Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/34352e3232362e33322e302f32322d3234203d3e20323635383830.roa
File:                     34352e3232362e33322e302f32322d3234203d3e20323635383830.roa (raw, json)
Hash identifier:          pcWX1hLNKMdV610j/op3XlPjJmVtjGtzPB3R7uVTtDY=
Subject key identifier:   AC:21:DF:3E:1A:29:DD:96:AD:3A:F5:51:FC:14:FC:3A:BA:65:A0:10
Certificate issuer:       /CN=C57552E18AFFC85D99468F027EAFCED31C5F6EA4
Certificate serial:       18EEB3338AE528F65AEDE6BB10BEA1CC84766E32
Authority key identifier: C5:75:52:E1:8A:FF:C8:5D:99:46:8F:02:7E:AF:CE:D3:1C:5F:6E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/34352e3232362e33322e302f32322d3234203d3e20323635383830.roa
Signing time:             Wed 29 Jan 2025 15:05:00 +0000
ROA not before:           Wed 29 Jan 2025 15:00:00 +0000
ROA not after:            Wed 28 Jan 2026 15:05:00 +0000
asID:                     265880
IP address blocks:        45.226.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ee:b3:33:8a:e5:28:f6:5a:ed:e6:bb:10:be:a1:cc:84:76:6e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C57552E18AFFC85D99468F027EAFCED31C5F6EA4
        Validity
            Not Before: Jan 29 15:00:00 2025 GMT
            Not After : Jan 28 15:05:00 2026 GMT
        Subject: CN=AC21DF3E1A29DD96AD3AF551FC14FC3ABA65A010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4f:34:d5:93:7c:49:a4:2b:fc:30:8d:5b:0f:
                    83:5f:62:d2:fb:0d:8d:48:23:7b:c3:da:56:72:4b:
                    c4:91:62:8a:50:6e:d0:c4:27:3f:ba:91:81:10:a2:
                    ac:a2:d8:c3:46:43:33:0b:e4:62:c8:84:99:b2:ea:
                    02:cb:29:b3:e7:29:de:ce:67:7b:51:63:1e:74:6a:
                    3f:c9:66:91:3d:ed:98:5c:82:50:50:95:d4:41:e8:
                    ee:9a:69:55:09:57:72:55:f5:c0:84:ad:95:cd:5b:
                    16:27:75:a9:04:c3:62:4d:07:a2:e0:b9:dc:0e:26:
                    dc:e4:4f:47:22:86:50:15:89:30:8c:90:50:80:23:
                    10:fb:33:4f:cf:fb:d0:eb:45:b3:cc:55:5a:b4:a4:
                    01:b0:a1:e3:ec:0f:51:c4:4c:c9:04:5c:7c:93:5b:
                    50:a2:04:28:90:b1:d4:9b:98:d1:08:3f:4b:c8:db:
                    fc:e5:a5:6e:db:67:c9:cb:b8:df:e9:a9:45:92:bd:
                    49:c3:2a:4b:22:1a:25:11:40:83:ea:d6:f1:db:1b:
                    1f:74:33:e5:b4:01:c8:df:ca:7e:21:fb:ee:24:fe:
                    b5:85:89:fc:6d:21:78:58:72:df:1c:91:f8:30:7b:
                    ea:db:9f:7b:ff:41:54:db:9e:21:2a:b0:cb:fb:78:
                    02:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:21:DF:3E:1A:29:DD:96:AD:3A:F5:51:FC:14:FC:3A:BA:65:A0:10
            X509v3 Authority Key Identifier:
                keyid:C5:75:52:E1:8A:FF:C8:5D:99:46:8F:02:7E:AF:CE:D3:1C:5F:6E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C57552E18AFFC85D99468F027EAFCED31C5F6EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D42B7C6B42636746D3F1CDE1470E8AD20272F5333E4296CDD2499FD9385786F/0/34352e3232362e33322e302f32322d3234203d3e20323635383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:d5:0a:c6:3c:cb:71:c3:b4:9c:6a:b8:be:c8:a8:ab:87:af:
         8e:99:f9:56:7a:12:4f:b8:7e:c2:80:75:9f:aa:41:b9:b1:65:
         55:8b:25:09:39:4a:85:92:ee:26:f1:d0:78:7b:0c:6e:70:6e:
         4b:58:99:7d:89:fb:78:01:4b:41:be:a2:40:a1:1f:4b:96:55:
         96:c0:41:f2:a0:b8:fb:10:d2:26:03:ca:0a:6e:8c:ad:57:f1:
         49:c4:41:fc:d0:38:e6:0b:8a:ef:e0:8c:ef:e7:84:46:73:cd:
         9b:02:3c:b5:c3:94:4f:9e:1a:05:ea:f0:25:5f:50:f5:e9:27:
         fe:a6:df:ea:a4:83:68:f8:b6:fe:1e:7e:ec:c9:0a:ad:d7:09:
         b9:0f:ca:ca:1c:40:bc:c3:a3:96:f2:d7:75:2b:15:31:3c:bf:
         c7:18:8c:fe:b9:16:ee:9a:1f:8c:0c:db:65:a7:54:5d:ef:4e:
         ac:80:94:58:9b:af:72:d4:94:a1:be:6a:eb:84:8b:35:5d:89:
         b3:99:cc:70:36:ae:da:3e:e4:71:4a:c0:e5:1b:85:78:d0:ea:
         a5:ba:26:53:6e:d2:6a:c4:c9:ba:4b:c3:0f:19:e2:42:77:8b:
         51:0f:d6:db:03:1f:0d:ba:f7:8f:20:17:0a:c3:6f:71:f0:c4:
         4b:8c:b3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:06:23 2025 by rpki-client