Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4670F6BD1E934FEEEC0E00AE0EBADBB91C25C481783E745C3E47EAA07C9A98B4/0/34352e3137342e3230342e302f32322d3234203d3e20323637383531.roa
File:                     34352e3137342e3230342e302f32322d3234203d3e20323637383531.roa (raw, json)
Hash identifier:          3aqbw+5pp65ZTSU5blKYf/97/UBahESpcwPkzbedEUc=
Subject key identifier:   94:BA:E6:C6:B1:31:24:94:75:C7:A9:D9:FC:C4:DF:64:A4:4D:B9:DA
Certificate issuer:       /CN=6FB215754DD4ED59F894D93863C869DAB31DC0CC
Certificate serial:       6575B7981A6379E1D45999A94173BD401B99B524
Authority key identifier: 6F:B2:15:75:4D:D4:ED:59:F8:94:D9:38:63:C8:69:DA:B3:1D:C0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FB215754DD4ED59F894D93863C869DAB31DC0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4670F6BD1E934FEEEC0E00AE0EBADBB91C25C481783E745C3E47EAA07C9A98B4/0/34352e3137342e3230342e302f32322d3234203d3e20323637383531.roa
Signing time:             Tue 04 Feb 2025 19:58:23 +0000
ROA not before:           Tue 04 Feb 2025 19:53:23 +0000
ROA not after:            Tue 03 Feb 2026 19:58:23 +0000
asID:                     267851
IP address blocks:        45.174.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4670F6BD1E934FEEEC0E00AE0EBADBB91C25C481783E745C3E47EAA07C9A98B4/0/6FB215754DD4ED59F894D93863C869DAB31DC0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4670F6BD1E934FEEEC0E00AE0EBADBB91C25C481783E745C3E47EAA07C9A98B4/0/6FB215754DD4ED59F894D93863C869DAB31DC0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FB215754DD4ED59F894D93863C869DAB31DC0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:46:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:75:b7:98:1a:63:79:e1:d4:59:99:a9:41:73:bd:40:1b:99:b5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB215754DD4ED59F894D93863C869DAB31DC0CC
        Validity
            Not Before: Feb  4 19:53:23 2025 GMT
            Not After : Feb  3 19:58:23 2026 GMT
        Subject: CN=94BAE6C6B131249475C7A9D9FCC4DF64A44DB9DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7a:64:2b:60:50:9d:b3:a3:1b:35:c0:49:15:
                    71:c7:44:e5:27:b1:53:e8:86:49:91:ee:10:cc:3b:
                    76:35:13:1f:81:8b:37:3c:51:af:73:8c:20:a5:ee:
                    61:c0:3b:24:4a:2c:1d:83:9b:37:8f:71:e7:0d:fc:
                    01:97:4f:6e:6a:13:24:6c:d9:84:12:55:9f:c5:cc:
                    a9:22:53:0e:a0:cb:bd:5e:52:1b:3e:94:8b:69:c8:
                    26:4f:1a:ea:a8:64:96:62:32:18:55:a6:1d:dc:54:
                    a8:50:cd:da:77:05:d0:4d:99:b2:3a:16:ca:6c:7c:
                    f0:63:b1:6e:26:38:ed:81:a7:f3:74:bb:0a:7d:04:
                    e0:27:72:5c:d1:a0:31:9e:b7:99:39:f9:b8:2a:af:
                    74:9b:57:a8:70:71:79:f4:85:18:e0:cf:32:2e:7f:
                    1c:d7:77:95:8b:c7:dc:60:b9:9c:43:e6:18:44:9d:
                    1e:c7:7d:89:e0:e3:c7:81:22:66:cb:72:e7:67:28:
                    0a:d3:5b:c3:99:ef:ba:28:aa:84:d4:63:f7:4b:ad:
                    d3:c9:ac:29:68:57:cc:75:45:c7:f8:5f:ba:87:74:
                    6c:8b:69:53:28:67:b9:6a:f8:15:b5:a1:f0:5c:69:
                    aa:b7:57:60:77:84:67:16:cd:55:20:f2:36:7b:b6:
                    ea:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BA:E6:C6:B1:31:24:94:75:C7:A9:D9:FC:C4:DF:64:A4:4D:B9:DA
            X509v3 Authority Key Identifier:
                keyid:6F:B2:15:75:4D:D4:ED:59:F8:94:D9:38:63:C8:69:DA:B3:1D:C0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4670F6BD1E934FEEEC0E00AE0EBADBB91C25C481783E745C3E47EAA07C9A98B4/0/6FB215754DD4ED59F894D93863C869DAB31DC0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FB215754DD4ED59F894D93863C869DAB31DC0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4670F6BD1E934FEEEC0E00AE0EBADBB91C25C481783E745C3E47EAA07C9A98B4/0/34352e3137342e3230342e302f32322d3234203d3e20323637383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:7b:f2:5b:5e:3c:d1:fd:12:c8:23:b2:5a:c8:3f:28:48:51:
         cc:c1:31:d8:de:eb:b2:ac:07:5d:50:14:30:c4:08:92:d0:7b:
         71:d5:3d:e8:7d:bf:de:00:5a:22:d8:f3:47:9c:83:a7:d6:0b:
         53:30:70:d8:4f:3a:48:fc:83:e0:13:7f:00:68:a9:1e:ec:62:
         ab:b6:b4:4a:93:99:5a:6f:65:47:d7:97:51:1b:0a:e5:47:0b:
         e7:19:62:51:60:71:89:fb:76:df:d2:d0:ec:b7:51:6b:6f:ad:
         13:e0:d3:2e:4e:cd:e3:20:09:9c:e7:8d:ee:62:78:9c:01:cf:
         58:08:0f:1f:0c:a6:8a:66:ba:1f:ae:bf:d3:b5:b7:e5:57:47:
         d5:90:de:bd:a9:1a:bf:a5:49:cf:9b:53:44:1b:e4:12:ad:53:
         b3:9e:04:3c:d5:be:87:26:e5:56:92:c2:26:de:6a:92:e4:06:
         17:47:5b:59:4b:43:e1:70:ab:a3:7b:d3:52:ce:3f:37:ba:0e:
         95:bc:0a:13:10:68:5f:d7:82:eb:3f:b1:d1:12:e0:9b:bc:24:
         4d:b9:38:a4:8e:bb:f8:12:2d:fe:7c:e8:59:00:3b:96:7c:7b:
         58:70:55:8d:26:e3:a0:4a:23:ad:a4:9f:f7:61:de:67:1e:be:
         77:e0:25:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:57:26 2025 by rpki-client