Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34322e302f32342d3234203d3e203233323433.roa
File:                     34352e3232392e34322e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          j43cmpNORMNLoZY734ywSvrUY9XPvgmiegfr2jqKy+c=
Subject key identifier:   32:8C:E9:5B:33:97:2F:45:3D:D8:36:7C:B1:10:E8:1C:E4:8E:DA:AC
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       517ED13B86CCEBA817066B8D29A85128B1D90C4F
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34322e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:06:39 +0000
ROA not before:           Tue 04 Feb 2025 18:01:39 +0000
ROA not after:            Tue 03 Feb 2026 18:06:39 +0000
asID:                     23243
IP address blocks:        45.229.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7e:d1:3b:86:cc:eb:a8:17:06:6b:8d:29:a8:51:28:b1:d9:0c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:39 2025 GMT
            Not After : Feb  3 18:06:39 2026 GMT
        Subject: CN=328CE95B33972F453DD8367CB110E81CE48EDAAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5a:5e:69:d6:41:29:c0:0c:ea:0a:05:a5:94:
                    c4:b9:48:7e:1e:a1:b0:99:1a:53:d3:9b:ee:c5:51:
                    93:5e:76:a3:64:00:16:96:71:b8:be:ee:b3:05:2e:
                    5e:00:ac:90:ee:bb:3e:b8:2d:b3:58:a8:ed:61:6f:
                    d3:7a:a0:ad:71:7a:59:79:f2:d6:0a:6c:67:1d:28:
                    c6:bb:14:72:54:8c:0a:bc:69:ca:10:ed:13:b2:f4:
                    65:c1:1e:fe:39:65:4c:32:53:a5:6c:9d:d4:7b:96:
                    29:2f:8f:50:9a:c5:49:a6:31:d9:fb:cd:93:ad:82:
                    3b:85:5d:91:fd:22:fd:90:f0:15:53:7e:96:5e:1b:
                    f2:df:f6:5a:b7:62:ee:19:12:56:95:f2:49:f5:aa:
                    7f:64:db:ec:3d:39:8e:ae:75:0c:02:68:b5:02:a5:
                    c7:af:83:fe:9b:99:1e:3e:d9:67:ec:d1:63:9d:96:
                    a5:6a:e4:45:bf:02:8d:9f:fc:70:13:1e:de:f9:14:
                    a9:e8:b9:04:37:50:3f:0b:5b:da:b2:cc:35:93:a8:
                    db:18:25:fe:e6:db:37:15:66:d8:5a:98:05:47:7d:
                    89:9c:69:fc:0c:bc:a2:63:ab:f2:fb:d2:88:d6:f1:
                    39:10:dc:d0:e6:9a:28:81:ec:5b:68:06:d5:8a:78:
                    ba:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8C:E9:5B:33:97:2F:45:3D:D8:36:7C:B1:10:E8:1C:E4:8E:DA:AC
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34322e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:a8:83:bc:f7:6d:10:49:78:42:7e:c6:f8:bc:ff:4b:b9:b6:
         a5:15:a7:fd:b8:2d:41:d8:2d:f5:fc:2b:b8:ee:77:da:de:db:
         9e:00:e8:54:b5:ef:a9:82:9d:78:48:4e:29:cb:ba:86:b6:f7:
         e8:e9:48:8a:34:e6:f5:1c:35:71:2c:eb:ae:67:f8:5f:42:75:
         e5:8e:2c:27:bb:c5:86:70:71:3e:38:42:fc:3c:c9:06:1f:b6:
         8a:81:92:2e:55:a2:ff:95:3f:35:c9:e1:fc:a6:57:e0:1f:c3:
         18:5e:8a:72:57:0b:03:b0:fe:e6:91:81:9a:4a:e6:da:8d:3e:
         79:29:12:e3:9a:30:5a:e6:12:5c:67:f5:f9:19:0c:2a:6d:41:
         30:b0:46:3b:5c:55:70:37:a7:55:5e:64:3b:76:19:08:89:07:
         e7:1a:31:44:d1:f5:c1:e9:4c:92:4f:5d:47:9a:22:12:93:fa:
         41:23:83:0f:f0:6f:5b:61:7b:ab:58:b4:ee:52:d5:ab:db:b5:
         49:79:62:a9:d3:c3:92:b0:47:40:f2:4d:9f:2e:ec:2c:87:78:
         96:1d:43:96:f6:d5:2d:1b:47:a2:15:77:02:62:82:04:6f:d0:
         1a:65:cb:f4:35:95:e8:6e:a5:a4:5e:f1:1d:11:a6:bb:34:78:
         a8:ec:16:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:19 2025 by rpki-client