Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/34352e3136322e3133322e302f32332d3233203d3e20323731383433.roa
File:                     34352e3136322e3133322e302f32332d3233203d3e20323731383433.roa (raw, json)
Hash identifier:          8WE/5cgYV83f4zy44cO7xCuxORi0FIkesP1zM/V8AgE=
Subject key identifier:   F2:A9:A9:28:CF:70:2B:8E:21:70:F7:96:69:56:A7:87:6E:7F:49:55
Certificate issuer:       /CN=E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045
Certificate serial:       1883A145F1FD3D4F85BF8D978CAB6FF86A958ECE
Authority key identifier: E0:55:7D:76:2D:9B:F6:F3:F2:5F:DA:DD:CC:2E:ED:EA:21:1E:90:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/34352e3136322e3133322e302f32332d3233203d3e20323731383433.roa
Signing time:             Tue 04 Feb 2025 18:48:49 +0000
ROA not before:           Tue 04 Feb 2025 18:43:49 +0000
ROA not after:            Tue 03 Feb 2026 18:48:49 +0000
asID:                     271843
IP address blocks:        45.162.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:83:a1:45:f1:fd:3d:4f:85:bf:8d:97:8c:ab:6f:f8:6a:95:8e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045
        Validity
            Not Before: Feb  4 18:43:49 2025 GMT
            Not After : Feb  3 18:48:49 2026 GMT
        Subject: CN=F2A9A928CF702B8E2170F7966956A7876E7F4955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:92:3c:df:de:e1:dc:42:59:cc:bf:57:1b:79:
                    7b:60:e1:0a:28:cc:49:4c:4f:ce:08:15:ec:1c:73:
                    fd:65:76:31:a8:28:2e:7b:e5:f4:1a:63:cd:98:11:
                    c2:43:7d:27:14:e0:45:d3:86:71:a9:c1:3f:ad:9a:
                    62:8a:10:f8:54:40:11:d9:53:7c:3c:36:93:da:2e:
                    04:a8:a5:2c:35:41:17:00:82:20:79:53:42:4d:e7:
                    b2:f0:89:e5:a5:e9:15:1f:f8:29:8d:c8:85:8b:8a:
                    0d:81:08:4c:6b:cb:b8:af:5a:5a:77:f7:a1:05:d1:
                    0b:db:a8:15:80:83:07:f4:77:9e:d4:43:25:6e:75:
                    b9:89:d1:f5:06:36:b9:be:9c:78:20:ea:bb:00:f9:
                    80:97:ab:8c:cd:16:e5:ef:37:57:8a:cf:ac:46:ae:
                    87:e6:48:ea:0d:14:7c:55:fb:b0:ae:7d:a7:6c:9f:
                    8a:a9:c3:78:6f:0d:4a:49:43:74:da:2d:43:e8:87:
                    3f:78:72:e9:a4:75:2c:70:2c:b9:2f:94:3a:f3:cd:
                    f1:c4:62:cc:af:4d:6f:66:5a:ba:eb:e4:17:e4:4a:
                    8d:30:d4:8b:54:0b:1a:15:27:1c:ff:49:d9:9e:65:
                    c9:73:c8:f9:47:19:09:eb:03:41:2b:51:54:4d:f8:
                    a7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A9:A9:28:CF:70:2B:8E:21:70:F7:96:69:56:A7:87:6E:7F:49:55
            X509v3 Authority Key Identifier:
                keyid:E0:55:7D:76:2D:9B:F6:F3:F2:5F:DA:DD:CC:2E:ED:EA:21:1E:90:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/34352e3136322e3133322e302f32332d3233203d3e20323731383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:1e:3d:a9:2a:3f:dc:35:9e:c7:d6:83:20:f6:0e:fd:67:8d:
         6f:07:53:2d:cf:c8:be:d5:65:47:1b:44:d1:13:63:6d:f9:11:
         b6:fa:57:7b:e1:96:ec:12:5b:04:9f:78:d6:4b:c9:fc:e0:5d:
         53:7b:1e:d7:6d:6d:4f:9e:b1:8f:99:f9:37:2d:fa:0c:9e:79:
         bc:ee:af:99:ff:75:cb:4c:28:9f:fa:67:10:a6:c2:1c:43:89:
         15:b9:5c:8c:bb:f6:53:ba:53:3e:10:9c:b8:27:48:1a:59:ce:
         15:32:84:77:56:63:46:41:b8:8e:01:5d:83:35:50:0f:ba:a5:
         2a:40:03:08:7f:bd:c3:85:cc:c2:60:fa:cb:90:4b:9e:de:19:
         24:51:44:a4:3e:16:21:a8:3b:c8:51:71:7c:4f:5b:4a:3d:e0:
         29:55:a0:1e:71:ce:72:cb:4e:c1:ab:be:79:0c:4c:82:a7:00:
         6f:d4:e8:84:07:d3:04:51:ae:1a:7e:62:00:cf:b2:30:63:db:
         77:95:bf:77:f9:b7:45:a5:6f:d0:74:9b:fa:3f:1b:c0:c5:11:
         c4:d4:b5:66:73:3b:f0:37:25:b6:b0:92:0a:6b:58:6d:8c:6a:
         e4:35:d4:76:2d:c0:87:c2:9a:a3:61:d5:21:04:63:f4:50:c4:
         68:c8:4b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:01 2025 by rpki-client