Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/34352e342e3130302e302f32342d3234203d3e20323635363733.roa
File:                     34352e342e3130302e302f32342d3234203d3e20323635363733.roa (raw, json)
Hash identifier:          bq+QJOtdeOgY3eL+l3JjaoFjJpJ125k7GnKXSbiM2zM=
Subject key identifier:   CA:2C:BB:C6:06:08:B8:05:12:8B:FD:7F:02:C6:D5:AC:10:28:DF:EA
Certificate issuer:       /CN=A663625ACEE986000D86F2BCCF5CED7DE69D4C90
Certificate serial:       56388838CCA996C99609B9044FE93601347545BF
Authority key identifier: A6:63:62:5A:CE:E9:86:00:0D:86:F2:BC:CF:5C:ED:7D:E6:9D:4C:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/34352e342e3130302e302f32342d3234203d3e20323635363733.roa
Signing time:             Tue 04 Feb 2025 18:31:13 +0000
ROA not before:           Tue 04 Feb 2025 18:26:13 +0000
ROA not after:            Tue 03 Feb 2026 18:31:13 +0000
asID:                     265673
IP address blocks:        45.4.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:38:88:38:cc:a9:96:c9:96:09:b9:04:4f:e9:36:01:34:75:45:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A663625ACEE986000D86F2BCCF5CED7DE69D4C90
        Validity
            Not Before: Feb  4 18:26:13 2025 GMT
            Not After : Feb  3 18:31:13 2026 GMT
        Subject: CN=CA2CBBC60608B805128BFD7F02C6D5AC1028DFEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8b:51:4f:12:51:01:f1:78:42:ed:3e:c8:82:
                    89:5f:0a:74:cd:b7:96:c5:14:de:25:cc:0b:41:06:
                    a9:42:56:29:a1:28:fa:5f:2f:eb:9d:b7:71:db:fe:
                    dc:e0:0c:1e:66:79:ad:fc:20:bf:ce:53:d2:44:c4:
                    3f:b6:8a:91:fa:e2:12:fe:04:30:08:50:e0:2a:33:
                    f1:e4:ec:6e:a4:03:08:bf:43:90:a1:4f:46:c4:3f:
                    8c:70:07:39:17:7d:4f:4d:65:e5:9d:bc:ac:5e:fe:
                    b2:0f:00:00:bf:82:e6:16:ae:f7:9b:27:34:3a:da:
                    9c:25:d6:08:4e:8f:66:5b:ab:39:8a:1e:27:3a:17:
                    4c:b9:d2:22:b7:dc:df:b3:4d:55:a4:f0:7a:27:6b:
                    9a:7a:94:ce:85:6a:b0:07:c5:ae:a3:37:5c:07:c6:
                    11:61:2c:ed:a5:e8:40:12:e0:6e:65:4c:53:b5:5c:
                    51:20:d0:1e:d0:74:cb:cc:98:2f:25:d5:80:ef:a0:
                    e9:6f:e5:45:0c:b2:02:66:3d:d5:82:85:07:d0:51:
                    11:3a:84:8f:5c:52:93:2d:a3:5c:63:85:88:a9:bb:
                    bd:ce:e6:0e:ee:5e:95:62:cd:b4:41:1e:35:5d:4c:
                    f3:35:dc:25:b1:48:71:9d:1b:29:63:0c:70:ac:4e:
                    91:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2C:BB:C6:06:08:B8:05:12:8B:FD:7F:02:C6:D5:AC:10:28:DF:EA
            X509v3 Authority Key Identifier:
                keyid:A6:63:62:5A:CE:E9:86:00:0D:86:F2:BC:CF:5C:ED:7D:E6:9D:4C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A663625ACEE986000D86F2BCCF5CED7DE69D4C90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A89790A3A5ADA35D5FECEC48AA3A1FD9456BF021B4C5F97FC873E80CB1B4046/0/34352e342e3130302e302f32342d3234203d3e20323635363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:19:83:cc:ed:3b:01:10:78:f4:2b:f7:2f:d8:f4:70:35:fb:
         04:f4:fb:50:20:ed:c2:81:7e:4b:8c:10:9c:04:a4:e1:42:55:
         19:63:73:c3:b1:27:a1:23:80:05:c8:77:4b:70:d9:c5:b6:ab:
         0d:cb:31:d0:e7:dd:1a:51:2a:db:62:d9:16:67:b5:1f:92:5e:
         3b:29:07:a1:bd:65:fa:d7:ba:e4:70:e7:d0:87:87:eb:6a:18:
         34:a1:af:20:32:4a:e5:64:b0:22:43:f6:03:54:ac:6d:0b:7c:
         45:7d:d5:9c:f9:d5:fa:fa:f1:1c:56:b9:58:55:1f:f5:77:06:
         12:53:82:72:04:45:37:fe:8d:f4:b7:5a:f5:4b:cd:2f:22:0d:
         16:dd:5c:16:d3:2d:12:bc:12:c8:14:61:13:73:e4:27:8f:aa:
         76:25:95:13:d4:d1:62:9e:e6:21:10:26:44:85:57:12:c9:08:
         e6:14:74:ab:a1:bd:53:75:f4:e3:65:13:89:a3:6a:13:96:a5:
         09:5e:49:a1:b5:29:e7:62:ca:c6:59:c0:59:4c:98:6c:07:e7:
         f5:c8:33:6e:ec:86:93:8e:0c:ad:48:37:1b:33:4d:0b:77:d1:
         b0:a1:5b:e5:60:22:20:e7:78:ed:d5:e7:ed:d6:fe:48:71:ae:
         b6:69:9c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:21 2025 by rpki-client