Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/34352e3138362e32392e302f32342d3234203d3e20323633383039.roa
File:                     34352e3138362e32392e302f32342d3234203d3e20323633383039.roa (raw, json)
Hash identifier:          DS10W3bgY9qAFM3af3uXfQoPe3OSzrmzNw/srI15nio=
Subject key identifier:   97:0E:64:00:35:78:FE:71:63:D5:B6:B7:E6:E8:D1:62:7E:8D:66:73
Certificate issuer:       /CN=57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E
Certificate serial:       6C741F0EC905D044FDB62D9BE93A2ABF294600D2
Authority key identifier: 57:AB:3F:8A:7A:E5:FB:EC:0C:D9:61:F5:B4:6D:18:66:BC:7A:76:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/34352e3138362e32392e302f32342d3234203d3e20323633383039.roa
Signing time:             Tue 04 Feb 2025 18:11:44 +0000
ROA not before:           Tue 04 Feb 2025 18:06:44 +0000
ROA not after:            Tue 03 Feb 2026 18:11:44 +0000
asID:                     263809
IP address blocks:        45.186.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 10:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:74:1f:0e:c9:05:d0:44:fd:b6:2d:9b:e9:3a:2a:bf:29:46:00:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E
        Validity
            Not Before: Feb  4 18:06:44 2025 GMT
            Not After : Feb  3 18:11:44 2026 GMT
        Subject: CN=970E64003578FE7163D5B6B7E6E8D1627E8D6673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:30:e7:69:e5:99:5a:bc:05:88:9f:50:4e:
                    b5:de:d3:94:73:f7:d0:43:e4:4f:cb:42:51:b2:7f:
                    18:4a:c8:23:96:6e:75:b3:8e:d6:ad:cf:69:fd:2d:
                    59:52:61:25:ea:62:0e:f8:b7:cc:55:47:1b:30:c5:
                    36:0a:5c:85:2d:4d:54:07:1b:c0:a0:df:8b:05:3f:
                    e5:af:c1:1d:06:87:ba:c9:b1:47:f1:73:1e:a8:33:
                    a8:bb:b2:7a:3d:57:b7:2c:56:83:cc:a6:6f:3c:a0:
                    80:42:93:28:e7:16:61:60:08:b9:a8:02:a1:f5:b9:
                    62:ee:b0:51:f1:a0:5c:06:68:01:46:fe:18:cd:05:
                    0e:98:17:08:56:37:d5:31:a1:f9:94:4a:cb:40:98:
                    2a:be:a8:24:56:eb:09:4f:13:db:48:d0:8e:50:fa:
                    0c:8f:86:b4:da:0b:7c:23:4c:3b:5d:2a:f9:16:e7:
                    e5:a4:21:42:79:04:c9:ed:fb:07:3a:8b:f4:f4:47:
                    09:10:8b:14:af:74:8b:8d:14:93:eb:f0:6a:4f:b9:
                    e6:d9:f5:4b:81:f1:e0:de:d1:e8:4f:97:9f:d0:be:
                    f8:07:67:0b:e9:fd:dd:2b:b3:b9:0f:60:5a:a7:0c:
                    1d:41:c4:61:20:85:f7:b2:de:ea:c0:9c:27:01:4a:
                    d9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0E:64:00:35:78:FE:71:63:D5:B6:B7:E6:E8:D1:62:7E:8D:66:73
            X509v3 Authority Key Identifier:
                keyid:57:AB:3F:8A:7A:E5:FB:EC:0C:D9:61:F5:B4:6D:18:66:BC:7A:76:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/34352e3138362e32392e302f32342d3234203d3e20323633383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:d2:4f:56:a8:8b:b5:1f:24:88:37:c3:58:e5:bd:84:4e:67:
         2a:f7:28:9f:bc:f2:dd:bc:0b:45:78:9f:c9:4f:47:eb:45:30:
         84:03:c4:1c:4a:e2:0d:36:6b:fd:5e:6f:20:f7:87:b2:8f:f7:
         96:33:61:7c:9f:b5:f0:d0:23:60:89:75:9c:5f:06:b8:85:14:
         7a:9f:5d:d2:84:2c:23:6e:a1:57:98:77:ba:28:14:23:8a:24:
         cf:1b:f8:0a:64:a4:08:1e:4e:e0:48:61:b8:ad:9a:65:ae:fb:
         1b:de:ed:aa:cd:c2:88:3a:23:4d:71:7c:84:8f:b1:5f:02:f3:
         b8:5d:58:72:db:04:f3:35:5e:c1:6d:82:7f:4e:2e:a6:56:69:
         21:4b:0f:bf:0f:62:88:c8:7f:eb:7e:d5:4b:45:72:3c:ba:1e:
         94:97:78:80:e5:2e:ad:2e:47:f6:97:f8:c9:58:7a:1d:ac:6c:
         d1:59:94:1b:5d:42:bd:66:e6:49:d9:f3:4d:0a:e1:62:54:16:
         a7:dc:81:73:d9:74:00:20:27:c2:da:bf:e5:c3:57:75:59:dd:
         22:2c:28:47:92:32:d9:7f:2c:71:d7:f0:d1:de:d2:9f:a3:25:
         62:3f:b6:56:ae:ad:9d:36:16:2e:1f:14:8c:40:ec:10:bd:31:
         01:ae:04:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:33:31 2025 by rpki-client