Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/34352e3137332e3139322e302f32322d3234203d3e20323637373938.roa
File:                     34352e3137332e3139322e302f32322d3234203d3e20323637373938.roa (raw, json)
Hash identifier:          ku7Pegns5rb3/J+L9k67+lDukcl7gRSw3iomKYF8FW4=
Subject key identifier:   DE:6A:00:DF:F2:63:87:54:33:35:C6:07:F5:45:2F:2E:B9:44:D6:F0
Certificate issuer:       /CN=525E7FEFA72B2D28F39078F1EAD5165FA434A3AB
Certificate serial:       30DD2664B587AB9B9322E1B47CD5D68420AA9D9F
Authority key identifier: 52:5E:7F:EF:A7:2B:2D:28:F3:90:78:F1:EA:D5:16:5F:A4:34:A3:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/34352e3137332e3139322e302f32322d3234203d3e20323637373938.roa
Signing time:             Tue 04 Feb 2025 18:20:14 +0000
ROA not before:           Tue 04 Feb 2025 18:15:14 +0000
ROA not after:            Tue 03 Feb 2026 18:20:14 +0000
asID:                     267798
IP address blocks:        45.173.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:dd:26:64:b5:87:ab:9b:93:22:e1:b4:7c:d5:d6:84:20:aa:9d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=525E7FEFA72B2D28F39078F1EAD5165FA434A3AB
        Validity
            Not Before: Feb  4 18:15:14 2025 GMT
            Not After : Feb  3 18:20:14 2026 GMT
        Subject: CN=DE6A00DFF26387543335C607F5452F2EB944D6F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:86:c8:ea:0a:f7:f7:a6:1b:40:6f:b6:4a:93:
                    01:61:bf:67:45:7e:8f:94:15:07:62:3f:b7:70:58:
                    24:72:59:dd:e2:37:68:0c:26:5e:42:9d:49:9a:10:
                    57:a0:53:da:e2:b3:41:85:72:ea:5e:e5:11:23:1b:
                    b1:cd:01:94:6a:47:23:be:0d:b3:99:04:46:d7:25:
                    86:b2:74:c4:83:c0:c0:e2:c5:37:a6:1e:02:16:03:
                    82:cb:24:f1:d7:59:ff:45:92:f7:c5:bb:18:fc:8b:
                    f9:32:55:47:57:97:70:49:fd:55:b9:02:9f:42:94:
                    64:34:d3:af:13:8a:27:2c:be:8a:f3:9a:83:b2:e0:
                    9b:ce:01:dc:34:c2:3b:74:a1:78:2a:7d:91:99:e8:
                    75:bf:cd:36:76:a3:9d:48:6b:e8:d5:94:9e:bf:54:
                    8e:08:9a:e5:de:10:65:e5:bc:dd:8f:64:39:94:df:
                    f1:8a:6f:41:e9:57:82:02:83:4a:a6:b1:69:43:f3:
                    70:39:50:7e:64:a1:f0:81:01:83:5b:47:f1:65:59:
                    23:1e:fa:05:c5:76:6c:e8:57:b7:1c:2c:45:fb:3d:
                    bf:c5:08:e9:8c:11:87:ee:8e:77:41:b3:a8:0e:4d:
                    0c:45:75:3b:7c:ac:47:ce:57:c0:2d:f1:da:41:9c:
                    fc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6A:00:DF:F2:63:87:54:33:35:C6:07:F5:45:2F:2E:B9:44:D6:F0
            X509v3 Authority Key Identifier:
                keyid:52:5E:7F:EF:A7:2B:2D:28:F3:90:78:F1:EA:D5:16:5F:A4:34:A3:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/525E7FEFA72B2D28F39078F1EAD5165FA434A3AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73077AE9BDA56FAFCD9B3D85BAF607BF340AB464E1E1F2842B0400FD562582DD/0/34352e3137332e3139322e302f32322d3234203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:26:bf:91:2d:26:15:c3:ab:55:bf:f9:1a:0e:27:26:82:f5:
         58:cf:dc:8e:67:48:d9:e8:de:63:a9:10:8b:10:6c:b1:bb:e6:
         ad:e1:85:1f:16:3a:db:5e:ed:d7:75:b5:00:68:56:19:a5:db:
         fe:e7:6a:39:ba:99:a8:0e:7c:6e:d4:4b:69:97:41:ce:00:e5:
         04:23:a1:a7:78:ce:75:b8:dc:37:c5:8e:e7:fd:41:7e:04:2c:
         e7:71:32:4a:05:2c:6d:b4:ed:fe:19:8d:5d:75:04:0f:21:db:
         14:7f:d9:f2:84:c4:a6:f7:21:8a:7f:e0:f7:5a:8c:ff:1f:c6:
         1f:91:86:52:03:29:9c:8d:20:c0:1f:1a:cb:ef:9c:14:18:f0:
         07:d7:51:da:37:5f:e8:aa:26:a5:95:07:1e:bb:9a:bd:49:74:
         e1:29:63:a6:9a:35:76:6e:b6:b2:47:45:73:cc:d4:ea:ee:3b:
         c9:8a:01:cc:ee:f7:93:5d:0f:a2:01:9d:fe:2c:5d:2d:a1:94:
         a3:15:77:e8:0f:65:02:f9:c6:63:fe:4e:ce:9f:75:a3:12:65:
         3a:73:ac:75:67:50:11:42:ad:c9:2b:e3:87:72:1a:9a:c5:30:
         ae:83:23:0a:f9:e3:f8:4a:e8:19:4c:48:85:71:70:20:4c:86:
         8a:40:15:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:53 2025 by rpki-client