Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/34352e3136322e3138342e302f32322d3234203d3e20323633373032.roa
File:                     34352e3136322e3138342e302f32322d3234203d3e20323633373032.roa (raw, json)
Hash identifier:          gCGwxKQRiMQloU9a8KFs0vV4F9YsPjXwL4BWg6CFBjY=
Subject key identifier:   D4:CE:38:E0:B5:A9:7B:30:0A:A6:A8:9F:1E:0C:7D:FD:A3:2D:5B:51
Certificate issuer:       /CN=E9BD71B0FDCC660140582C799E734F25C80A1196
Certificate serial:       4633FF43206E62A0720C71365086D181199CE0BC
Authority key identifier: E9:BD:71:B0:FD:CC:66:01:40:58:2C:79:9E:73:4F:25:C8:0A:11:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/34352e3136322e3138342e302f32322d3234203d3e20323633373032.roa
Signing time:             Wed 23 Apr 2025 16:30:00 +0000
ROA not before:           Wed 23 Apr 2025 16:25:00 +0000
ROA not after:            Wed 22 Apr 2026 16:30:00 +0000
asID:                     263702
IP address blocks:        45.162.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:33:ff:43:20:6e:62:a0:72:0c:71:36:50:86:d1:81:19:9c:e0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9BD71B0FDCC660140582C799E734F25C80A1196
        Validity
            Not Before: Apr 23 16:25:00 2025 GMT
            Not After : Apr 22 16:30:00 2026 GMT
        Subject: CN=D4CE38E0B5A97B300AA6A89F1E0C7DFDA32D5B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:45:dc:65:30:5c:fe:de:a9:14:85:86:62:1e:
                    5d:a7:f7:1f:fb:b9:50:dc:6d:98:5e:2b:7b:ba:aa:
                    cb:24:5d:df:60:d8:13:f4:29:63:6a:a4:f2:6e:0f:
                    73:bc:40:44:6e:4c:e6:71:cc:5e:35:ef:4c:b4:1d:
                    42:c7:3e:a6:ae:fb:76:be:9e:d8:0e:d8:49:c3:ad:
                    96:39:39:53:49:ba:8d:3d:fb:c9:22:1f:9d:e9:59:
                    f6:a4:2e:95:9e:70:d1:84:3d:02:46:bf:6b:30:ab:
                    42:84:5a:23:ce:04:64:a2:86:a4:a6:28:f8:50:b8:
                    c7:30:f4:0b:27:c6:dd:4f:3b:db:94:12:f4:9b:aa:
                    d8:48:a2:0e:6d:96:98:a8:7c:27:ca:c9:6b:59:85:
                    65:77:b8:bf:45:a0:ab:95:ce:6a:24:75:74:0b:53:
                    4c:8c:a1:9d:df:2e:92:3c:cd:b5:7c:e2:bd:c9:04:
                    9b:a5:bc:35:5a:98:b1:69:63:03:41:ef:ec:da:6e:
                    2d:9f:fa:a2:74:6e:4e:f8:a3:67:9c:7e:ef:b9:e1:
                    5c:49:ea:23:f3:f1:d0:a6:14:1f:59:6c:c2:c2:78:
                    24:64:36:29:c2:dd:17:ce:69:3d:46:7e:7f:f1:04:
                    3a:0c:29:58:a0:41:3a:31:6d:bb:b8:a1:36:fb:75:
                    c0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CE:38:E0:B5:A9:7B:30:0A:A6:A8:9F:1E:0C:7D:FD:A3:2D:5B:51
            X509v3 Authority Key Identifier:
                keyid:E9:BD:71:B0:FD:CC:66:01:40:58:2C:79:9E:73:4F:25:C8:0A:11:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/34352e3136322e3138342e302f32322d3234203d3e20323633373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:39:f6:85:17:d9:85:7a:20:a9:31:0b:70:fe:4a:2a:8e:60:
         20:d5:a3:bc:88:8c:fa:50:83:8b:96:a1:83:2c:08:9b:f3:b2:
         03:26:7f:92:88:6a:7f:1e:ae:62:12:7d:7f:13:78:0a:f4:0d:
         23:b8:e2:b6:38:00:17:b3:a4:4e:00:24:84:a9:87:0b:7f:2f:
         fe:e6:28:61:f5:66:77:85:1a:1e:ca:38:ec:d5:8c:d5:78:bd:
         22:eb:0d:ac:e1:7d:3d:1f:ff:00:8c:e4:7f:41:8d:ee:6d:b7:
         56:42:90:41:13:e4:03:8b:19:7b:1e:07:a1:40:65:0b:28:14:
         59:6f:f0:2b:51:20:04:8c:39:2c:aa:30:a6:43:97:67:7d:39:
         d0:89:66:35:6c:7e:91:14:19:1b:8c:cd:d4:47:e7:0c:83:ea:
         53:9e:90:f8:26:c9:89:31:1e:2f:08:bf:19:14:02:24:77:c7:
         d6:5c:a4:67:a8:c3:f4:94:4b:8e:33:41:56:50:ca:69:40:be:
         cc:a3:c8:61:4e:8e:36:6c:cc:2d:08:36:bd:17:02:3b:4d:7e:
         b9:72:a9:db:cc:07:29:c6:be:5a:21:ae:d5:cd:41:8f:63:d6:
         a6:1c:e7:d7:41:57:85:b1:86:be:18:1f:4d:1e:72:d2:f1:92:
         98:e3:85:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:23:36 2025 by rpki-client