Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa
File:                     34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa (raw, json)
Hash identifier:          lEURVICemMAmm2uVPiaZ8QRu10QhkFKhSIbDc9IXzyk=
Subject key identifier:   8B:94:D5:59:19:12:EF:2C:AB:D9:15:21:D2:84:00:BC:C0:74:8E:06
Certificate issuer:       /CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Certificate serial:       4E13DA545971995388EB554B3DD042F64E881A6D
Authority key identifier: C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa
Signing time:             Tue 04 Feb 2025 18:51:41 +0000
ROA not before:           Tue 04 Feb 2025 18:46:41 +0000
ROA not after:            Tue 03 Feb 2026 18:51:41 +0000
asID:                     266780
IP address blocks:        45.234.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:13:da:54:59:71:99:53:88:eb:55:4b:3d:d0:42:f6:4e:88:1a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
        Validity
            Not Before: Feb  4 18:46:41 2025 GMT
            Not After : Feb  3 18:51:41 2026 GMT
        Subject: CN=8B94D5591912EF2CABD91521D28400BCC0748E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:e8:e7:18:65:8f:e5:01:e9:bf:cd:fe:25:
                    80:e0:82:50:cb:81:8c:d4:64:34:39:83:13:79:89:
                    43:c5:ea:a7:6e:35:7f:c9:4e:98:e3:dd:e4:2b:fe:
                    bf:67:58:b0:fc:02:d1:a4:f1:3e:f2:16:4a:ef:0e:
                    7a:8b:e1:4c:de:d2:34:15:03:75:61:81:9e:c8:f4:
                    6a:c1:9b:b4:65:ca:ef:40:4c:ac:81:50:f7:47:e2:
                    2b:86:3f:e0:32:a3:00:c1:e2:6c:4d:73:22:17:28:
                    88:98:00:fd:02:22:8c:01:f3:bc:45:9a:91:cb:5a:
                    7f:f0:fc:9b:1d:fa:21:86:b6:d4:4d:d3:98:a4:b7:
                    be:86:70:1c:d6:39:6f:35:7d:33:a1:c7:62:5e:1e:
                    b1:db:cf:43:35:95:fa:20:ea:b9:cf:e9:7c:bf:ff:
                    ca:72:b6:eb:ce:3b:75:1c:c7:42:54:15:a4:8d:6f:
                    26:9b:9f:b7:24:50:36:e9:f8:7f:aa:d7:a5:76:be:
                    89:d9:0d:22:e9:0a:ad:bd:cc:0d:5d:94:80:54:6d:
                    d9:73:da:35:a1:a0:32:ec:e4:b1:ed:02:24:9f:f0:
                    f8:19:ca:66:3e:b1:d6:46:c8:12:51:00:d5:45:6d:
                    20:5e:2e:b7:2a:19:8c:fe:93:32:ff:87:6d:e8:89:
                    b2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:94:D5:59:19:12:EF:2C:AB:D9:15:21:D2:84:00:BC:C0:74:8E:06
            X509v3 Authority Key Identifier:
                keyid:C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:0f:e7:ad:8b:64:5c:c1:2e:09:56:71:4c:2d:01:23:84:d9:
         fe:ba:f8:8a:02:48:47:38:f2:a6:64:f2:a0:1c:cb:0f:76:87:
         fb:9a:3f:aa:12:5b:c5:72:22:f2:83:5d:6c:22:5b:37:a3:23:
         1a:e4:54:20:04:41:db:80:38:e1:13:0c:df:92:51:e7:0f:d6:
         88:db:19:fc:55:77:e9:b5:93:e3:0b:3f:8a:6f:79:f1:06:65:
         b9:82:fe:46:3d:5c:52:82:57:57:44:30:03:b4:dc:d3:1d:db:
         3a:3f:b5:46:63:83:47:02:33:6b:1f:ce:d0:57:45:cb:6b:57:
         b6:b6:c2:81:f1:27:dd:43:93:5b:95:12:2c:83:c3:99:10:d3:
         65:a0:c0:7b:a9:9a:40:8e:eb:b4:6f:6c:46:59:35:c0:1a:e2:
         ba:a0:0b:32:2d:b1:22:21:17:e7:db:34:8d:c9:de:34:c2:b8:
         d4:eb:00:e2:e5:98:05:86:78:86:da:e8:b1:4e:ea:6e:21:f2:
         1a:be:4c:24:0c:8e:7d:33:7e:a2:1e:65:c7:ed:59:6a:4d:be:
         4a:48:a8:1e:99:01:b8:80:8b:c9:2b:23:28:45:8a:a6:a9:43:
         0e:27:af:19:2a:6e:4d:b3:63:51:e2:24:aa:fc:07:17:90:f9:
         93:cd:39:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:17 2025 by rpki-client