Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32322d3232203d3e20323636363834.roa
File:                     34352e3232382e3232302e302f32322d3232203d3e20323636363834.roa (raw, json)
Hash identifier:          AvRb7IXf0cHabGSBcxslI2cZzO+sweUt69KGzs0qSX4=
Subject key identifier:   24:53:B4:11:F7:04:D0:8D:CA:2A:80:64:AC:91:E4:5C:BB:66:13:72
Certificate issuer:       /CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
Certificate serial:       07A1603C7F537D2E4D678F42A86C874E9D2B5E16
Authority key identifier: 63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32322d3232203d3e20323636363834.roa
Signing time:             Tue 04 Feb 2025 18:45:21 +0000
ROA not before:           Tue 04 Feb 2025 18:40:21 +0000
ROA not after:            Tue 03 Feb 2026 18:45:21 +0000
asID:                     266684
IP address blocks:        45.228.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a1:60:3c:7f:53:7d:2e:4d:67:8f:42:a8:6c:87:4e:9d:2b:5e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
        Validity
            Not Before: Feb  4 18:40:21 2025 GMT
            Not After : Feb  3 18:45:21 2026 GMT
        Subject: CN=2453B411F704D08DCA2A8064AC91E45CBB661372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:49:88:97:fc:db:ec:b4:d1:25:8f:4a:3c:44:
                    e2:d6:ed:5d:f0:28:82:6d:ed:fa:50:40:57:7d:47:
                    ec:de:63:03:15:9f:a3:50:ec:00:ed:84:88:ff:71:
                    08:f6:fc:37:d5:90:f6:fa:3b:fc:fb:54:32:e0:2b:
                    49:bf:51:e8:fd:62:b2:03:93:e0:9e:0f:56:7a:f4:
                    fe:c3:e4:88:95:fb:5c:86:24:a2:e2:fb:5c:d4:2b:
                    e1:45:fd:b2:85:a9:db:2c:44:a5:42:39:54:ff:69:
                    9c:14:ec:d9:71:cf:8e:ef:ea:fc:48:79:c3:ea:05:
                    64:e8:f9:f3:31:55:34:a1:b0:44:83:fd:08:91:a8:
                    21:7e:ac:81:0f:0f:70:44:13:24:31:07:7c:94:4e:
                    dc:e4:f7:7c:2e:a9:b9:2a:96:9b:31:ed:b7:71:c2:
                    4f:73:71:f7:cd:12:92:d9:35:4d:61:a7:8e:a5:5f:
                    e4:72:f7:72:49:6e:d4:ed:61:28:1c:f6:29:18:c7:
                    cf:ca:22:47:05:fc:62:8e:56:52:7d:27:a1:0d:c8:
                    c0:50:b1:88:60:c5:88:8b:93:74:6d:69:70:30:21:
                    71:c9:e2:7a:4f:02:d4:89:fe:b7:e2:c6:8e:0e:c5:
                    f1:50:04:73:0a:6c:84:77:b0:df:19:f9:a7:ed:4e:
                    20:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:53:B4:11:F7:04:D0:8D:CA:2A:80:64:AC:91:E4:5C:BB:66:13:72
            X509v3 Authority Key Identifier:
                keyid:63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32322d3232203d3e20323636363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:c1:e4:fc:b1:04:78:14:c2:c1:ca:4d:fc:82:92:91:9e:2d:
         0f:b0:45:72:c3:fb:b7:5a:3f:1d:44:2c:55:48:e9:d9:a4:54:
         e1:96:33:9b:8a:a9:49:16:4e:19:51:18:22:7d:82:55:14:3f:
         4a:7e:e3:eb:e0:53:92:7d:da:17:9a:6a:4f:d0:6a:0b:8b:7d:
         d9:be:54:42:4a:3b:8b:9c:b0:a6:6f:30:8b:a8:90:4e:71:45:
         36:10:5a:09:9f:ca:39:ef:92:4d:a2:42:e0:8c:55:cd:1d:18:
         60:62:01:47:71:07:64:8c:70:7b:2c:b3:64:b9:6e:cc:6e:d8:
         88:fe:68:0e:79:d8:cb:73:73:b1:d1:3b:fa:a8:2e:91:a7:2f:
         80:be:7b:b6:04:3e:a5:39:9a:fd:70:c1:a3:da:30:ad:84:9d:
         7c:21:77:00:56:d2:4d:05:7a:af:e0:b1:77:fa:88:0a:6f:99:
         38:d1:88:d2:29:dc:e9:22:c8:42:34:25:3e:93:66:84:ea:c1:
         34:07:c0:36:6b:cf:c8:75:54:58:4d:63:13:dd:13:64:64:97:
         e3:ce:8b:7f:a0:ae:c5:2f:91:2b:b2:9d:9e:b8:84:8b:2a:56:
         32:f1:c8:b0:28:4b:f1:32:9a:41:44:c8:98:b0:7f:e6:a7:96:
         cf:84:fb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:20:59 2025 by rpki-client