Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/34352e3136352e3131322e302f32322d3234203d3e20323637373334.roa
File:                     34352e3136352e3131322e302f32322d3234203d3e20323637373334.roa (raw, json)
Hash identifier:          4Njdrt69SyAt8oYLAnlNwOAo1VESwmoR/YadqlNnuHM=
Subject key identifier:   A0:42:9F:13:5E:A7:43:D7:BF:EE:66:E2:8B:E5:66:07:F8:C8:B0:70
Certificate issuer:       /CN=78DB9B853B894970FDA0B31FC3D80A965749E569
Certificate serial:       1D7D638BAF3093C2C9651BB150AAF4B49B4A4A25
Authority key identifier: 78:DB:9B:85:3B:89:49:70:FD:A0:B3:1F:C3:D8:0A:96:57:49:E5:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78DB9B853B894970FDA0B31FC3D80A965749E569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/34352e3136352e3131322e302f32322d3234203d3e20323637373334.roa
Signing time:             Tue 04 Feb 2025 18:03:51 +0000
ROA not before:           Tue 04 Feb 2025 17:58:51 +0000
ROA not after:            Tue 03 Feb 2026 18:03:51 +0000
asID:                     267734
IP address blocks:        45.165.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/78DB9B853B894970FDA0B31FC3D80A965749E569.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/78DB9B853B894970FDA0B31FC3D80A965749E569.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78DB9B853B894970FDA0B31FC3D80A965749E569.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 13:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7d:63:8b:af:30:93:c2:c9:65:1b:b1:50:aa:f4:b4:9b:4a:4a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DB9B853B894970FDA0B31FC3D80A965749E569
        Validity
            Not Before: Feb  4 17:58:51 2025 GMT
            Not After : Feb  3 18:03:51 2026 GMT
        Subject: CN=A0429F135EA743D7BFEE66E28BE56607F8C8B070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1b:7c:e5:f1:e1:3e:80:54:62:5f:79:ce:bd:
                    a2:15:32:8a:66:dd:5e:56:8d:73:ee:c0:92:f9:95:
                    1f:34:b0:86:87:14:1a:b9:7e:dd:74:e2:d7:68:1a:
                    cc:bb:a5:7d:28:5d:8c:de:4a:ac:72:03:c0:ce:33:
                    81:9d:1c:b9:51:11:00:95:aa:95:57:33:a7:c0:d0:
                    5f:57:bf:fc:53:d8:ce:2e:1a:d1:57:19:6e:6b:78:
                    82:56:57:24:c6:11:c0:86:ad:b5:7f:59:ea:0e:81:
                    97:ae:c0:f1:34:a6:ff:98:7f:7e:08:49:a2:9e:17:
                    f0:11:a8:3e:db:66:83:aa:06:10:96:70:e7:b4:8f:
                    54:7f:4e:f4:e0:15:48:45:c6:3a:11:3b:de:e0:1b:
                    80:af:36:b2:24:48:fb:da:bd:0c:17:7b:a2:37:4d:
                    7d:58:fe:8a:a6:4e:69:31:61:dd:6c:a0:67:46:5b:
                    7a:0c:de:70:85:33:7d:36:f6:7e:c5:25:d6:11:a3:
                    9b:d2:bf:df:4d:2e:5a:43:77:16:9a:03:06:d6:ba:
                    b7:8b:d5:dd:7f:ca:76:0d:2b:ee:4f:e6:8d:ad:07:
                    a5:27:82:3a:ea:9e:9d:1d:70:15:5e:4d:4f:23:b1:
                    0d:e7:2f:68:df:ac:9f:2c:d0:07:9c:4e:1d:8e:07:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:42:9F:13:5E:A7:43:D7:BF:EE:66:E2:8B:E5:66:07:F8:C8:B0:70
            X509v3 Authority Key Identifier:
                keyid:78:DB:9B:85:3B:89:49:70:FD:A0:B3:1F:C3:D8:0A:96:57:49:E5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/78DB9B853B894970FDA0B31FC3D80A965749E569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78DB9B853B894970FDA0B31FC3D80A965749E569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/34352e3136352e3131322e302f32322d3234203d3e20323637373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:ba:1b:65:56:63:46:28:0e:0a:2b:c2:38:10:0c:af:41:50:
         9a:7b:e6:90:65:fd:54:24:53:62:78:11:94:41:85:42:87:62:
         0b:5c:d6:28:eb:8e:27:82:1d:1c:13:21:a7:3f:eb:4c:34:bf:
         b8:a4:df:43:8f:e1:1d:fc:dc:8e:fe:63:ac:3b:61:bd:de:fe:
         52:02:ae:5f:f8:8b:82:93:50:83:d4:72:da:dd:be:b4:69:44:
         f1:3a:03:8a:b5:29:70:1d:91:66:8a:a7:2c:89:81:15:1a:03:
         6c:a6:07:52:64:c9:28:0b:56:de:81:7a:c9:2b:a9:c4:e9:70:
         8e:cb:66:98:59:57:79:79:f1:2e:49:c1:ec:f2:47:d1:60:ab:
         8b:ee:ea:bf:6b:82:42:87:3a:0d:27:62:31:cd:29:76:42:2a:
         d6:60:e7:49:80:9a:d3:31:ac:c4:ae:ae:55:08:f4:34:4e:1f:
         98:84:4e:f6:4a:0a:41:d5:ec:63:4e:b3:60:2c:27:0b:6c:a8:
         6b:bd:e9:c6:ca:aa:93:69:7c:56:20:bd:a3:d4:6f:0f:3a:87:
         77:b8:08:fb:9b:60:b1:07:96:86:a6:3a:46:65:91:7a:3e:59:
         8a:84:32:56:8f:27:05:33:2b:8f:d8:11:a1:81:3a:9b:cb:8e:
         5a:9d:80:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:33:34 2025 by rpki-client