Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/34352e3138392e35362e302f32322d3238203d3e20323639383533.roa
File:                     34352e3138392e35362e302f32322d3238203d3e20323639383533.roa (raw, json)
Hash identifier:          bojORfm3bcrXRCRJPxydiQU3FJ3PlLJH47WB0d1dJ0M=
Subject key identifier:   DD:50:86:2E:32:31:B0:A7:A9:C9:BF:7F:61:26:E0:B2:27:D7:97:F1
Certificate issuer:       /CN=A705052BB6C34BD8AC98D939073DF4308F336B54
Certificate serial:       554FE3E5E45A0F856BE15B621E63713AE2C47421
Authority key identifier: A7:05:05:2B:B6:C3:4B:D8:AC:98:D9:39:07:3D:F4:30:8F:33:6B:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A705052BB6C34BD8AC98D939073DF4308F336B54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/34352e3138392e35362e302f32322d3238203d3e20323639383533.roa
Signing time:             Tue 04 Feb 2025 18:10:12 +0000
ROA not before:           Tue 04 Feb 2025 18:05:12 +0000
ROA not after:            Tue 03 Feb 2026 18:10:12 +0000
asID:                     269853
IP address blocks:        45.189.56.0/22 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/A705052BB6C34BD8AC98D939073DF4308F336B54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/A705052BB6C34BD8AC98D939073DF4308F336B54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A705052BB6C34BD8AC98D939073DF4308F336B54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4f:e3:e5:e4:5a:0f:85:6b:e1:5b:62:1e:63:71:3a:e2:c4:74:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A705052BB6C34BD8AC98D939073DF4308F336B54
        Validity
            Not Before: Feb  4 18:05:12 2025 GMT
            Not After : Feb  3 18:10:12 2026 GMT
        Subject: CN=DD50862E3231B0A7A9C9BF7F6126E0B227D797F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:76:8c:dd:97:8d:86:fb:f5:bd:7c:53:a2:10:
                    1e:85:e9:61:c3:14:54:b4:7a:41:db:15:99:3a:95:
                    46:39:f5:d7:09:3e:65:06:c6:7d:e5:b4:3e:5e:df:
                    34:af:64:fd:c8:65:ce:ff:8d:b4:8a:28:d9:14:64:
                    ee:7a:bc:5d:84:b1:c0:4c:28:dd:10:f4:c5:f0:fa:
                    8d:39:2c:ff:e9:1a:a3:82:82:ae:01:eb:6a:01:b1:
                    fc:00:c3:ce:33:fe:4f:f5:af:f1:00:13:38:63:53:
                    d3:44:fd:64:3d:bd:9f:10:b1:3b:c4:6d:88:e5:33:
                    e8:a6:e4:0d:d0:48:90:68:5e:3f:2d:ba:76:78:89:
                    47:fa:39:72:19:6b:f2:e7:b4:d7:12:10:45:c7:7d:
                    b4:65:ad:ae:2e:11:d5:d3:54:1e:1d:62:e6:0f:0b:
                    2a:6a:2d:f6:c4:42:97:53:c9:b3:e2:a4:fd:1d:42:
                    bb:79:82:87:56:b5:1f:04:81:0a:c6:25:16:5b:79:
                    d9:c4:12:33:de:2c:e0:1a:bd:2a:ed:7e:ac:22:e3:
                    03:42:5f:9a:88:35:4b:a1:b8:b7:0e:ec:75:55:54:
                    c8:bd:57:64:2a:01:a0:c6:22:5e:35:cb:e6:ae:91:
                    57:a0:7f:6e:a5:9e:3f:aa:79:fe:6f:70:63:3b:53:
                    18:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:50:86:2E:32:31:B0:A7:A9:C9:BF:7F:61:26:E0:B2:27:D7:97:F1
            X509v3 Authority Key Identifier:
                keyid:A7:05:05:2B:B6:C3:4B:D8:AC:98:D9:39:07:3D:F4:30:8F:33:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/A705052BB6C34BD8AC98D939073DF4308F336B54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A705052BB6C34BD8AC98D939073DF4308F336B54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/34352e3138392e35362e302f32322d3238203d3e20323639383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:a7:be:9f:0e:a1:5e:48:ec:8e:5d:4c:29:a1:f2:36:13:0d:
         c0:a1:84:35:da:19:d1:13:07:0c:e2:ae:db:9d:77:6d:a2:85:
         8f:dd:8b:8a:6d:6b:dd:52:06:58:75:c1:58:2a:f7:bb:3a:b3:
         9a:ad:ff:42:c2:89:34:e9:2f:2d:66:ff:13:e9:8b:00:ec:7b:
         99:68:a8:31:d3:fb:a7:59:d4:22:c8:74:48:a8:23:06:fe:7e:
         4b:86:5f:c4:96:a3:eb:d3:bc:a8:60:d6:03:b4:d3:b6:88:be:
         ad:41:29:49:68:c1:00:d8:36:ca:31:16:a0:12:69:bb:0e:10:
         dd:ec:fe:3b:fe:df:c4:4c:f5:5e:7a:6a:28:35:cb:46:c7:14:
         3c:bc:7f:4a:f3:31:3c:aa:22:c6:db:33:ec:c8:b2:df:78:42:
         2f:27:b3:cd:1f:40:66:61:54:f1:79:2c:d7:36:da:1b:0a:82:
         c8:c0:64:85:ba:6f:af:6a:67:55:f3:58:8b:2e:52:be:3d:a9:
         a6:86:f2:ac:89:72:40:9b:c9:45:2a:5b:68:22:e7:6f:50:8d:
         1a:ed:a7:48:24:af:8f:76:72:df:12:17:c5:e9:1c:88:53:36:
         a7:98:2d:9d:68:58:8f:f2:30:79:35:87:2b:4c:50:88:d1:85:
         71:6a:c7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:51:43 2025 by rpki-client