Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/34352e3138332e35322e302f32322d3232203d3e20323639373539.roa
File:                     34352e3138332e35322e302f32322d3232203d3e20323639373539.roa (raw, json)
Hash identifier:          ZvvxxgL/+IfnC8ZoaAMHg8dIvwXWzlY0AEkJdVQ00oU=
Subject key identifier:   11:A1:3B:2F:2A:4A:A4:14:26:06:F6:8F:F4:D0:86:27:4D:A4:E8:AC
Certificate issuer:       /CN=FD653B1E827221FC7B80694271984B30114955E0
Certificate serial:       6F8FE2512C5F5CC07F5831237807BC38B247778B
Authority key identifier: FD:65:3B:1E:82:72:21:FC:7B:80:69:42:71:98:4B:30:11:49:55:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD653B1E827221FC7B80694271984B30114955E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/34352e3138332e35322e302f32322d3232203d3e20323639373539.roa
Signing time:             Tue 04 Feb 2025 18:33:19 +0000
ROA not before:           Tue 04 Feb 2025 18:28:19 +0000
ROA not after:            Tue 03 Feb 2026 18:33:19 +0000
asID:                     269759
IP address blocks:        45.183.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/FD653B1E827221FC7B80694271984B30114955E0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/FD653B1E827221FC7B80694271984B30114955E0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD653B1E827221FC7B80694271984B30114955E0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8f:e2:51:2c:5f:5c:c0:7f:58:31:23:78:07:bc:38:b2:47:77:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD653B1E827221FC7B80694271984B30114955E0
        Validity
            Not Before: Feb  4 18:28:19 2025 GMT
            Not After : Feb  3 18:33:19 2026 GMT
        Subject: CN=11A13B2F2A4AA4142606F68FF4D086274DA4E8AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:0b:bf:be:8b:d4:80:11:ff:55:b1:16:bf:
                    6e:bb:75:f2:a7:d7:36:44:a5:a0:b2:d2:10:c1:f7:
                    80:38:8b:71:21:75:fb:db:95:be:a7:85:3b:15:1e:
                    3f:3e:4f:b3:f3:34:95:8e:06:93:a0:5b:a4:94:81:
                    0b:38:4f:35:d0:fe:4a:1b:24:d4:21:6e:7e:3e:ae:
                    1d:bf:f8:d1:9a:a5:2b:53:80:1d:b0:5a:53:13:f4:
                    c4:b3:f9:85:df:43:b6:f3:19:f7:2d:e9:e5:6c:54:
                    7f:da:56:c4:60:f9:f8:4a:00:4e:c5:5c:00:21:89:
                    02:5d:f0:6a:e1:74:41:7e:99:5a:f3:0f:e1:de:80:
                    07:e1:d1:9c:0a:75:8b:1f:0d:39:9a:8d:11:48:ba:
                    72:94:1b:c2:91:3a:ce:c0:43:7f:16:f4:61:11:71:
                    14:79:24:58:ad:2b:52:a8:e5:32:31:bf:45:76:cd:
                    de:ac:58:e6:32:42:5e:f9:bb:b7:03:fa:41:5f:77:
                    bf:13:85:73:7a:58:1f:38:d1:9a:68:ec:3d:71:28:
                    fa:37:d7:8e:fb:d8:e5:fe:4e:9c:45:3c:80:c0:12:
                    8c:e7:15:78:10:7b:35:bb:c8:1b:14:f6:ca:b5:6d:
                    76:75:a7:5e:a8:3a:7c:57:78:29:22:62:38:71:29:
                    ad:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A1:3B:2F:2A:4A:A4:14:26:06:F6:8F:F4:D0:86:27:4D:A4:E8:AC
            X509v3 Authority Key Identifier:
                keyid:FD:65:3B:1E:82:72:21:FC:7B:80:69:42:71:98:4B:30:11:49:55:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/FD653B1E827221FC7B80694271984B30114955E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD653B1E827221FC7B80694271984B30114955E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/34352e3138332e35322e302f32322d3232203d3e20323639373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:56:4d:51:1c:6c:e9:8d:65:b2:7b:9e:b2:f8:19:4d:7d:19:
         a7:b2:c8:7b:3a:14:cc:d5:1e:08:f7:c6:b1:c7:d8:60:46:04:
         b5:f2:d0:3e:5b:c6:ec:2f:e3:72:dc:9d:c3:fe:1f:45:71:25:
         d4:ed:76:aa:e9:57:c3:b8:e3:eb:7b:93:6e:db:40:9b:80:fd:
         bc:c9:df:4b:18:29:f9:fe:3b:42:fe:48:5a:74:db:c4:a7:51:
         80:38:6d:30:6e:fb:c1:ca:4f:e6:c5:aa:85:de:81:d9:89:55:
         14:c2:f8:30:a4:43:48:a0:ba:45:a0:21:9f:f7:60:8b:11:33:
         3a:4f:7a:74:d1:89:76:a6:4e:1c:a6:59:63:58:5a:de:73:20:
         56:d5:bf:7c:1a:38:6a:36:11:fc:9a:61:da:8a:a3:fd:5b:64:
         32:46:b4:80:0b:d8:bb:08:9a:83:11:4f:8c:19:56:f9:cc:ba:
         c5:91:c0:fd:a9:9a:f4:e9:ab:8c:12:f3:f2:0f:de:2c:4c:7b:
         25:19:0f:41:00:4e:e6:de:4b:31:c1:b0:05:31:6a:b8:eb:50:
         ae:eb:f4:1b:a3:60:a8:74:dd:96:4b:e4:57:e0:8b:68:d0:74:
         26:5f:25:30:00:fa:2a:95:88:3d:6c:21:cc:f0:ac:07:20:1c:
         ca:b4:ec:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:38:26 2025 by rpki-client