Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/34352e3137332e34342e302f32342d3234203d3e2033383136.roa
File:                     34352e3137332e34342e302f32342d3234203d3e2033383136.roa (raw, json)
Hash identifier:          kiznmwnvTGN9ABWHyd6ajyHYplW4kOP+P5Sx2AiXn9A=
Subject key identifier:   32:E9:7F:9B:E5:34:D3:49:88:D7:CB:D7:DE:43:A8:10:AE:67:37:69
Certificate issuer:       /CN=7C03E0A5C9816B574B54A163EC5F6E686D499DF2
Certificate serial:       4C2B269AAEE25F120145EC5B46F46805988BBCAF
Authority key identifier: 7C:03:E0:A5:C9:81:6B:57:4B:54:A1:63:EC:5F:6E:68:6D:49:9D:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/34352e3137332e34342e302f32342d3234203d3e2033383136.roa
Signing time:             Tue 04 Feb 2025 18:54:08 +0000
ROA not before:           Tue 04 Feb 2025 18:49:08 +0000
ROA not after:            Tue 03 Feb 2026 18:54:08 +0000
asID:                     3816
IP address blocks:        45.173.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2b:26:9a:ae:e2:5f:12:01:45:ec:5b:46:f4:68:05:98:8b:bc:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C03E0A5C9816B574B54A163EC5F6E686D499DF2
        Validity
            Not Before: Feb  4 18:49:08 2025 GMT
            Not After : Feb  3 18:54:08 2026 GMT
        Subject: CN=32E97F9BE534D34988D7CBD7DE43A810AE673769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fc:78:87:d3:e5:15:47:8a:15:51:21:3f:66:
                    bc:bf:60:14:e8:0f:9e:6f:c2:de:ab:12:69:24:16:
                    19:2e:27:6d:c0:bc:9e:34:ad:7a:98:0d:4b:23:17:
                    d3:fd:0b:60:fe:ee:34:ad:67:93:d8:b0:d6:0d:07:
                    7a:c6:13:f4:7e:6b:dc:9e:25:da:73:e0:15:72:63:
                    5d:2c:21:06:21:af:ab:5e:48:07:72:89:c2:96:e3:
                    9e:44:16:9f:f4:33:d4:1c:c6:3c:82:90:1c:40:66:
                    b2:1c:a3:22:dd:23:a5:2a:6c:41:0f:e4:b9:d1:1b:
                    a1:90:0a:1f:f1:69:07:f9:e6:66:7a:51:de:be:6c:
                    5f:0d:f5:40:61:6c:d0:b4:6f:b5:5e:58:b9:94:15:
                    6a:bb:2d:ca:88:65:75:f7:18:26:a6:f7:ca:d8:61:
                    44:cd:72:2a:a1:42:91:9e:d4:62:65:e7:4b:96:14:
                    7b:46:14:cc:6d:d6:8b:b8:86:78:cf:a6:5d:d8:98:
                    fd:46:12:0f:c0:d7:ce:df:37:d5:8f:bf:14:cf:b1:
                    7f:d3:e1:56:05:43:c9:d2:5f:2a:fc:12:c3:8c:1f:
                    ff:9e:01:86:01:f4:87:cf:22:5f:93:f8:2d:e8:83:
                    8c:95:ac:94:74:01:76:e7:66:9c:01:67:08:23:30:
                    12:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E9:7F:9B:E5:34:D3:49:88:D7:CB:D7:DE:43:A8:10:AE:67:37:69
            X509v3 Authority Key Identifier:
                keyid:7C:03:E0:A5:C9:81:6B:57:4B:54:A1:63:EC:5F:6E:68:6D:49:9D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/34352e3137332e34342e302f32342d3234203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:2a:4a:e8:9d:b7:e6:96:a6:c7:4d:76:0d:91:8b:79:23:b0:
         ae:3c:44:b4:6b:cf:68:0a:ed:7b:e8:24:52:27:9f:cd:b7:88:
         e3:93:c7:ff:20:c1:5c:2e:16:9c:4a:3a:bb:b5:36:c0:2b:8c:
         fa:7a:61:30:84:6b:78:bf:48:4c:84:53:43:0c:d0:13:b0:0c:
         d8:7e:1e:a0:78:d2:9f:2c:4b:63:f7:f9:41:f9:85:aa:dd:8d:
         0b:83:a9:9b:a7:57:30:3f:5e:eb:d1:bc:a0:ee:84:d5:09:c8:
         d9:99:85:55:7a:b7:92:66:de:a6:39:2c:fe:25:12:a5:33:d9:
         60:5a:55:0d:41:07:4b:99:68:07:63:ba:b1:a4:12:07:6b:b3:
         e7:64:52:e3:c6:7d:05:6a:4d:ef:7a:c8:2d:00:95:82:43:b8:
         9c:f1:8e:03:25:ba:08:07:22:20:89:f2:62:b3:79:1f:f6:0c:
         9e:a2:03:d2:0d:df:a4:bd:b6:fb:d6:a0:97:00:77:34:9a:1b:
         35:54:c8:10:b1:95:44:01:68:f6:5a:40:c9:ad:80:ca:36:0c:
         22:20:0b:51:be:5c:eb:fb:7a:72:8b:a5:4a:16:de:cc:5c:43:
         9e:eb:70:ac:64:e8:2a:f1:33:69:33:b0:af:1d:10:64:a0:b3:
         8f:4c:63:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:08 2025 by rpki-client