Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/34352e352e3138322e302f32332d3233203d3e203237393531.roa
File:                     34352e352e3138322e302f32332d3233203d3e203237393531.roa (raw, json)
Hash identifier:          JZWHWJFIbRNHNmosUgWbWP3qulHRjOwkW8PRUT7F1Oc=
Subject key identifier:   EC:D9:51:4F:F4:33:02:62:31:06:1F:5A:E3:75:3D:85:FD:F9:56:1B
Certificate issuer:       /CN=D418292B880E84CA0C2BFDA04321A946B3478A05
Certificate serial:       28D80DB0CFCBD342241610154703BE0514437011
Authority key identifier: D4:18:29:2B:88:0E:84:CA:0C:2B:FD:A0:43:21:A9:46:B3:47:8A:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D418292B880E84CA0C2BFDA04321A946B3478A05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/34352e352e3138322e302f32332d3233203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 20:01:09 +0000
ROA not before:           Tue 04 Feb 2025 19:56:09 +0000
ROA not after:            Tue 03 Feb 2026 20:01:09 +0000
asID:                     27951
IP address blocks:        45.5.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/D418292B880E84CA0C2BFDA04321A946B3478A05.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/D418292B880E84CA0C2BFDA04321A946B3478A05.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D418292B880E84CA0C2BFDA04321A946B3478A05.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 12:34:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d8:0d:b0:cf:cb:d3:42:24:16:10:15:47:03:be:05:14:43:70:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D418292B880E84CA0C2BFDA04321A946B3478A05
        Validity
            Not Before: Feb  4 19:56:09 2025 GMT
            Not After : Feb  3 20:01:09 2026 GMT
        Subject: CN=ECD9514FF433026231061F5AE3753D85FDF9561B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:37:57:79:07:8a:a4:21:1e:e1:2d:29:46:82:
                    e3:ce:e1:4e:b6:75:53:9a:cd:97:8d:75:59:f3:1d:
                    44:1b:bb:b6:7a:14:83:dd:76:cb:5c:79:36:d5:ed:
                    98:47:d6:6a:0b:88:77:db:dc:62:78:5b:f4:ec:9d:
                    dd:e8:46:0f:cf:9f:dd:5d:7b:b4:f7:2c:d0:e6:52:
                    d2:51:ce:7c:5d:70:7a:e9:75:39:3a:32:7c:dd:d4:
                    12:e5:fe:37:1f:f1:27:6d:fc:3e:d6:cd:a2:15:cf:
                    84:be:62:b1:69:ce:af:07:12:29:da:c0:ba:ca:3a:
                    aa:da:e5:66:a7:d8:68:2d:77:24:a9:14:25:2d:45:
                    2b:d7:5b:3b:fa:f0:d4:17:08:86:51:4a:4c:58:bd:
                    98:0f:84:a9:95:dd:fe:0f:2a:d1:97:af:6b:2d:9b:
                    8b:b7:21:d4:84:9b:a2:a9:2c:27:9d:f2:47:87:08:
                    7f:96:5f:53:e8:24:38:8f:ec:df:4e:a0:3d:5a:9b:
                    c6:a7:1c:6f:26:6e:28:5d:82:d1:e0:d9:4d:82:8f:
                    4e:c3:81:ce:87:a8:f7:31:5f:6c:4a:b8:e7:4e:95:
                    4c:7a:47:b9:5c:4f:aa:8d:ba:5c:c6:83:bf:9f:4f:
                    70:65:a2:8b:77:cd:9e:5f:ae:f8:8b:76:8a:b6:8b:
                    d3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D9:51:4F:F4:33:02:62:31:06:1F:5A:E3:75:3D:85:FD:F9:56:1B
            X509v3 Authority Key Identifier:
                keyid:D4:18:29:2B:88:0E:84:CA:0C:2B:FD:A0:43:21:A9:46:B3:47:8A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/D418292B880E84CA0C2BFDA04321A946B3478A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D418292B880E84CA0C2BFDA04321A946B3478A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/34352e352e3138322e302f32332d3233203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:bc:b2:cc:08:75:9e:82:7f:e1:2d:63:a1:6b:30:ac:53:00:
         60:da:d0:fa:87:bf:68:87:9a:e4:58:84:17:a5:91:2b:37:e3:
         72:95:fb:2d:5e:ea:46:e8:b5:88:36:e7:99:c8:3a:fc:53:6c:
         7b:9a:f6:94:da:8f:0e:dc:2b:c8:46:cf:af:22:14:c7:3a:7f:
         01:8e:34:7f:b4:28:0b:db:b3:4c:3c:13:46:7b:05:a3:f0:fc:
         76:8c:e1:d9:1d:06:bc:5d:79:1a:c2:16:ff:34:7c:7e:c1:2d:
         6c:31:0c:33:2a:50:39:71:c7:5c:ec:8c:96:9d:27:fe:76:a4:
         8e:d0:55:84:2a:6e:60:10:41:19:29:92:6c:c5:2a:e1:c5:3e:
         1e:d8:67:02:0a:d0:92:c8:87:29:d8:9b:34:f1:74:70:cc:8c:
         97:f3:bf:81:dc:40:c3:d4:bd:a3:09:9a:b8:6b:e8:e7:c3:f0:
         d3:0c:22:ca:fd:1e:3f:bb:e2:18:9c:92:01:b6:40:b7:d5:26:
         07:43:d4:fb:01:b5:28:d6:39:4c:93:ce:20:68:0b:f6:17:54:
         62:df:f6:6a:82:65:47:cd:07:44:22:05:79:c1:23:96:7e:bd:
         7a:4e:b6:21:e3:63:b0:c5:7a:4a:97:88:8c:38:f1:29:34:d7:
         9a:5c:65:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:08:43 2025 by rpki-client