Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32332d3233203d3e20323636363834.roa
File:                     34352e3232382e3232302e302f32332d3233203d3e20323636363834.roa (raw, json)
Hash identifier:          tsOds9zxLHTxg4bq4kQsRhtDVgVqzdX6wgA8Jl38+Ao=
Subject key identifier:   0E:3C:FE:E5:04:44:2E:31:7E:9C:08:15:8B:20:6F:AB:15:D5:EE:A6
Certificate issuer:       /CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
Certificate serial:       58EFF4D4B14D71A83063E06B3DADE6F9B52D9D35
Authority key identifier: 63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32332d3233203d3e20323636363834.roa
Signing time:             Tue 04 Feb 2025 18:45:22 +0000
ROA not before:           Tue 04 Feb 2025 18:40:22 +0000
ROA not after:            Tue 03 Feb 2026 18:45:22 +0000
asID:                     266684
IP address blocks:        45.228.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 07:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ef:f4:d4:b1:4d:71:a8:30:63:e0:6b:3d:ad:e6:f9:b5:2d:9d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
        Validity
            Not Before: Feb  4 18:40:22 2025 GMT
            Not After : Feb  3 18:45:22 2026 GMT
        Subject: CN=0E3CFEE504442E317E9C08158B206FAB15D5EEA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:01:96:0e:bb:dc:c0:c0:a0:97:33:88:2c:
                    0c:52:14:09:f6:fc:b9:36:60:48:14:88:6b:ec:e1:
                    fa:ca:27:fc:b9:54:27:d8:a5:36:f5:7b:79:81:a1:
                    93:ae:a6:09:e8:ac:17:32:70:ea:be:10:34:62:ac:
                    d7:34:20:c1:77:3c:ea:b5:96:b1:01:0b:2d:76:63:
                    64:1d:1f:6b:74:2d:d4:03:cd:e5:31:f4:0c:9d:87:
                    22:f2:a7:4e:89:29:b3:cb:70:54:94:56:3b:7a:14:
                    9f:ae:91:92:cb:73:c1:ff:65:2d:7c:84:c6:c1:f7:
                    81:bf:58:84:f8:65:79:49:f4:f9:4b:74:52:b2:2d:
                    72:63:e0:70:8b:ed:10:70:b8:1c:06:7c:fd:d8:fd:
                    58:6d:78:53:79:f7:09:a3:d0:17:4e:a1:fd:0b:6f:
                    30:36:d9:93:f6:f3:5b:20:50:ec:7e:47:00:41:4c:
                    10:84:a7:36:70:64:95:93:72:cb:14:2c:96:ec:f4:
                    db:7d:31:d6:60:0d:49:fb:63:3a:36:bb:fc:f0:bc:
                    40:8f:f2:bd:cb:18:52:7e:66:e9:81:6f:71:63:ed:
                    f8:65:f0:a4:6c:68:27:e2:48:d0:88:d3:02:98:11:
                    7b:a9:84:33:f5:42:51:93:b3:6b:b9:38:e8:cd:ee:
                    9c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3C:FE:E5:04:44:2E:31:7E:9C:08:15:8B:20:6F:AB:15:D5:EE:A6
            X509v3 Authority Key Identifier:
                keyid:63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32332d3233203d3e20323636363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:aa:96:ac:4c:47:ac:56:22:f5:70:48:ce:f3:cb:78:d8:17:
         83:b6:56:dd:bc:85:4a:12:54:e7:c8:9c:f8:aa:e1:b6:f5:ef:
         e2:55:fb:bf:ed:7f:26:75:0d:fc:1e:0f:a9:c6:ca:58:c9:84:
         ec:96:5c:f4:77:12:e3:43:12:1c:be:62:c1:f8:62:66:16:24:
         ae:f6:fe:a1:52:7b:ba:8b:56:26:c3:0f:60:94:c3:dc:97:0c:
         9d:d5:53:44:ce:48:91:7b:3b:09:5a:d9:ea:03:5b:1c:67:ff:
         c2:0f:ba:67:21:bc:2c:72:28:02:93:de:bd:fc:0c:cf:23:07:
         2e:19:35:d5:06:0f:60:91:66:b6:e9:92:53:b1:e2:68:d2:58:
         6c:48:b5:7b:ae:5f:90:83:ff:9a:5a:09:44:c1:07:6d:e7:c8:
         93:39:a5:44:ab:c2:db:51:2b:3b:c7:81:a9:bd:24:6b:52:a6:
         6f:db:ca:a9:59:21:7c:16:6b:3d:8c:fa:dd:c2:dd:df:a9:d1:
         07:25:ff:5b:48:50:0a:b4:bb:69:f9:75:1d:f2:b4:43:4e:6c:
         6f:5a:0e:15:09:08:c0:9f:0e:ca:bc:53:f4:6e:d5:cc:d8:9c:
         9a:3b:be:9b:59:40:9c:c4:84:24:1e:88:61:32:b4:e7:1f:0a:
         d7:6a:86:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:38:07 2025 by rpki-client