Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36382e302f32322d3232203d3e20323634373538.roa
File:                     34352e3137382e36382e302f32322d3232203d3e20323634373538.roa (raw, json)
Hash identifier:          8WbySAjgkERLU9TZsdUo5V68lCLwNkLf1nfdwz6nypE=
Subject key identifier:   8E:FA:9C:46:06:56:C7:EE:12:97:24:48:CF:B5:71:38:68:52:7D:BF
Certificate issuer:       /CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979
Certificate serial:       4A537F9B1369E0CFD46EC3033A6F9CB3E8A9071B
Authority key identifier: DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36382e302f32322d3232203d3e20323634373538.roa
Signing time:             Tue 18 Feb 2025 16:10:06 +0000
ROA not before:           Tue 18 Feb 2025 16:05:06 +0000
ROA not after:            Tue 17 Feb 2026 16:10:06 +0000
asID:                     264758
IP address blocks:        45.178.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:53:7f:9b:13:69:e0:cf:d4:6e:c3:03:3a:6f:9c:b3:e8:a9:07:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979
        Validity
            Not Before: Feb 18 16:05:06 2025 GMT
            Not After : Feb 17 16:10:06 2026 GMT
        Subject: CN=8EFA9C460656C7EE12972448CFB5713868527DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:03:bf:ee:c3:dc:63:ab:65:9d:3e:32:aa:
                    5f:88:48:08:0b:a5:a4:5a:2f:d2:db:05:86:c9:cb:
                    24:66:04:53:57:97:05:8f:a0:f3:6e:3b:9a:90:23:
                    0c:d8:55:d5:34:e5:af:9e:f9:bf:7e:f1:d7:fb:3f:
                    a3:dc:70:5b:51:96:e0:6c:8b:0f:3e:b2:02:44:bb:
                    c1:b5:d2:55:89:61:ce:a0:4c:66:fa:88:00:b2:ea:
                    db:32:86:6f:e0:86:fa:62:6e:0d:35:bb:60:cf:9c:
                    1a:cd:62:3e:79:80:a0:34:de:a8:7b:85:9a:06:d0:
                    44:c4:0c:d8:1a:f8:f4:62:f6:dd:60:aa:c6:cd:e3:
                    10:19:15:67:a5:ef:60:3e:92:be:fa:cc:85:1b:54:
                    bc:1d:95:0f:4e:33:0f:f8:e1:d4:ee:a7:a5:47:fd:
                    20:16:d2:b9:27:22:fa:9e:76:45:a1:18:52:a9:58:
                    4e:c6:3c:62:7e:71:12:58:5a:c0:73:a3:84:02:91:
                    03:86:00:0e:af:d7:fd:2a:91:bb:79:31:85:32:4d:
                    e1:6f:52:cd:1f:e7:97:07:29:df:2c:94:2e:df:ca:
                    6c:ac:b9:be:29:fa:6f:99:18:22:71:2d:a8:68:20:
                    5b:da:83:a8:d3:66:d9:2b:1c:fd:78:61:50:78:a4:
                    f2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FA:9C:46:06:56:C7:EE:12:97:24:48:CF:B5:71:38:68:52:7D:BF
            X509v3 Authority Key Identifier:
                keyid:DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36382e302f32322d3232203d3e20323634373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:63:fa:1d:31:23:69:ec:ef:34:8d:1d:0f:ee:2a:9c:8f:9f:
         fd:75:5f:39:92:60:4e:12:49:26:31:f9:b0:d2:f8:7d:56:6d:
         35:5b:f7:8a:3e:48:c9:9c:17:4c:2f:c9:cb:84:38:3a:c4:9f:
         9d:5a:33:20:d1:b7:de:1e:c6:4e:37:27:07:84:1a:c3:ae:9c:
         04:65:6e:e7:83:f6:a6:ad:63:29:08:de:60:f0:65:3f:38:32:
         d0:a0:ce:59:38:85:44:14:35:21:44:cf:e0:27:26:96:df:dc:
         55:4d:84:31:ab:c6:7c:5a:1a:17:39:8b:95:ea:00:f1:74:32:
         be:8b:1f:3e:7b:52:b0:54:ba:03:d7:b2:fc:a7:a9:c1:b9:6c:
         50:c8:27:b1:91:76:2a:80:f5:9d:93:b3:99:4a:73:77:db:0c:
         f1:73:c7:cb:7b:23:b1:9d:a8:ee:0c:cb:d3:3a:ea:ef:67:60:
         b7:68:3d:05:9f:36:ad:d0:88:55:ee:51:bc:99:6d:69:41:a5:
         78:f9:2a:aa:ce:e3:f2:d7:fe:51:47:36:02:72:ea:6c:0a:7f:
         d9:23:ad:1a:2e:b7:49:d9:e1:4b:b2:d7:9b:4d:62:69:56:0e:
         8c:39:03:97:7d:67:53:46:0e:26:82:d0:ee:08:c5:c8:40:2e:
         38:d1:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:53:36 2025 by rpki-client