Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/34352e342e332e302f32342d3234203d3e20323635363632.roa
File:                     34352e342e332e302f32342d3234203d3e20323635363632.roa (raw, json)
Hash identifier:          4i0m1i1jQDVB/JjRYDy/fWVmEtxEJ1dDjHg5Z/p1jrg=
Subject key identifier:   93:40:52:90:ED:4C:13:C5:86:33:FC:02:C7:4C:29:AB:EF:1A:0A:EA
Certificate issuer:       /CN=80D3550CF73B167B6F22E20047A686FB2D761E88
Certificate serial:       3F41464EF04A663E8B433E8F52FD48775CE25CE5
Authority key identifier: 80:D3:55:0C:F7:3B:16:7B:6F:22:E2:00:47:A6:86:FB:2D:76:1E:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80D3550CF73B167B6F22E20047A686FB2D761E88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/34352e342e332e302f32342d3234203d3e20323635363632.roa
Signing time:             Tue 04 Feb 2025 19:57:48 +0000
ROA not before:           Tue 04 Feb 2025 19:52:48 +0000
ROA not after:            Tue 03 Feb 2026 19:57:48 +0000
asID:                     265662
IP address blocks:        45.4.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/80D3550CF73B167B6F22E20047A686FB2D761E88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/80D3550CF73B167B6F22E20047A686FB2D761E88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80D3550CF73B167B6F22E20047A686FB2D761E88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:41:46:4e:f0:4a:66:3e:8b:43:3e:8f:52:fd:48:77:5c:e2:5c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D3550CF73B167B6F22E20047A686FB2D761E88
        Validity
            Not Before: Feb  4 19:52:48 2025 GMT
            Not After : Feb  3 19:57:48 2026 GMT
        Subject: CN=93405290ED4C13C58633FC02C74C29ABEF1A0AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:43:d2:ae:40:c5:d6:18:79:05:45:dd:52:49:
                    7e:b7:8f:25:59:50:7b:cc:3b:4b:37:8f:de:8d:47:
                    9e:99:6e:52:d1:22:07:4a:3f:37:e4:7e:c6:96:69:
                    8d:64:08:fd:d7:d3:2f:bf:e1:a3:c5:67:f4:7e:72:
                    21:b8:6c:73:e4:b2:c2:77:50:3e:c8:fd:f2:e4:a9:
                    9b:d6:48:90:18:45:ab:ef:6d:2b:78:67:b7:fb:bd:
                    61:3b:cd:59:57:a9:41:ff:82:85:99:7f:65:7c:16:
                    bf:06:90:f4:b6:11:6f:04:08:da:79:6c:88:4a:1f:
                    43:2f:45:5f:fe:84:5c:df:3e:a9:bd:c0:52:41:ce:
                    8d:31:61:45:56:81:c5:cd:22:d0:23:22:15:58:a2:
                    e6:60:ec:50:c9:c2:92:6b:05:5a:c4:af:21:23:ad:
                    0f:49:a8:8f:f7:ed:cf:8e:96:87:43:dd:37:f0:71:
                    9b:9b:02:ef:ad:d0:16:fd:6c:34:2c:69:76:26:3a:
                    3f:56:b7:35:b8:fa:05:2d:96:b5:10:eb:82:77:72:
                    30:1e:61:b8:ac:b8:72:ec:bb:8f:b3:24:13:29:00:
                    75:02:58:74:b9:cc:30:04:a7:70:93:89:f6:bc:47:
                    0b:7e:c1:6b:a1:ed:b5:5f:50:8f:32:e6:de:5a:0e:
                    4f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:40:52:90:ED:4C:13:C5:86:33:FC:02:C7:4C:29:AB:EF:1A:0A:EA
            X509v3 Authority Key Identifier:
                keyid:80:D3:55:0C:F7:3B:16:7B:6F:22:E2:00:47:A6:86:FB:2D:76:1E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/80D3550CF73B167B6F22E20047A686FB2D761E88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80D3550CF73B167B6F22E20047A686FB2D761E88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/34352e342e332e302f32342d3234203d3e20323635363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:f2:fc:82:db:70:3b:82:54:f6:6b:29:18:fc:ab:d8:6d:a1:
         f5:7e:ef:35:42:98:73:c7:19:b1:cf:2a:54:8f:f0:eb:e7:1d:
         d0:48:19:97:a5:6a:43:cf:4f:a2:cc:b9:68:b2:85:a9:2e:ed:
         76:c8:2e:46:d7:72:4e:4f:96:85:ae:50:5a:af:5a:60:43:1e:
         e5:7a:eb:4c:e4:27:d9:9d:02:8a:3f:e6:e8:be:5c:5b:0b:34:
         e1:c8:59:dd:c1:3f:21:1c:78:1b:57:f1:54:5b:c5:f1:e4:66:
         07:b4:26:bd:f7:f2:94:1f:ab:d1:a0:06:8e:74:90:20:28:09:
         29:2d:4a:e6:16:66:2c:ad:08:86:ff:0a:bd:05:c0:19:a0:5f:
         2f:89:fe:ab:72:d7:be:16:1c:a5:f8:5f:2a:bd:b5:34:68:76:
         27:e3:b7:9e:cb:1c:95:8c:e2:ce:7c:1f:c3:37:11:d6:74:dd:
         c3:64:aa:a2:ae:1d:c9:bb:d0:9e:70:b0:a5:f0:03:5f:3f:04:
         da:84:56:bf:99:04:e3:13:55:8b:20:62:62:43:32:e0:c2:c2:
         86:84:07:1e:74:04:ce:35:48:f1:11:5a:88:fc:ab:be:4e:50:
         41:7f:fe:c5:e0:42:f4:ad:73:4a:69:e9:3f:58:55:a9:85:ad:
         67:c2:c3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:18 2025 by rpki-client