Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3130382e302f32322d3234203d3e20323635373431.roa
File:                     34352e3137322e3130382e302f32322d3234203d3e20323635373431.roa (raw, json)
Hash identifier:          fWQ8bAoVZ78ZUOJ4HbY+PClW3Khfr1VWa8oq9fpeUKM=
Subject key identifier:   DA:90:85:CC:03:09:0E:0A:EB:DA:A7:39:35:8A:4E:E1:81:97:F4:B9
Certificate issuer:       /CN=DB64E4361CC10336A50698A495856E73977BB462
Certificate serial:       2BF5B4ED2E4CC4A26E9A55D9D9D334B684B7FD53
Authority key identifier: DB:64:E4:36:1C:C1:03:36:A5:06:98:A4:95:85:6E:73:97:7B:B4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3130382e302f32322d3234203d3e20323635373431.roa
Signing time:             Tue 04 Feb 2025 18:51:55 +0000
ROA not before:           Tue 04 Feb 2025 18:46:55 +0000
ROA not after:            Tue 03 Feb 2026 18:51:55 +0000
asID:                     265741
IP address blocks:        45.172.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f5:b4:ed:2e:4c:c4:a2:6e:9a:55:d9:d9:d3:34:b6:84:b7:fd:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB64E4361CC10336A50698A495856E73977BB462
        Validity
            Not Before: Feb  4 18:46:55 2025 GMT
            Not After : Feb  3 18:51:55 2026 GMT
        Subject: CN=DA9085CC03090E0AEBDAA739358A4EE18197F4B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e9:8f:c9:23:91:9a:09:e3:c8:23:cf:77:fc:
                    df:e0:80:9a:77:3a:3f:1a:0e:c0:63:70:b2:c5:34:
                    d0:16:93:80:a3:39:be:ae:0c:4b:83:ad:f3:25:f8:
                    db:f6:fa:d8:1e:5c:ea:09:ba:4e:ba:78:77:3d:d3:
                    86:09:19:96:1e:d3:86:a2:02:7d:a0:a4:ed:c4:40:
                    34:47:65:af:ad:7b:e1:f4:de:64:e1:92:e5:9c:0b:
                    ac:69:2b:41:c1:90:ea:15:fc:69:c5:a3:64:ac:ed:
                    9a:61:d8:b4:cf:5b:d6:22:d4:7c:a3:4b:d7:c3:82:
                    91:28:dc:b8:25:06:64:12:d0:27:02:7c:25:f3:ed:
                    49:e1:b1:9b:f3:0f:09:79:d6:f7:00:c7:2a:23:2f:
                    3a:98:4c:bf:ab:83:25:83:d3:21:6a:ef:1e:dc:4f:
                    4b:e9:8e:4b:ba:d1:b1:d3:29:0b:c0:b3:db:6d:12:
                    97:cc:85:5b:17:ae:8d:51:c8:b9:c7:a6:6a:c9:22:
                    ab:73:5d:16:91:7f:3d:32:a8:36:48:cf:f3:38:b0:
                    23:60:b8:55:3c:07:3b:95:ca:e5:11:27:76:18:27:
                    27:ce:28:bb:42:48:2f:50:dd:5a:f0:43:2b:2f:b3:
                    53:71:c4:78:c3:d7:ac:cb:e3:e2:03:3c:cb:1c:a6:
                    38:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:90:85:CC:03:09:0E:0A:EB:DA:A7:39:35:8A:4E:E1:81:97:F4:B9
            X509v3 Authority Key Identifier:
                keyid:DB:64:E4:36:1C:C1:03:36:A5:06:98:A4:95:85:6E:73:97:7B:B4:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3130382e302f32322d3234203d3e20323635373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:e7:7c:61:7f:08:c9:d5:3d:27:c8:a0:dc:79:b5:3a:76:ca:
         95:d5:31:14:76:24:c9:70:9d:32:e1:25:ff:0c:7d:83:6c:de:
         dc:31:0d:ff:e1:90:04:8d:3e:62:39:21:45:3c:5a:ad:b3:53:
         21:fd:c4:87:9d:e4:62:aa:2c:40:b8:bb:50:c2:76:a3:01:30:
         69:1c:a9:37:94:95:be:e7:e9:27:7e:a3:dc:81:0d:30:76:ca:
         a9:b7:b0:1d:48:65:0c:bc:25:16:9b:5d:81:73:66:f2:77:14:
         85:01:ac:c3:49:e5:cf:62:ce:eb:5c:5d:fe:a4:5e:9b:57:53:
         c1:68:ba:06:0f:2b:af:25:9c:87:98:eb:36:4d:7d:19:eb:46:
         35:f5:aa:67:b8:b2:cc:29:d8:84:5b:71:98:07:68:b3:04:ef:
         59:ab:6c:9b:5c:37:48:fd:90:a3:80:30:a6:72:ee:45:e3:8b:
         14:24:21:9f:82:d7:84:16:eb:d3:2b:ed:b9:a1:8f:2a:4c:1b:
         ee:2e:aa:56:da:ad:b5:36:01:9c:cc:49:1c:73:12:d6:05:97:
         e4:be:a4:75:05:e2:dd:28:36:0e:de:8e:63:bb:dc:96:45:c3:
         e3:48:15:94:70:96:a6:0a:8d:bf:f3:a6:b7:f5:df:ab:b0:c5:
         2f:ab:1e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:41:54 2025 by rpki-client