Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E0D795654DD4FDA70FBE3FF898D88BF9C9C967CEA19E732E49E766FEA22C9A7/0/34352e3138382e3233322e302f32322d3234203d3e20323634373434.roa
File:                     34352e3138382e3233322e302f32322d3234203d3e20323634373434.roa (raw, json)
Hash identifier:          nOFd47mKMtwYpnM7acISi3UxMsXU03gT/MpRiwMwcuw=
Subject key identifier:   EA:EC:79:25:9A:0B:D6:B6:2F:69:73:97:33:67:67:68:BD:0D:BA:B8
Certificate issuer:       /CN=32B04C79CB485E8D05BD3A73D9DD3F9F028D7184
Certificate serial:       0D2CF6CCD28FEC27C8026A21A25739EA17EAF586
Authority key identifier: 32:B0:4C:79:CB:48:5E:8D:05:BD:3A:73:D9:DD:3F:9F:02:8D:71:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32B04C79CB485E8D05BD3A73D9DD3F9F028D7184.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E0D795654DD4FDA70FBE3FF898D88BF9C9C967CEA19E732E49E766FEA22C9A7/0/34352e3138382e3233322e302f32322d3234203d3e20323634373434.roa
Signing time:             Tue 04 Feb 2025 18:28:05 +0000
ROA not before:           Tue 04 Feb 2025 18:23:05 +0000
ROA not after:            Tue 03 Feb 2026 18:28:05 +0000
asID:                     264744
IP address blocks:        45.188.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E0D795654DD4FDA70FBE3FF898D88BF9C9C967CEA19E732E49E766FEA22C9A7/0/32B04C79CB485E8D05BD3A73D9DD3F9F028D7184.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E0D795654DD4FDA70FBE3FF898D88BF9C9C967CEA19E732E49E766FEA22C9A7/0/32B04C79CB485E8D05BD3A73D9DD3F9F028D7184.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32B04C79CB485E8D05BD3A73D9DD3F9F028D7184.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2c:f6:cc:d2:8f:ec:27:c8:02:6a:21:a2:57:39:ea:17:ea:f5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32B04C79CB485E8D05BD3A73D9DD3F9F028D7184
        Validity
            Not Before: Feb  4 18:23:05 2025 GMT
            Not After : Feb  3 18:28:05 2026 GMT
        Subject: CN=EAEC79259A0BD6B62F69739733676768BD0DBAB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:2f:01:3f:d9:e2:30:77:7f:31:89:9a:a2:
                    9c:36:9a:90:9d:52:d1:f5:08:61:32:52:ab:4c:43:
                    30:80:b3:f4:ab:f5:97:64:e3:42:bd:2b:24:5d:2f:
                    0a:72:ec:39:e2:8d:37:e7:a2:81:2e:a7:38:e5:f9:
                    7e:cb:67:ca:ce:af:55:91:de:c6:77:5a:48:8c:26:
                    a7:47:f4:3f:98:a3:0d:26:05:69:c8:14:dc:fd:75:
                    a6:18:c7:39:b3:57:82:a3:20:43:c3:89:37:3d:16:
                    cb:ff:20:5b:cc:20:1f:f5:49:b3:1c:4d:a7:e0:4c:
                    2c:ca:db:cd:82:47:91:35:00:6c:76:96:87:69:19:
                    8c:ee:64:40:ce:4d:a7:41:50:34:a9:26:14:74:7f:
                    6a:7b:16:fb:9b:87:0a:34:6e:09:3e:0b:ad:3b:c4:
                    77:40:3c:95:eb:c2:63:44:5f:68:85:85:c1:58:f1:
                    94:ec:cb:0a:0c:23:33:58:f3:7b:a8:b7:1d:4f:54:
                    b5:f2:36:c1:58:36:af:c1:6f:66:33:b8:c7:9d:75:
                    6e:ee:bc:e0:08:c2:7b:13:67:04:dc:c6:c1:f2:c2:
                    02:40:48:7e:f1:35:c4:7e:35:4a:8a:f9:ee:74:73:
                    27:69:46:86:37:dc:05:bc:bf:bf:8c:7c:78:09:10:
                    92:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EC:79:25:9A:0B:D6:B6:2F:69:73:97:33:67:67:68:BD:0D:BA:B8
            X509v3 Authority Key Identifier:
                keyid:32:B0:4C:79:CB:48:5E:8D:05:BD:3A:73:D9:DD:3F:9F:02:8D:71:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E0D795654DD4FDA70FBE3FF898D88BF9C9C967CEA19E732E49E766FEA22C9A7/0/32B04C79CB485E8D05BD3A73D9DD3F9F028D7184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32B04C79CB485E8D05BD3A73D9DD3F9F028D7184.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E0D795654DD4FDA70FBE3FF898D88BF9C9C967CEA19E732E49E766FEA22C9A7/0/34352e3138382e3233322e302f32322d3234203d3e20323634373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:33:12:20:8d:8b:38:a6:ba:c1:be:0e:73:c0:a4:7a:27:9a:
         c7:e3:86:3c:eb:ad:23:9f:4e:87:98:4e:a4:15:c0:bb:17:0b:
         df:21:36:7e:03:31:8c:2d:13:3b:46:83:96:93:14:f7:f7:57:
         a4:b2:2d:42:40:b2:76:e9:84:46:db:1f:f9:5c:2d:0e:b5:10:
         78:75:02:a0:24:b7:f3:0e:00:0d:ed:bb:54:a9:a4:5f:74:df:
         0d:f2:c8:b3:45:c8:17:38:2d:29:e7:5b:77:63:ba:a5:dc:8a:
         15:95:00:43:6f:26:82:aa:e0:2e:a4:e7:59:16:21:80:c5:44:
         08:b2:5b:4a:a4:71:70:8a:7d:90:ac:e2:11:f4:85:8a:d6:0a:
         a5:9a:5a:52:bf:50:41:c5:42:9f:09:17:f4:99:bf:be:bb:fd:
         17:5c:ca:79:9a:27:de:9a:22:57:3a:1e:bd:69:ce:55:9d:88:
         6b:6b:e1:cc:44:79:c2:8e:16:71:64:54:6f:f3:37:0a:e2:9c:
         4e:53:3b:52:36:03:a6:ac:82:7e:6e:ad:8a:66:1b:5a:36:a0:
         13:73:94:2f:6b:b1:c8:46:03:ac:d5:a8:0b:f6:b1:5b:04:4a:
         a6:3b:e2:50:93:59:49:4f:07:97:9a:6a:89:50:9a:f0:5e:4a:
         94:20:dc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:55:53 2025 by rpki-client