Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B8063E0CDA4F7C26EC3303E5165F693ECE42ABD0C1CC8CE661DB958A78FFC1A/0/34352e3136332e38302e302f32332d3234203d3e20323637363837.roa
File:                     34352e3136332e38302e302f32332d3234203d3e20323637363837.roa (raw, json)
Hash identifier:          zl5YGdb/Dl2edLt1DmLms1ZEUzjmxYDjjfZP1iGDkrM=
Subject key identifier:   BD:15:F4:28:21:05:A0:A4:5B:FB:C8:17:C6:11:90:A8:C9:FA:52:3D
Certificate issuer:       /CN=7B84A67570488D6ABB6E7D629BEEE90675C03457
Certificate serial:       40FA6D4BA2CA8FF0A28700B570DF35A03EC1464E
Authority key identifier: 7B:84:A6:75:70:48:8D:6A:BB:6E:7D:62:9B:EE:E9:06:75:C0:34:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B84A67570488D6ABB6E7D629BEEE90675C03457.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B8063E0CDA4F7C26EC3303E5165F693ECE42ABD0C1CC8CE661DB958A78FFC1A/0/34352e3136332e38302e302f32332d3234203d3e20323637363837.roa
Signing time:             Tue 04 Feb 2025 18:13:11 +0000
ROA not before:           Tue 04 Feb 2025 18:08:11 +0000
ROA not after:            Tue 03 Feb 2026 18:13:11 +0000
asID:                     267687
IP address blocks:        45.163.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4B8063E0CDA4F7C26EC3303E5165F693ECE42ABD0C1CC8CE661DB958A78FFC1A/0/7B84A67570488D6ABB6E7D629BEEE90675C03457.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4B8063E0CDA4F7C26EC3303E5165F693ECE42ABD0C1CC8CE661DB958A78FFC1A/0/7B84A67570488D6ABB6E7D629BEEE90675C03457.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B84A67570488D6ABB6E7D629BEEE90675C03457.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 10:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fa:6d:4b:a2:ca:8f:f0:a2:87:00:b5:70:df:35:a0:3e:c1:46:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B84A67570488D6ABB6E7D629BEEE90675C03457
        Validity
            Not Before: Feb  4 18:08:11 2025 GMT
            Not After : Feb  3 18:13:11 2026 GMT
        Subject: CN=BD15F4282105A0A45BFBC817C61190A8C9FA523D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ae:ec:66:fb:a0:c7:9d:95:02:28:56:ef:6c:
                    3a:ae:00:4b:25:09:fa:8a:ec:74:f6:c7:5a:00:9e:
                    90:1e:aa:99:0e:f0:62:85:70:27:13:fd:8b:17:51:
                    9c:82:c6:5e:77:56:38:3a:9f:bf:bc:a8:ac:27:ca:
                    6e:4c:a6:cb:19:6a:e7:16:4c:9f:f3:8c:ad:8f:ec:
                    9a:f2:76:e8:d5:f8:78:60:48:c9:65:b4:c7:bc:3e:
                    e2:e5:b4:b4:50:3a:eb:3d:46:3e:ca:32:00:d2:3f:
                    27:54:1c:f3:c9:28:ea:e0:ac:2e:ae:f1:b4:b6:02:
                    12:c8:ad:7b:11:13:cc:66:1d:a6:39:54:ca:4b:f8:
                    25:2e:77:cd:ac:ff:4b:1f:be:d8:a6:27:e6:3f:f4:
                    73:3f:c0:79:0d:8a:77:40:0f:e9:11:5e:eb:fe:c5:
                    db:60:fc:38:1c:a7:41:22:c1:03:8f:85:c6:f0:1f:
                    fa:06:d5:0b:20:11:4e:93:0b:bc:ef:6b:3e:fa:0b:
                    9e:b8:0e:ae:ef:ed:de:1f:ab:d6:09:4e:0a:f3:90:
                    00:5f:0f:79:41:0e:de:84:67:36:63:2e:76:99:93:
                    48:f6:ce:c1:90:bb:dd:61:d8:96:d1:42:f0:0a:73:
                    4e:e2:38:c6:64:40:4f:80:3a:ac:0a:d6:af:d0:17:
                    9d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:15:F4:28:21:05:A0:A4:5B:FB:C8:17:C6:11:90:A8:C9:FA:52:3D
            X509v3 Authority Key Identifier:
                keyid:7B:84:A6:75:70:48:8D:6A:BB:6E:7D:62:9B:EE:E9:06:75:C0:34:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B8063E0CDA4F7C26EC3303E5165F693ECE42ABD0C1CC8CE661DB958A78FFC1A/0/7B84A67570488D6ABB6E7D629BEEE90675C03457.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B84A67570488D6ABB6E7D629BEEE90675C03457.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B8063E0CDA4F7C26EC3303E5165F693ECE42ABD0C1CC8CE661DB958A78FFC1A/0/34352e3136332e38302e302f32332d3234203d3e20323637363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:24:fb:4d:d2:71:e6:f8:e5:52:ee:c6:f9:10:ff:eb:80:e5:
         6f:08:e3:1b:61:bc:ea:41:a6:19:4a:47:99:f7:4b:de:10:92:
         8d:ba:8d:b1:56:97:95:df:2d:d2:c5:ec:e6:39:3e:3a:e0:75:
         f6:e8:e9:b2:48:31:d2:70:fa:ed:8d:df:71:2d:80:fe:59:18:
         79:69:43:5f:51:0e:d2:e2:7c:71:ea:ae:c6:53:84:a6:e0:be:
         ba:33:7b:fb:96:8b:7a:1e:4b:7a:ff:a7:a8:bf:a3:90:20:98:
         e5:c9:e3:5c:cd:01:2a:95:68:bf:79:3a:a0:1c:ae:5e:34:16:
         df:14:d0:c2:b6:24:66:8e:0a:dc:4f:be:c1:e7:f9:ec:48:04:
         8c:3c:16:57:70:e9:28:21:36:95:00:ef:2a:a7:c0:8e:c9:75:
         3b:d9:d8:51:b5:5f:f8:cd:40:ee:84:dc:a9:42:2a:4e:7f:0e:
         12:b8:58:22:ca:34:d5:9c:62:c5:40:f9:8f:fe:e2:bb:d5:1f:
         19:0c:5d:18:c4:95:cf:3f:f6:7b:90:10:fb:8f:67:4d:5d:b3:
         dd:5a:4b:b5:5a:a0:71:5d:0e:b4:85:89:81:6a:2b:71:23:36:
         e1:e0:25:7e:a1:8c:1f:d7:64:ec:30:4a:4e:3c:46:39:1b:73:
         18:5c:4f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:45:12 2025 by rpki-client