Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/34352e3138302e36382e302f32322d3234203d3e203631343636.roa
File:                     34352e3138302e36382e302f32322d3234203d3e203631343636.roa (raw, json)
Hash identifier:          uNTn0C44Lsxb2i3RmD0lcYI78OY7nH+F9mHsfvZw+fE=
Subject key identifier:   C2:F1:1C:9D:A9:44:EC:D2:3D:51:53:76:F0:DC:2C:F7:E6:DE:67:85
Certificate issuer:       /CN=12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3
Certificate serial:       19598F72B2EA3178FEAFF93E1DEDDEFBF1C612E2
Authority key identifier: 12:CE:84:47:ED:2C:9E:7E:BF:1D:D2:04:16:F4:E9:B1:FD:CF:0E:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/34352e3138302e36382e302f32322d3234203d3e203631343636.roa
Signing time:             Tue 04 Feb 2025 18:16:59 +0000
ROA not before:           Tue 04 Feb 2025 18:11:59 +0000
ROA not after:            Tue 03 Feb 2026 18:16:59 +0000
asID:                     61466
IP address blocks:        45.180.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 10:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:59:8f:72:b2:ea:31:78:fe:af:f9:3e:1d:ed:de:fb:f1:c6:12:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3
        Validity
            Not Before: Feb  4 18:11:59 2025 GMT
            Not After : Feb  3 18:16:59 2026 GMT
        Subject: CN=C2F11C9DA944ECD23D515376F0DC2CF7E6DE6785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3f:d3:84:b3:ea:43:95:d2:df:19:15:59:a9:
                    ac:f1:8c:28:b5:ec:48:6c:ed:4d:15:82:12:3b:df:
                    69:09:91:1a:72:69:31:46:bb:7e:ac:a5:40:66:1a:
                    89:a5:77:55:d5:88:0a:6d:9e:e9:e6:31:8f:a4:03:
                    71:25:31:79:bd:a5:53:d8:21:16:0d:56:fe:0b:66:
                    f3:18:e2:1b:a8:bd:94:d9:93:6b:45:71:23:d4:c7:
                    41:16:f8:3f:fd:40:fd:5e:22:ac:ac:c4:66:5c:e8:
                    c3:af:1f:ee:5d:88:94:64:32:f5:c3:c2:50:11:8c:
                    b6:92:2d:b1:16:2a:af:ff:53:c2:4b:c9:8e:20:e9:
                    f9:76:b1:33:39:16:1e:53:e8:37:a0:b8:3e:f7:a6:
                    14:05:95:d9:60:74:cf:9f:c5:9e:e1:50:ba:ce:a2:
                    a0:50:10:a6:5f:b9:f1:e2:3d:bf:6b:10:49:72:e0:
                    ca:30:f8:0a:66:4d:6b:cd:a4:71:42:4c:57:c7:7c:
                    cd:ba:6a:67:84:2a:95:20:15:9d:57:0b:63:ee:14:
                    db:56:a1:c3:9b:c1:f6:d0:03:1d:c7:4c:c9:c2:00:
                    a9:51:59:32:dd:70:a8:a5:4d:b8:26:57:b3:4a:15:
                    b7:a6:a9:b5:73:b7:d6:05:2a:a5:87:08:31:f7:a6:
                    44:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F1:1C:9D:A9:44:EC:D2:3D:51:53:76:F0:DC:2C:F7:E6:DE:67:85
            X509v3 Authority Key Identifier:
                keyid:12:CE:84:47:ED:2C:9E:7E:BF:1D:D2:04:16:F4:E9:B1:FD:CF:0E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/34352e3138302e36382e302f32322d3234203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:e5:54:79:03:75:81:69:ac:ba:fe:06:b3:4e:fc:a6:f1:14:
         bf:9b:9a:22:bf:60:ed:d9:60:ce:76:56:93:71:a2:90:70:ba:
         5c:b0:7f:6b:6b:d5:08:eb:67:9f:38:e2:3c:30:96:a6:2f:a5:
         a1:d5:6c:94:ae:4c:30:ad:6a:0e:da:43:4f:8d:03:37:75:d2:
         b9:da:0f:56:6b:bf:6d:ef:f3:9c:fb:2b:26:37:dc:26:48:2e:
         2e:ef:e3:e8:ee:28:1f:d8:e8:e8:21:0a:ec:7d:2d:04:e8:e2:
         7e:58:cf:80:3f:ed:78:7f:3e:ee:4d:03:b3:7c:24:f6:a6:de:
         76:b5:a9:5e:b8:05:7a:aa:3f:13:29:c4:44:08:5e:2c:a1:b5:
         f7:08:a5:63:e2:70:82:1c:8e:9e:3c:f8:0b:2e:6c:3e:74:f1:
         49:c2:d6:2b:61:e2:ee:75:85:9f:43:c3:94:dd:99:9e:92:cf:
         8f:b7:3f:39:f7:14:ea:9e:27:8e:ce:3b:56:c4:a4:11:02:d1:
         3f:44:de:05:fc:05:6a:9c:eb:b9:a0:d6:50:59:e3:e3:39:aa:
         27:17:7c:31:11:5c:c0:9f:97:fd:ca:45:57:9d:4d:15:65:ed:
         b0:ff:fd:eb:07:fc:4a:b8:d9:85:42:62:d9:b8:27:d4:bb:1a:
         7e:f6:d9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 19:22:02 2025 by rpki-client