Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/34352e3138352e3232302e302f32322d3234203d3e203634313137.roa
File:                     34352e3138352e3232302e302f32322d3234203d3e203634313137.roa (raw, json)
Hash identifier:          /Vh/3jMJTMsRFPR927vYaPhCqHzwhxynnWXP9zc8NoE=
Subject key identifier:   37:9E:85:21:A5:C5:5B:CE:CB:53:30:1B:D5:F4:7B:EE:43:41:2E:08
Certificate issuer:       /CN=B0C74F5277521A2517C42D5A2DE11738F2647CF2
Certificate serial:       05CEE680B5D114D8E9315362B0AC605FC3D48A92
Authority key identifier: B0:C7:4F:52:77:52:1A:25:17:C4:2D:5A:2D:E1:17:38:F2:64:7C:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/34352e3138352e3232302e302f32322d3234203d3e203634313137.roa
Signing time:             Tue 04 Feb 2025 18:19:32 +0000
ROA not before:           Tue 04 Feb 2025 18:14:32 +0000
ROA not after:            Tue 03 Feb 2026 18:19:32 +0000
asID:                     64117
IP address blocks:        45.185.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 15:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ce:e6:80:b5:d1:14:d8:e9:31:53:62:b0:ac:60:5f:c3:d4:8a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0C74F5277521A2517C42D5A2DE11738F2647CF2
        Validity
            Not Before: Feb  4 18:14:32 2025 GMT
            Not After : Feb  3 18:19:32 2026 GMT
        Subject: CN=379E8521A5C55BCECB53301BD5F47BEE43412E08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:a5:09:e9:d1:77:ca:09:22:fb:09:96:ee:
                    31:d7:45:48:74:5f:e4:c6:3f:ae:f1:c0:87:94:75:
                    a2:17:6d:e9:00:41:92:6c:08:43:2d:17:00:2a:09:
                    ea:c0:8c:75:8d:8f:81:00:46:46:c0:00:6a:1d:9b:
                    cb:9b:83:5e:db:e8:2d:eb:2c:f2:21:ec:cc:bc:4a:
                    81:e7:4c:68:1e:f2:ba:44:a3:e5:4f:31:8d:72:1a:
                    fb:ce:5a:67:43:d4:40:ed:1a:ac:c6:19:b5:bd:30:
                    95:25:80:59:c4:82:62:3a:27:c5:19:57:c4:f5:ed:
                    2f:82:49:56:6e:fd:5c:fd:98:3d:3f:ed:21:bc:3a:
                    32:be:54:8e:93:e5:e1:c6:36:b5:e3:ea:21:e8:b3:
                    d2:f1:08:19:2a:b1:db:36:07:67:c9:da:56:0c:d0:
                    18:e8:11:af:2e:c7:2c:9c:2d:6f:71:f3:21:a3:a2:
                    3b:b0:ac:1f:56:37:f1:c1:0c:ed:12:67:75:98:2b:
                    15:da:1a:6c:60:2a:84:ea:d3:2c:47:ca:95:88:6b:
                    1f:52:dd:30:25:6e:02:00:0c:38:a2:02:51:d0:b9:
                    81:f5:4d:d7:c5:40:37:b8:6e:33:5f:f0:ce:bf:ec:
                    87:2e:79:dc:4f:48:4d:d0:88:00:41:cd:7f:85:3e:
                    ba:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9E:85:21:A5:C5:5B:CE:CB:53:30:1B:D5:F4:7B:EE:43:41:2E:08
            X509v3 Authority Key Identifier:
                keyid:B0:C7:4F:52:77:52:1A:25:17:C4:2D:5A:2D:E1:17:38:F2:64:7C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0C74F5277521A2517C42D5A2DE11738F2647CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/412AE136A54991700F23FB5BB1D9E54219AC1E55303CA6C86DC9A8D181184187/0/34352e3138352e3232302e302f32322d3234203d3e203634313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:13:18:fa:b5:6e:bb:87:2a:2c:6a:cd:48:22:18:1c:0c:93:
         8c:1c:63:1d:23:79:7f:41:57:0e:f2:c1:c2:ba:a2:49:a7:90:
         c3:50:4c:95:87:ea:31:f8:65:d6:16:f1:69:6c:67:b1:2e:39:
         73:7f:91:4c:3b:37:a9:98:94:1f:cc:fa:42:f6:82:70:e2:6b:
         f7:fd:b8:1e:9a:62:56:6e:92:c0:aa:ba:a7:e7:9b:3e:26:4d:
         94:ce:c7:5e:43:11:a4:74:b6:41:cc:f8:f5:c1:09:8e:93:14:
         32:41:54:b9:75:36:a9:a1:e4:c8:88:50:68:93:d1:bf:13:78:
         f5:50:68:fe:e3:56:df:64:53:ad:b1:78:17:91:51:e3:20:3d:
         1b:8c:3e:ae:13:ed:26:c5:6f:7e:ae:a8:1d:03:1e:10:d5:86:
         2e:1f:cd:47:41:19:45:8b:94:9c:d9:eb:ba:a8:82:a4:d9:95:
         de:4f:18:71:07:ab:1e:56:bc:f3:c5:fd:14:9e:86:26:4f:ce:
         6e:5c:c0:18:76:10:71:e6:a5:fb:a1:25:74:d2:86:0e:e1:11:
         f0:8b:70:a1:ce:be:a8:a3:81:56:1e:e2:ef:f8:f7:0b:8d:c1:
         25:f1:f6:c2:84:1e:50:ca:f3:84:66:6c:0c:60:58:fa:f4:f2:
         d2:48:af:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:34 2025 by rpki-client