Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232332e302f32342d3234203d3e20323636363834.roa
File:                     34352e3232382e3232332e302f32342d3234203d3e20323636363834.roa (raw, json)
Hash identifier:          4B1Z0LDswdIoiSeil6hoIPAEd6qPvz44or1yo+TOxZ8=
Subject key identifier:   C3:41:E9:0E:11:57:E7:26:2B:F0:77:06:6C:D7:3D:0F:1A:C3:FB:D7
Certificate issuer:       /CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
Certificate serial:       11E4726E180673F2D961F9E8386BF3E9C32462E2
Authority key identifier: 63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232332e302f32342d3234203d3e20323636363834.roa
Signing time:             Tue 04 Feb 2025 18:45:23 +0000
ROA not before:           Tue 04 Feb 2025 18:40:23 +0000
ROA not after:            Tue 03 Feb 2026 18:45:23 +0000
asID:                     266684
IP address blocks:        45.228.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e4:72:6e:18:06:73:f2:d9:61:f9:e8:38:6b:f3:e9:c3:24:62:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
        Validity
            Not Before: Feb  4 18:40:23 2025 GMT
            Not After : Feb  3 18:45:23 2026 GMT
        Subject: CN=C341E90E1157E7262BF077066CD73D0F1AC3FBD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d5:c9:35:5d:f3:80:a6:ae:58:29:91:b2:62:
                    89:22:bd:c6:b5:28:fa:4d:d4:27:2e:d4:a8:14:3e:
                    73:06:bc:09:12:ef:b6:da:19:5e:92:31:2d:ca:40:
                    b4:69:e7:ce:97:92:5a:aa:72:fe:2d:48:17:c1:3b:
                    76:7b:40:d5:f3:45:cd:33:8e:91:df:2b:55:de:db:
                    90:17:06:4a:3a:62:a7:c0:96:47:42:e6:19:a3:9f:
                    56:78:0a:0f:86:71:90:38:4b:69:ef:87:16:d6:9f:
                    0c:20:d6:c9:3a:75:2b:10:10:96:8a:ca:59:5c:d1:
                    63:54:cb:1d:27:79:5b:be:c9:1a:d0:42:bd:11:62:
                    63:68:8e:b3:08:f3:f9:0d:00:47:e3:b8:7b:2f:09:
                    21:40:69:6d:09:8e:82:2d:b7:89:0e:a3:96:60:55:
                    6e:87:04:cf:41:ed:61:81:e2:74:7a:0b:d7:f8:84:
                    cd:5e:99:06:42:da:fb:a8:24:f5:37:0e:15:02:13:
                    54:bf:4d:52:40:af:5d:ab:91:b7:73:f2:4d:7d:0a:
                    c0:d7:0e:54:fe:3a:d8:c4:53:9c:13:e4:34:97:5a:
                    0c:c0:7c:bb:3d:e6:71:32:37:12:64:98:d8:12:3c:
                    87:5a:b1:33:99:8d:a7:e5:03:4d:12:9e:e0:2d:f5:
                    b1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:41:E9:0E:11:57:E7:26:2B:F0:77:06:6C:D7:3D:0F:1A:C3:FB:D7
            X509v3 Authority Key Identifier:
                keyid:63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232332e302f32342d3234203d3e20323636363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:1c:31:40:5f:29:a6:9f:cd:0e:af:5e:67:3d:4e:f1:9c:78:
         f5:04:5d:c8:d0:47:0b:52:e9:39:4a:dd:50:7e:24:cf:bf:2c:
         ef:cc:5b:f0:df:00:fe:4c:fc:cb:9a:5e:5c:f2:54:7b:52:ae:
         d8:13:7c:0c:01:66:4d:bf:86:0f:29:4a:89:99:fa:24:cf:ad:
         27:0f:65:21:2e:24:1f:ba:78:ce:80:1d:1f:94:1c:1c:c1:1a:
         67:3d:f2:4f:8e:63:69:55:2f:e5:09:9e:9e:27:cc:6a:c8:4f:
         94:ac:f5:02:0f:e5:db:28:36:7b:5e:da:af:1c:dd:6a:7c:a2:
         eb:87:3a:72:3a:3a:40:6a:77:7d:92:89:95:0a:36:e4:a7:e4:
         61:2b:48:1f:f3:09:5e:0f:15:c3:55:bb:93:6a:eb:7d:46:9e:
         c5:fa:92:0c:e0:c6:1b:d6:7e:94:9c:a3:52:a3:bb:80:8f:af:
         fc:30:36:33:8b:de:10:a1:00:6e:9c:fc:a8:82:98:f6:ce:6c:
         0e:c9:d8:72:07:a5:06:65:4c:22:3d:8e:ad:fc:cd:46:91:ba:
         ab:46:93:e7:c2:46:b3:36:40:9c:56:4a:9b:2c:f5:96:e5:32:
         bb:11:8e:34:63:e0:df:93:3b:1a:14:8d:bd:25:cc:ed:12:df:
         7a:64:3b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:15:57 2025 by rpki-client