Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/34352e3137352e3130302e302f32322d3232203d3e20323637383333.roa
File:                     34352e3137352e3130302e302f32322d3232203d3e20323637383333.roa (raw, json)
Hash identifier:          tSdjt+b8mng2jugW/sb+9jBmS/UjPiDXRImx5H/fMaE=
Subject key identifier:   6D:0F:0B:8B:D5:C6:DF:AF:E6:00:B8:11:35:76:21:D6:93:A0:1D:D0
Certificate issuer:       /CN=550C6BE760B5DF61359F2CD954A0E95372835F2C
Certificate serial:       72E251991A46F70C2BAE7AA2DA45E0C3F84A9422
Authority key identifier: 55:0C:6B:E7:60:B5:DF:61:35:9F:2C:D9:54:A0:E9:53:72:83:5F:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/34352e3137352e3130302e302f32322d3232203d3e20323637383333.roa
Signing time:             Tue 04 Feb 2025 18:15:44 +0000
ROA not before:           Tue 04 Feb 2025 18:10:44 +0000
ROA not after:            Tue 03 Feb 2026 18:15:44 +0000
asID:                     267833
IP address blocks:        45.175.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e2:51:99:1a:46:f7:0c:2b:ae:7a:a2:da:45:e0:c3:f8:4a:94:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550C6BE760B5DF61359F2CD954A0E95372835F2C
        Validity
            Not Before: Feb  4 18:10:44 2025 GMT
            Not After : Feb  3 18:15:44 2026 GMT
        Subject: CN=6D0F0B8BD5C6DFAFE600B811357621D693A01DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0d:80:5a:7c:3d:64:0f:4d:f8:89:1e:66:1f:
                    c5:85:b5:30:29:b9:1c:b0:dc:1b:bd:c7:1b:0e:39:
                    bb:08:0e:9b:7f:d4:64:67:a3:af:f7:8c:3d:ff:eb:
                    41:0d:40:ba:7a:3e:ce:34:16:93:3a:33:8f:9e:90:
                    42:5a:42:af:9d:89:35:61:db:4d:de:df:2a:93:97:
                    01:0b:43:4c:29:58:80:88:7e:c0:47:e5:f9:4a:66:
                    4d:22:6c:87:40:35:a2:b1:1f:57:53:bb:e5:3b:7d:
                    b1:a2:7d:e7:ae:f3:29:17:0b:eb:84:71:10:d0:08:
                    84:bd:0a:2b:32:30:d2:3b:20:87:f1:f1:61:8f:12:
                    20:d5:88:55:90:eb:4c:4e:3b:fc:5c:63:3e:50:2e:
                    b2:90:89:0d:e1:f9:0d:41:0c:94:a3:c7:68:d8:7d:
                    b0:3f:2a:0e:fd:76:53:f5:8b:7d:e5:15:62:9e:fd:
                    13:19:11:d0:27:51:70:fc:33:8c:6a:8a:8f:69:e0:
                    cc:59:ac:fd:ce:d6:df:53:cb:d2:8c:2b:8d:07:3d:
                    e6:8b:fb:5b:a5:f5:03:b0:ac:f5:43:da:97:ca:07:
                    bd:c2:24:ac:6a:0c:6d:12:e3:af:78:61:d6:98:b5:
                    88:85:de:1a:c7:39:ec:97:bc:da:78:9c:43:07:f3:
                    3f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0F:0B:8B:D5:C6:DF:AF:E6:00:B8:11:35:76:21:D6:93:A0:1D:D0
            X509v3 Authority Key Identifier:
                keyid:55:0C:6B:E7:60:B5:DF:61:35:9F:2C:D9:54:A0:E9:53:72:83:5F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/34352e3137352e3130302e302f32322d3232203d3e20323637383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:ba:20:74:e9:8f:04:5f:42:58:95:81:a5:e3:ed:68:ad:e5:
         09:cc:f7:93:32:d9:ec:02:b1:09:df:0b:a6:63:88:bf:35:21:
         89:3d:40:42:bc:2a:06:d4:e7:93:05:d5:98:2c:b6:f7:2a:42:
         f8:76:41:db:2e:80:54:e9:c0:ac:70:5a:b6:91:be:ec:f6:13:
         3e:73:17:89:44:a3:6a:07:e4:b5:f5:eb:75:0a:e6:85:29:ec:
         24:2a:cb:db:b5:63:0a:a8:3d:3d:4b:49:03:32:7b:7b:e9:af:
         60:ca:00:7d:90:ee:f8:3d:23:e4:b0:7e:0e:06:75:ee:96:37:
         dd:18:ae:45:a1:82:24:1e:d5:da:d1:6e:be:a6:a0:71:2d:66:
         4f:8b:fd:f4:da:ae:06:51:53:29:a6:c7:25:24:ea:d3:b1:4f:
         3d:12:98:1c:d9:dc:81:02:a2:c7:90:1a:81:09:35:2e:87:47:
         e2:8c:3c:0b:ae:f4:08:9a:d8:f4:0c:97:d6:2b:ac:33:17:55:
         50:63:0d:0c:f9:39:e3:ed:53:c8:85:67:be:fe:4a:de:b1:fc:
         90:d9:84:2d:7a:3f:41:49:05:9a:e1:09:71:63:8c:ad:02:00:
         23:28:95:e8:7b:b1:d1:14:5b:14:90:26:d4:ab:c3:72:f6:d4:
         7f:a0:2e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:08:13 2025 by rpki-client