Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/34352e3232372e3230302e302f32322d3232203d3e20323636363635.roa
File:                     34352e3232372e3230302e302f32322d3232203d3e20323636363635.roa (raw, json)
Hash identifier:          E8oYC0cWAkbiy3UdHFD1XmFbJvUYnbnTirAymqW+xO8=
Subject key identifier:   19:DE:77:70:FF:82:2B:CD:A6:EE:C9:2D:87:B1:2D:59:CC:B3:93:FD
Certificate issuer:       /CN=A42C2536663031C220CC68656426F3680C410069
Certificate serial:       6F9C988368D3F1B562393AF3A6A14C5D76D1B128
Authority key identifier: A4:2C:25:36:66:30:31:C2:20:CC:68:65:64:26:F3:68:0C:41:00:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A42C2536663031C220CC68656426F3680C410069.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/34352e3232372e3230302e302f32322d3232203d3e20323636363635.roa
Signing time:             Tue 04 Feb 2025 18:53:46 +0000
ROA not before:           Tue 04 Feb 2025 18:48:46 +0000
ROA not after:            Tue 03 Feb 2026 18:53:46 +0000
asID:                     266665
IP address blocks:        45.227.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/A42C2536663031C220CC68656426F3680C410069.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/A42C2536663031C220CC68656426F3680C410069.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A42C2536663031C220CC68656426F3680C410069.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9c:98:83:68:d3:f1:b5:62:39:3a:f3:a6:a1:4c:5d:76:d1:b1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A42C2536663031C220CC68656426F3680C410069
        Validity
            Not Before: Feb  4 18:48:46 2025 GMT
            Not After : Feb  3 18:53:46 2026 GMT
        Subject: CN=19DE7770FF822BCDA6EEC92D87B12D59CCB393FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c4:bb:d7:ab:6e:52:51:5c:6e:c9:6e:41:0b:
                    9b:26:4a:69:0a:fb:db:0e:cc:b6:b8:6d:c8:52:4c:
                    ef:a5:54:51:9e:4a:1a:d5:37:b2:3c:49:6c:c0:7b:
                    68:b4:fa:13:c5:8d:7c:9d:ef:9a:24:20:fe:65:84:
                    2f:31:97:35:0f:50:2c:af:4e:f7:66:ee:67:6d:fb:
                    fd:87:fc:92:8d:54:3c:0b:9d:ea:73:a7:4b:83:01:
                    b2:56:29:30:97:ce:f7:fc:6a:a5:56:69:ea:f1:75:
                    06:ca:81:d8:33:9a:4e:46:f5:38:c8:c0:31:10:19:
                    25:da:f2:18:97:78:22:66:5e:8b:48:fe:8e:00:b8:
                    07:65:21:b9:6a:d4:3c:ab:71:83:88:aa:40:9e:25:
                    06:a1:4d:40:73:72:61:34:21:49:c4:56:3b:03:ae:
                    6f:20:8e:32:06:43:de:86:e5:9f:0c:db:a1:d3:3d:
                    68:ec:06:40:92:e7:e9:6c:3d:af:2a:f4:a7:3e:08:
                    c9:fa:ae:b5:0a:e3:93:5b:29:6f:cf:9e:38:85:1e:
                    10:61:48:cb:c3:a2:56:6f:19:a2:2a:db:f4:3a:f7:
                    54:a0:0c:35:c1:4c:23:b4:57:80:4a:1b:28:dc:ab:
                    d2:d0:51:e0:60:dd:95:e2:40:cf:da:90:da:05:80:
                    8c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DE:77:70:FF:82:2B:CD:A6:EE:C9:2D:87:B1:2D:59:CC:B3:93:FD
            X509v3 Authority Key Identifier:
                keyid:A4:2C:25:36:66:30:31:C2:20:CC:68:65:64:26:F3:68:0C:41:00:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/A42C2536663031C220CC68656426F3680C410069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A42C2536663031C220CC68656426F3680C410069.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/34352e3232372e3230302e302f32322d3232203d3e20323636363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:89:94:ee:03:0d:fa:00:eb:27:e8:70:4d:5e:e9:4e:11:23:
         6f:9f:f0:1f:ff:d3:d2:77:bf:0e:ce:87:a1:ab:83:98:32:c4:
         3b:11:18:e4:79:c6:95:aa:ce:db:36:65:27:cc:0a:7e:43:de:
         e6:bb:73:34:86:a9:19:65:94:e0:7a:6f:70:93:49:b2:e5:09:
         ba:61:b9:a6:62:91:f6:e7:3f:de:05:70:e9:23:9e:e9:65:97:
         71:3e:00:6b:42:dd:6b:28:5b:68:77:04:72:6c:3d:35:35:f6:
         67:aa:7f:5a:31:0d:50:ca:7d:0b:cd:25:7a:10:06:4e:85:5f:
         90:03:84:74:7c:ee:ca:88:fa:33:35:eb:5a:c4:b4:d7:fe:f6:
         58:d1:62:c2:1d:a5:1b:b7:9a:d9:f4:76:1a:86:a0:43:0a:fe:
         a8:a0:30:f6:ca:d3:95:27:00:e7:b3:8e:63:0d:72:f4:af:02:
         bc:04:73:99:d4:fe:8b:54:1c:51:c3:2e:6f:d7:20:5f:ac:92:
         e0:11:da:02:32:47:ef:43:ef:59:a3:cd:57:b3:c8:0f:bc:29:
         1f:a0:9f:73:21:cf:7f:70:87:9e:74:32:5f:1c:10:55:a5:de:
         8e:d4:5d:6a:81:32:1e:ae:8f:37:1c:9e:f5:96:50:2b:f5:05:
         16:ce:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:06:49 2025 by rpki-client