Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa
File:                     34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa (raw, json)
Hash identifier:          S7FRt48mlJQdhRUBKeeOjWo5otOru6pXI07NZVe+lsM=
Subject key identifier:   09:33:95:13:6D:3A:69:9D:00:09:D7:93:47:BF:39:03:2B:8D:C4:24
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       49F56EBEA6D6654549BAE780A7D6ECAE108A3688
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa
Signing time:             Tue 04 Feb 2025 18:04:23 +0000
ROA not before:           Tue 04 Feb 2025 17:59:23 +0000
ROA not after:            Tue 03 Feb 2026 18:04:23 +0000
asID:                     266819
IP address blocks:        45.237.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f5:6e:be:a6:d6:65:45:49:ba:e7:80:a7:d6:ec:ae:10:8a:36:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Feb  4 17:59:23 2025 GMT
            Not After : Feb  3 18:04:23 2026 GMT
        Subject: CN=093395136D3A699D0009D79347BF39032B8DC424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:f2:0d:33:d8:9e:08:b7:e2:b2:fe:a9:9c:
                    13:05:06:e2:90:30:c9:b1:19:dd:9a:c0:c5:12:12:
                    6d:44:9a:aa:b4:f7:fd:18:2f:ca:65:e0:0a:14:c1:
                    a1:6c:75:34:bc:39:77:c6:e2:6c:24:d7:f1:68:24:
                    78:1b:4b:62:92:fa:6d:0b:80:cf:1b:92:04:3f:ea:
                    37:b7:00:b1:ac:17:70:29:95:7f:84:b9:0b:cc:0c:
                    11:a1:db:ce:b5:2d:78:50:b0:22:96:50:86:53:11:
                    9c:2b:99:35:1e:1a:69:9f:d5:6b:c4:c3:15:ef:46:
                    be:1f:8f:b0:8d:15:e9:be:ee:41:80:1f:46:eb:66:
                    97:5f:0e:e3:9a:dd:85:fa:92:f5:83:ad:84:5e:a9:
                    28:e7:77:97:08:58:56:6f:f0:cc:74:08:a0:25:d9:
                    b2:2e:bd:31:c5:fb:51:c7:19:31:99:8c:1e:71:18:
                    3c:48:64:d7:c8:31:8d:53:a7:e8:f5:7a:b7:fa:b0:
                    67:8c:5b:89:4f:c8:c6:98:82:32:29:92:26:5e:2b:
                    bf:0d:f3:2c:18:05:a0:1f:dd:00:4a:e8:f6:30:bb:
                    f5:a6:80:6f:d0:f1:28:6e:4e:9f:8b:79:c3:95:d4:
                    1e:22:18:f4:d6:d7:87:d4:7a:f9:4a:48:49:d5:ba:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:33:95:13:6D:3A:69:9D:00:09:D7:93:47:BF:39:03:2B:8D:C4:24
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232302e302f32342d3234203d3e20323636383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:f8:48:51:af:7f:2f:05:ca:25:9f:e3:2d:46:32:47:9f:3d:
         a7:39:05:48:5a:c5:90:da:74:e3:1f:e2:d8:02:2b:27:00:9e:
         2e:f1:47:7f:58:8d:e1:9c:bd:80:52:23:b1:51:9e:f1:10:d8:
         fe:d4:e7:6b:83:6a:1b:42:97:39:3b:dc:f9:c6:ce:9b:fa:83:
         ac:6f:96:c1:78:19:05:07:21:36:92:f7:ae:b4:dd:10:4b:20:
         b8:9c:28:e6:7b:04:7d:ef:08:da:c1:6f:3f:f2:19:5b:24:c9:
         de:b8:3b:83:90:28:ee:2d:fa:aa:0c:9c:bb:fd:fc:ec:fc:43:
         4e:18:32:fb:80:6b:9c:a9:06:e2:0b:bc:da:47:58:13:8b:d5:
         ac:53:7e:a5:66:6f:96:91:1c:ca:ea:ac:f0:f5:64:ed:65:3a:
         62:52:ed:91:3a:b3:4f:0a:9d:16:27:a4:55:e3:85:db:55:39:
         ca:6a:1e:d6:d4:36:96:3d:d0:fb:3b:02:c0:44:03:d0:e1:fd:
         c5:bc:23:b5:d5:35:d6:1b:74:13:f3:ff:4c:3d:46:3a:51:48:
         e3:e9:d9:c6:e9:64:77:e4:aa:95:74:8e:69:5b:3a:35:ec:79:
         06:d2:54:ff:25:01:c1:cf:c0:10:0a:1a:51:aa:2e:47:95:10:
         39:d7:d7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:38 2025 by rpki-client