Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/34352e3137332e34302e302f32322d3234203d3e20323634373538.roa
File:                     34352e3137332e34302e302f32322d3234203d3e20323634373538.roa (raw, json)
Hash identifier:          IJ5AVCK8h9M1s2L7MuroOMqbyEXZphiCZ0o1szpdr7k=
Subject key identifier:   6B:EA:36:3B:3C:C9:22:8F:7C:90:B4:4F:A0:E6:91:F0:C7:8D:2D:17
Certificate issuer:       /CN=F759E6E90D87109CB242AF1806550668309A19C8
Certificate serial:       4FF374E9CF4BBE939C8BD1D61C36DAAFE854F34A
Authority key identifier: F7:59:E6:E9:0D:87:10:9C:B2:42:AF:18:06:55:06:68:30:9A:19:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F759E6E90D87109CB242AF1806550668309A19C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/34352e3137332e34302e302f32322d3234203d3e20323634373538.roa
Signing time:             Tue 04 Feb 2025 18:08:52 +0000
ROA not before:           Tue 04 Feb 2025 18:03:52 +0000
ROA not after:            Tue 03 Feb 2026 18:08:52 +0000
asID:                     264758
IP address blocks:        45.173.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/F759E6E90D87109CB242AF1806550668309A19C8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/F759E6E90D87109CB242AF1806550668309A19C8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F759E6E90D87109CB242AF1806550668309A19C8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f3:74:e9:cf:4b:be:93:9c:8b:d1:d6:1c:36:da:af:e8:54:f3:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F759E6E90D87109CB242AF1806550668309A19C8
        Validity
            Not Before: Feb  4 18:03:52 2025 GMT
            Not After : Feb  3 18:08:52 2026 GMT
        Subject: CN=6BEA363B3CC9228F7C90B44FA0E691F0C78D2D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:92:5a:fa:2c:2d:f5:bb:43:47:94:5a:a0:
                    3c:0e:d4:aa:75:67:9f:50:82:5e:3c:24:fa:f7:b7:
                    3f:b7:19:6a:16:70:56:43:ad:81:4a:81:5e:f2:8e:
                    7c:0c:57:89:e6:ac:86:0a:ff:5f:4a:10:09:be:37:
                    be:c6:d2:c0:b5:00:c5:8e:43:08:9d:19:b8:c5:c2:
                    b3:b2:da:b3:f3:ae:60:01:0d:a9:9f:9f:0d:54:5b:
                    4e:25:06:8e:46:19:c4:4a:8e:a0:9a:99:8e:ca:63:
                    a6:bf:84:f9:60:32:01:86:40:2d:c7:8f:a8:ce:d7:
                    de:a7:e0:16:a4:0e:88:78:9b:5a:f5:91:b8:f3:dd:
                    e8:7c:1c:ce:61:37:c2:d9:e9:a0:a4:97:7f:1d:de:
                    74:0d:42:4a:8d:88:16:3d:9b:9d:01:06:ef:c6:d1:
                    18:78:fe:40:ac:28:bc:c2:77:87:29:5f:b4:28:4d:
                    35:83:f5:36:2a:e3:50:08:28:e8:29:b1:2a:dc:44:
                    17:cc:54:03:c6:c4:2e:d8:a2:21:3d:55:62:97:13:
                    ff:c2:2c:5e:63:86:a3:9c:0f:b3:47:e6:29:53:4f:
                    01:9d:df:9c:2b:04:4e:bd:38:a3:50:bf:6b:a5:4e:
                    5b:4e:3d:4f:2c:3a:83:fd:c1:07:c7:1f:f1:7e:39:
                    31:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EA:36:3B:3C:C9:22:8F:7C:90:B4:4F:A0:E6:91:F0:C7:8D:2D:17
            X509v3 Authority Key Identifier:
                keyid:F7:59:E6:E9:0D:87:10:9C:B2:42:AF:18:06:55:06:68:30:9A:19:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/F759E6E90D87109CB242AF1806550668309A19C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F759E6E90D87109CB242AF1806550668309A19C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77B68CD300B3846AD0F6A2863A60CF8272BA0DA237BB2839C55E1F88B36D4D58/0/34352e3137332e34302e302f32322d3234203d3e20323634373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:74:24:ad:be:9a:63:7a:96:51:07:6c:be:50:f4:9d:be:72:
         44:d6:9a:6e:00:57:26:f6:2b:2c:f9:4d:b1:d5:7f:8b:23:da:
         63:03:e9:7d:25:d6:90:ac:2b:f6:63:ef:ad:5d:17:32:58:14:
         7f:2e:a9:8e:1c:f6:84:63:3f:29:4d:1c:d7:c7:3d:3f:7a:58:
         01:91:75:8f:6f:55:6f:3a:20:86:ec:16:4d:72:51:de:80:0d:
         b6:40:fa:5e:0b:e9:61:c6:b2:28:59:58:8e:e3:c7:3e:f9:e2:
         69:58:2e:39:25:08:81:d4:dd:7e:b7:2b:68:9e:ed:67:83:3d:
         ff:f6:f9:b6:fc:af:71:18:65:ca:29:94:c8:44:67:72:84:ab:
         b1:34:8d:0d:26:02:9c:86:ec:8f:87:d8:7d:68:38:24:a7:d4:
         8a:69:0a:96:ed:78:18:c2:b8:6a:eb:81:75:a6:56:22:92:ef:
         88:58:98:fe:c7:02:e2:15:8a:45:d0:0d:df:58:8f:77:0a:e8:
         46:f8:ec:26:0d:dc:8d:42:75:87:03:69:dd:1e:5c:38:f6:c7:
         23:64:81:5c:99:a9:f5:44:00:79:e7:02:83:bc:22:0a:8c:58:
         e0:77:9c:30:65:04:22:2a:90:83:9a:46:80:07:6c:56:3e:69:
         23:0c:ff:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:07 2025 by rpki-client