Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa
File:                     34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa (raw, json)
Hash identifier:          /elfOjbQfF2fPsMe6mNPua2FvaMW9MN/Vs+BX6OZ9K4=
Subject key identifier:   05:93:A3:03:74:18:18:54:D0:02:62:6A:B9:CF:FD:8F:87:62:01:4A
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       4A354B9BAF2B8D0D94158A9A93AC5784699DF18E
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa
Signing time:             Tue 04 Feb 2025 18:04:23 +0000
ROA not before:           Tue 04 Feb 2025 17:59:23 +0000
ROA not after:            Tue 03 Feb 2026 18:04:23 +0000
asID:                     266819
IP address blocks:        45.237.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 04:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:35:4b:9b:af:2b:8d:0d:94:15:8a:9a:93:ac:57:84:69:9d:f1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Feb  4 17:59:23 2025 GMT
            Not After : Feb  3 18:04:23 2026 GMT
        Subject: CN=0593A30374181854D002626AB9CFFD8F8762014A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:80:91:73:70:f5:e3:0c:9e:28:81:cd:65:
                    2e:e0:5c:a1:67:b9:d4:a3:d8:d9:86:9f:62:82:cf:
                    67:15:07:8f:07:dc:b9:9d:2b:43:c2:e8:cf:d2:52:
                    ba:72:cb:bd:39:49:ff:a9:ed:b7:e6:ff:c1:d2:23:
                    4a:64:ca:5b:bd:48:80:95:c5:aa:33:ab:7c:53:ba:
                    f2:ab:d6:a6:6e:20:13:34:94:41:7e:34:17:af:12:
                    f6:0e:55:c6:68:ba:ad:d2:23:78:be:b7:68:23:e6:
                    52:2f:44:1b:8a:d9:49:b2:75:6e:7e:c3:d7:d4:5d:
                    aa:c9:83:31:9b:c3:5a:cc:4d:4c:f5:a5:10:60:60:
                    59:ab:7b:57:1c:2c:f6:e3:3c:74:51:09:38:f2:2a:
                    6c:47:40:d6:01:0b:23:9c:d2:57:44:3c:ca:90:a3:
                    1d:73:c6:06:ad:a6:84:92:e5:de:b3:b7:c7:e3:4a:
                    94:0f:94:e8:e6:28:e3:bb:a0:b9:3a:28:76:a5:6b:
                    6d:84:1f:60:ed:a5:75:13:1c:8d:43:4c:8c:6c:80:
                    4b:83:50:55:45:39:f0:89:a4:65:05:f0:74:32:32:
                    8f:60:11:68:39:a6:00:1d:bc:00:76:a7:ba:a9:0a:
                    af:09:e5:a1:01:22:5c:a7:44:68:ce:d4:5a:f8:eb:
                    72:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:93:A3:03:74:18:18:54:D0:02:62:6A:B9:CF:FD:8F:87:62:01:4A
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:48:c7:34:77:d6:e6:17:26:ae:3d:01:52:12:15:e2:28:e4:
         ac:2b:6e:49:7e:23:76:e2:6d:aa:2a:01:d6:81:e2:ba:63:b6:
         74:34:78:66:d9:f0:ca:d4:2d:ba:65:9d:b7:31:ea:f5:22:ef:
         f2:3e:fc:8f:53:b6:61:3d:cc:2b:31:34:2b:a1:1f:f3:03:b1:
         dd:e9:aa:88:68:41:f0:a5:d3:b6:0d:50:58:21:61:5c:60:42:
         c5:84:9b:b8:1c:7a:fc:75:bf:9c:e4:a9:e8:3b:52:51:a6:f4:
         93:5e:3d:76:99:e9:05:35:f1:b8:c6:53:93:f4:78:9c:97:a5:
         22:69:0c:57:48:dc:6e:04:88:19:01:c0:0c:de:47:ac:15:71:
         a7:61:e5:d5:4e:55:41:4e:98:19:68:29:90:2b:b9:65:9e:4b:
         9e:ee:e4:42:fc:40:a2:11:52:fb:0c:a3:58:a0:22:ab:94:5e:
         63:85:bb:42:54:b6:a5:0b:6c:a0:35:19:18:e6:56:51:62:5f:
         32:d8:fd:67:1f:54:83:83:87:3c:12:4f:5d:12:f7:ef:2f:0b:
         66:96:6d:31:65:43:bd:e2:f7:9e:1d:b1:70:71:2f:0d:f4:a2:
         1d:ee:7a:7f:e9:51:f3:06:2f:57:77:b0:f4:99:2a:ad:62:81:
         28:29:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:09:56 2025 by rpki-client