3e:b4:88:42:d2:8d:
         96:09:68:f6:dc:31:df:a3:32:94:9d:53:1d:69:99:37:9c:98:
         37:08:ae:c1:9f:62:91:38:15:ad:40:18:e8:82:3b:b4:44:6a:
         d8:32:70:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:21 2025 by rpki-client