Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32312d3232203d3e203238303032.roa
File:                     34352e362e3234382e302f32312d3232203d3e203238303032.roa (raw, json)
Hash identifier:          N/l1DPGYSaMYFVrX+GuUKmKOpy5NAIxoWUeNJNMp1wc=
Subject key identifier:   F6:0C:06:8C:78:61:3C:5E:7A:91:AA:4A:4A:E7:F3:F3:4A:83:8D:E7
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       1D18DA346374A12766014A7AA196337EDDFED0CD
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32312d3232203d3e203238303032.roa
Signing time:             Thu 03 Apr 2025 17:13:46 +0000
ROA not before:           Thu 03 Apr 2025 17:08:46 +0000
ROA not after:            Thu 02 Apr 2026 17:13:46 +0000
asID:                     28002
IP address blocks:        45.6.248.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:18:da:34:63:74:a1:27:66:01:4a:7a:a1:96:33:7e:dd:fe:d0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Apr  3 17:08:46 2025 GMT
            Not After : Apr  2 17:13:46 2026 GMT
        Subject: CN=F60C068C78613C5E7A91AA4A4AE7F3F34A838DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e7:ed:ed:6d:03:5a:22:0c:53:01:01:fb:27:
                    7c:0f:af:31:37:ec:6d:58:26:e6:d9:76:a0:27:14:
                    5e:9b:85:e2:b9:bd:c2:ea:61:a9:ed:9f:fc:75:9a:
                    19:96:93:bf:30:22:4c:cb:99:a0:e7:07:9e:38:d5:
                    2b:f7:31:c9:29:24:9d:01:3c:60:3c:bf:f0:38:78:
                    90:e6:5a:68:46:c6:38:8d:70:3b:67:9a:fb:e1:59:
                    76:d2:90:7d:bd:a7:b6:ca:4d:65:ed:35:5f:68:db:
                    9d:ce:99:b3:99:8e:7e:21:1d:a8:5b:3b:ba:17:89:
                    55:c5:83:3b:f0:df:88:be:ca:4a:e3:d5:6e:be:b4:
                    c0:cf:a0:b3:ab:23:7b:da:67:76:3c:b0:8c:66:7c:
                    1f:56:23:6e:31:36:b4:6d:cb:6a:8f:f4:c7:d5:76:
                    5c:c0:d5:90:80:89:25:40:92:ac:20:98:e0:f8:34:
                    43:c9:d8:23:90:68:06:68:04:fe:5e:b0:1d:b1:0d:
                    bd:85:8d:69:c6:14:0b:3f:91:d0:86:bf:9c:46:00:
                    a0:ba:cd:27:60:9e:51:e3:fd:42:3b:0e:9c:27:f2:
                    ec:be:db:fd:3a:35:82:30:fe:79:a3:89:12:20:bb:
                    52:c5:64:30:25:b2:6e:36:b5:8a:d9:47:4c:97:df:
                    59:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0C:06:8C:78:61:3C:5E:7A:91:AA:4A:4A:E7:F3:F3:4A:83:8D:E7
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32312d3232203d3e203238303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:08:85:d9:7b:68:c8:f2:44:39:9f:57:e1:7f:f7:d4:5f:60:
         ed:b7:a5:06:cd:29:8e:60:d3:9e:41:2e:2a:b6:40:de:90:aa:
         e6:0b:09:58:b4:28:78:fe:ce:ce:19:b8:7c:ca:00:ba:b6:93:
         d0:0e:bc:d8:0c:29:06:6e:85:a2:a5:98:13:f4:d2:31:72:22:
         03:7b:0e:ef:4c:2a:26:82:59:b8:64:85:52:3c:fe:23:b7:8f:
         c4:fb:bf:6e:36:d2:e4:76:a8:2c:7b:7a:7f:16:a4:ca:61:93:
         37:7f:dd:42:e7:0f:03:6f:49:35:5a:a7:20:3b:0a:48:e3:31:
         38:52:94:ae:72:cd:0b:e0:1f:6f:bd:9e:71:bc:82:f9:44:7e:
         01:7c:2d:24:7f:96:43:90:fa:1a:a5:5e:9d:77:59:ac:af:4e:
         7b:af:f2:e1:7c:2a:9f:63:79:5d:fa:ba:8c:72:17:d8:d0:a4:
         ef:de:bb:de:12:8e:fd:f7:b8:96:f6:0c:fb:8f:7e:74:62:43:
         e0:8f:a5:8c:62:de:f6:69:b7:f5:73:33:4c:c3:b6:9e:fb:0f:
         09:b6:e9:a3:dd:57:f3:0c:9c:27:f7:93:bc:c9:ce:ac:a0:95:
         be:25:e4:5e:e5:5b:1a:a1:77:1e:a8:2c:75:fb:7c:06:5f:27:
         76:7e:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:00 2025 by rpki-client