Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/34352e3138322e32382e302f32322d3234203d3e20323635383136.roa
File:                     34352e3138322e32382e302f32322d3234203d3e20323635383136.roa (raw, json)
Hash identifier:          w7gAEINAXEWRri5vQ5qFmAHvFqv4WVVMhCOVltD7ttk=
Subject key identifier:   E7:63:14:F7:9C:10:6E:F2:82:BD:F9:7C:E9:74:47:8D:E0:71:28:1B
Certificate issuer:       /CN=D1B1A6D534F8C49C32B76E3C60C8174212B150E0
Certificate serial:       669C8463C2280BACAD38D6EF46E7C4261807D782
Authority key identifier: D1:B1:A6:D5:34:F8:C4:9C:32:B7:6E:3C:60:C8:17:42:12:B1:50:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/34352e3138322e32382e302f32322d3234203d3e20323635383136.roa
Signing time:             Tue 04 Feb 2025 18:46:04 +0000
ROA not before:           Tue 04 Feb 2025 18:41:04 +0000
ROA not after:            Tue 03 Feb 2026 18:46:04 +0000
asID:                     265816
IP address blocks:        45.182.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9c:84:63:c2:28:0b:ac:ad:38:d6:ef:46:e7:c4:26:18:07:d7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B1A6D534F8C49C32B76E3C60C8174212B150E0
        Validity
            Not Before: Feb  4 18:41:04 2025 GMT
            Not After : Feb  3 18:46:04 2026 GMT
        Subject: CN=E76314F79C106EF282BDF97CE974478DE071281B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:ab:94:9e:2f:5c:82:a7:da:7e:88:22:1b:
                    65:9b:b2:b9:ba:9c:d9:25:3e:9e:5e:d3:0e:2d:0c:
                    02:58:f1:82:95:d4:d4:d2:7c:7d:dd:23:51:c9:23:
                    41:a3:d2:45:e5:f7:32:40:a1:03:ef:ac:cc:43:95:
                    41:a0:44:9a:e4:a7:a2:12:02:27:f4:da:96:ad:18:
                    e1:fb:44:21:14:38:18:76:da:c9:5b:7a:51:a4:4c:
                    d6:ad:77:7f:6a:ff:12:79:62:70:99:f3:d3:0f:c7:
                    fb:64:d0:3b:b3:c0:14:ea:7e:d0:26:e1:d3:1b:17:
                    a7:16:2d:98:b5:44:c1:a9:5f:99:4c:bc:8f:04:55:
                    5a:2a:15:58:92:ad:ca:4b:82:a6:da:4c:ad:ea:30:
                    38:ce:35:94:15:72:03:a2:7f:61:04:b1:5a:cb:0f:
                    5a:a8:33:6d:f1:fd:67:e0:c2:5b:18:49:a4:52:50:
                    a8:0e:b1:1d:ca:c4:41:e1:ce:76:b7:56:a5:11:39:
                    d4:10:e6:e3:41:b2:94:ba:1a:d3:fd:c8:dc:e6:1f:
                    83:22:75:81:63:f5:eb:41:45:aa:e4:75:6f:4d:84:
                    b1:d2:54:b2:8e:a5:39:e9:f4:2d:89:ef:94:7f:fc:
                    95:c0:4a:71:99:89:ad:79:66:aa:ce:99:23:79:a5:
                    ea:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:63:14:F7:9C:10:6E:F2:82:BD:F9:7C:E9:74:47:8D:E0:71:28:1B
            X509v3 Authority Key Identifier:
                keyid:D1:B1:A6:D5:34:F8:C4:9C:32:B7:6E:3C:60:C8:17:42:12:B1:50:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1B1A6D534F8C49C32B76E3C60C8174212B150E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/692A101380E9B33FEA9235250342038D944AA0461C7CE2A8C570D0ACB095052E/0/34352e3138322e32382e302f32322d3234203d3e20323635383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:31:45:23:30:3d:d5:97:fc:b3:dd:2f:63:a3:ae:b4:25:77:
         d0:2c:4c:69:b6:b9:b0:ac:36:6f:d6:7c:e3:16:4f:cd:a2:53:
         e6:43:09:b4:bd:c5:2f:5f:64:a1:42:7a:60:90:d7:74:b0:69:
         03:86:94:88:3c:ba:38:a7:4e:28:bd:c7:67:b0:22:82:86:31:
         02:ae:58:d0:c9:fc:c2:89:da:b7:cf:9d:89:c1:48:0a:22:64:
         76:17:2c:f7:49:38:c2:4d:5a:4c:b3:cc:ef:00:31:a9:5e:89:
         33:23:5b:0a:e3:70:b6:c1:e4:03:72:61:f9:b6:30:0f:6d:76:
         9d:6f:28:47:f7:8f:a4:57:c6:d4:b5:b0:47:d8:ad:e9:12:23:
         2d:0c:16:3e:bd:49:8d:ec:f3:87:f4:5e:74:51:29:2f:57:e0:
         b4:0e:4c:35:15:bd:15:16:91:79:ac:76:1b:bc:9b:bb:44:a8:
         e9:f5:36:c6:12:fd:e2:f8:58:cc:21:3a:7f:85:cc:11:70:b1:
         3e:99:17:55:06:d2:6c:5b:39:27:c6:c9:57:6a:91:03:d2:a6:
         1c:48:29:c9:43:f8:61:01:46:13:af:e6:02:b5:5b:3e:6e:98:
         42:e9:a2:b5:a2:39:7a:d4:81:2a:07:5d:6c:ab:ba:46:84:db:
         e8:01:a6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:00:46 2025 by rpki-client