Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74B9266FE25C5FB0AC7E833552450D8559C19D7329403F87E4B3AEA76B33AE90/0/34352e3232392e3138302e302f32322d3234203d3e203237393833.roa
File:                     34352e3232392e3138302e302f32322d3234203d3e203237393833.roa (raw, json)
Hash identifier:          DKTHq/mP50KzP2y0Q+wu2Izm/r48KF8/4WijFyt36pM=
Subject key identifier:   2B:41:BB:25:70:55:F2:45:D2:6C:2F:5C:EB:E4:06:7C:C7:25:D3:42
Certificate issuer:       /CN=841690346F5D6FF5299AFCBC310E561F644DBD52
Certificate serial:       60FEC1A38710B19E6CDE6AB6CBF53F0B454E3D40
Authority key identifier: 84:16:90:34:6F:5D:6F:F5:29:9A:FC:BC:31:0E:56:1F:64:4D:BD:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841690346F5D6FF5299AFCBC310E561F644DBD52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74B9266FE25C5FB0AC7E833552450D8559C19D7329403F87E4B3AEA76B33AE90/0/34352e3232392e3138302e302f32322d3234203d3e203237393833.roa
Signing time:             Tue 04 Feb 2025 20:06:34 +0000
ROA not before:           Tue 04 Feb 2025 20:01:34 +0000
ROA not after:            Tue 03 Feb 2026 20:06:34 +0000
asID:                     27983
IP address blocks:        45.229.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/74B9266FE25C5FB0AC7E833552450D8559C19D7329403F87E4B3AEA76B33AE90/0/841690346F5D6FF5299AFCBC310E561F644DBD52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/74B9266FE25C5FB0AC7E833552450D8559C19D7329403F87E4B3AEA76B33AE90/0/841690346F5D6FF5299AFCBC310E561F644DBD52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841690346F5D6FF5299AFCBC310E561F644DBD52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fe:c1:a3:87:10:b1:9e:6c:de:6a:b6:cb:f5:3f:0b:45:4e:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841690346F5D6FF5299AFCBC310E561F644DBD52
        Validity
            Not Before: Feb  4 20:01:34 2025 GMT
            Not After : Feb  3 20:06:34 2026 GMT
        Subject: CN=2B41BB257055F245D26C2F5CEBE4067CC725D342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3e:10:c8:04:b4:8b:ca:b5:3b:c3:43:09:9f:
                    35:4c:61:d7:70:76:fe:9c:3a:82:ca:2c:f3:98:51:
                    44:0c:3f:de:ab:60:34:23:2a:02:54:7b:60:97:9a:
                    5c:98:33:d6:e0:17:55:f6:5c:01:8c:10:9a:10:01:
                    6b:5f:cd:fa:36:04:1c:67:a0:a9:18:31:1f:3f:6a:
                    0b:a2:ac:1d:38:58:11:ee:53:dc:3a:bd:58:95:b8:
                    75:8b:01:1d:ea:6d:9f:4e:d0:86:7c:b4:72:38:f9:
                    7f:50:dd:e0:2a:b3:a2:dc:83:a4:b4:1d:4b:cb:a2:
                    f0:99:a0:43:c7:ab:04:9a:2e:94:2c:0b:6a:1a:7f:
                    28:05:a0:b4:f0:a8:6c:91:61:73:76:00:bf:e3:50:
                    f7:83:cc:93:4d:c2:43:c6:df:8a:2e:4b:e2:ab:aa:
                    dc:8b:d8:52:92:27:00:2b:ec:e6:8c:6a:81:1a:35:
                    c9:d4:90:54:56:df:ec:88:eb:11:f4:99:9f:9b:bb:
                    e2:c2:d3:9c:45:c8:27:ea:7a:6e:58:fc:ea:2d:2e:
                    0b:7a:c2:48:b9:90:2b:a1:c0:74:92:8f:23:65:20:
                    e8:aa:f3:43:ac:02:ee:34:30:fa:0f:d9:af:64:b0:
                    99:f9:e8:66:d7:09:9b:81:62:8f:7c:70:cf:f9:82:
                    b3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:41:BB:25:70:55:F2:45:D2:6C:2F:5C:EB:E4:06:7C:C7:25:D3:42
            X509v3 Authority Key Identifier:
                keyid:84:16:90:34:6F:5D:6F:F5:29:9A:FC:BC:31:0E:56:1F:64:4D:BD:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74B9266FE25C5FB0AC7E833552450D8559C19D7329403F87E4B3AEA76B33AE90/0/841690346F5D6FF5299AFCBC310E561F644DBD52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841690346F5D6FF5299AFCBC310E561F644DBD52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74B9266FE25C5FB0AC7E833552450D8559C19D7329403F87E4B3AEA76B33AE90/0/34352e3232392e3138302e302f32322d3234203d3e203237393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:9d:33:93:cb:d7:df:41:b4:2f:1c:60:4e:8a:2f:91:41:fc:
         0c:6e:58:bf:49:27:f8:90:1b:1b:78:eb:2f:c8:bc:01:74:e3:
         e7:68:09:3d:59:1b:9b:3c:22:db:9c:60:ea:8a:e1:47:5f:b7:
         fe:49:13:12:0a:23:47:f0:b1:6b:aa:f8:90:74:cc:f4:4d:00:
         bb:60:20:0d:7b:dd:a8:4e:c5:19:a7:7d:73:2e:a4:0f:88:0f:
         5e:d1:6a:13:36:40:fc:e8:6f:13:32:dc:c3:30:2f:7c:e0:3d:
         d6:e0:a1:68:cd:38:ed:d6:0c:f9:d8:b7:4f:0b:54:6a:a0:6f:
         5c:e9:1f:f8:d2:86:5c:e6:df:14:fc:c6:f8:47:63:47:92:b3:
         c8:b0:98:2e:88:a4:16:2e:43:74:47:94:c3:36:e6:e6:ed:f4:
         2e:a3:27:ec:b1:c7:b8:9e:0d:3b:da:c1:25:2a:68:c9:01:e2:
         d7:43:14:d8:e1:1f:0c:eb:d3:0f:72:93:10:23:6a:11:1f:cd:
         c9:d9:9c:a6:f3:8c:51:bb:87:9c:77:f1:ca:b9:b5:19:2d:a6:
         46:49:b3:67:0f:17:43:99:f8:1b:99:42:04:53:da:f5:d2:0b:
         5e:bc:df:f7:be:1f:d8:b8:7a:14:92:d4:66:06:f9:99:99:2a:
         8e:76:43:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:36 2025 by rpki-client