Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/34352e3138302e34342e302f32342d3234203d3e20323639373432.roa
File:                     34352e3138302e34342e302f32342d3234203d3e20323639373432.roa (raw, json)
Hash identifier:          vlKuBUdG0rB+bY82ss6bzBEjDyhm6ivdhGm3JExnD+U=
Subject key identifier:   3B:15:0D:71:B3:01:10:E8:AE:AD:93:CD:F1:29:DD:32:21:9D:7E:74
Certificate issuer:       /CN=C6532B6E8DFB9C6CF073D8E4E153CAF65F174764
Certificate serial:       75D2EFF1F467DA8E9AB923AF06285BE7BA9177E3
Authority key identifier: C6:53:2B:6E:8D:FB:9C:6C:F0:73:D8:E4:E1:53:CA:F6:5F:17:47:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/34352e3138302e34342e302f32342d3234203d3e20323639373432.roa
Signing time:             Tue 04 Feb 2025 18:01:26 +0000
ROA not before:           Tue 04 Feb 2025 17:56:26 +0000
ROA not after:            Tue 03 Feb 2026 18:01:26 +0000
asID:                     269742
IP address blocks:        45.180.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 03:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d2:ef:f1:f4:67:da:8e:9a:b9:23:af:06:28:5b:e7:ba:91:77:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6532B6E8DFB9C6CF073D8E4E153CAF65F174764
        Validity
            Not Before: Feb  4 17:56:26 2025 GMT
            Not After : Feb  3 18:01:26 2026 GMT
        Subject: CN=3B150D71B30110E8AEAD93CDF129DD32219D7E74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:23:62:5d:b9:36:cd:58:26:a2:e7:f6:c4:d2:
                    72:c2:df:d6:18:b1:5a:d0:d3:ef:57:d5:f1:ab:1f:
                    c1:a7:27:57:78:c5:46:76:5d:12:7e:4b:07:45:fe:
                    a0:3f:07:b7:03:78:54:23:41:ae:f6:a0:69:12:d0:
                    7f:56:83:16:a3:9b:50:ef:2d:e0:64:b7:1a:7d:f3:
                    d1:5b:80:77:9b:0f:64:bb:a7:ab:ab:2a:58:3d:6d:
                    81:c8:ec:b3:f9:73:c0:7c:df:bc:e7:5d:ef:71:8f:
                    54:0b:6d:25:92:13:55:c3:8b:02:df:e3:a4:49:e6:
                    ce:74:aa:9b:9f:85:a8:90:51:07:f7:8d:3c:6a:d2:
                    41:4b:f1:67:df:c7:38:2d:73:9e:01:c8:47:e5:b7:
                    09:88:3d:c3:31:13:23:41:b8:75:39:bd:05:a2:f0:
                    c5:51:d0:84:75:08:7b:44:ab:73:67:a6:47:1e:e4:
                    cc:13:f0:58:43:8f:9f:70:c8:ee:41:55:39:53:38:
                    7a:ea:15:7f:b3:64:f7:80:7d:d5:2a:4c:85:37:88:
                    5c:38:de:0f:b4:06:c7:ca:7a:8a:2e:83:fc:98:09:
                    06:fe:a8:9f:f6:88:17:7b:df:1a:6c:15:58:1b:0e:
                    78:1d:36:4a:87:99:f5:f8:68:62:ce:eb:a0:2c:9a:
                    5d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:15:0D:71:B3:01:10:E8:AE:AD:93:CD:F1:29:DD:32:21:9D:7E:74
            X509v3 Authority Key Identifier:
                keyid:C6:53:2B:6E:8D:FB:9C:6C:F0:73:D8:E4:E1:53:CA:F6:5F:17:47:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/34352e3138302e34342e302f32342d3234203d3e20323639373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:83:1a:7f:f3:28:a5:10:a6:85:10:01:06:46:c0:a7:7d:16:
         9b:a3:a3:ad:2c:21:5f:09:ce:64:b4:00:a4:70:76:93:a5:2d:
         1c:9d:62:45:d4:0f:08:93:41:71:0c:90:af:b6:82:db:22:65:
         1b:f5:67:9f:fe:a5:40:98:ca:b4:50:9c:f0:75:39:85:8e:38:
         68:0b:4c:d0:de:57:29:48:50:6b:af:5c:6c:5e:20:12:d5:9f:
         40:e7:69:05:7e:61:94:89:8d:17:bc:72:9e:47:5a:91:a6:fd:
         cd:44:27:a1:50:e5:e7:e0:9b:db:c8:2e:14:93:cd:15:a2:c3:
         59:70:50:d7:4c:13:a9:48:96:e4:1f:e9:3d:45:a7:76:ba:23:
         22:64:da:33:90:b6:8a:32:96:63:72:65:6b:0e:79:69:d5:86:
         61:da:0a:15:6d:20:fd:ee:c4:81:4f:61:0a:cb:75:be:1c:ca:
         3d:2c:2a:e8:5e:ab:5b:11:24:45:ea:19:35:b1:45:c9:db:83:
         69:9d:dd:59:40:4c:f6:31:a3:4a:dd:36:2b:c6:a9:8b:ae:95:
         cd:9e:35:03:a8:88:00:f9:c8:11:ba:33:11:8a:dd:7b:e0:52:
         ff:8f:8d:dc:03:31:ce:fd:0d:af:2f:42:73:3d:26:33:07:60:
         00:ca:9e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:31 2025 by rpki-client