Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/34352e3232362e35392e302f32342d3234203d3e20323633313730.roa
File:                     34352e3232362e35392e302f32342d3234203d3e20323633313730.roa (raw, json)
Hash identifier:          2rvlLIXFk90B4qZ59hy57++bK7AEFNyDQXShpqq0MbM=
Subject key identifier:   94:19:9A:39:63:26:FE:90:3D:38:6D:A4:39:9A:B0:4A:35:41:16:6C
Certificate issuer:       /CN=4C07ED76182959652B8E9E133053015F589BFC7F
Certificate serial:       16BB33ADDF1A5F43D84F45073200AAB9853B794B
Authority key identifier: 4C:07:ED:76:18:29:59:65:2B:8E:9E:13:30:53:01:5F:58:9B:FC:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/34352e3232362e35392e302f32342d3234203d3e20323633313730.roa
Signing time:             Fri 06 Jun 2025 04:21:08 +0000
ROA not before:           Fri 06 Jun 2025 04:16:08 +0000
ROA not after:            Fri 05 Jun 2026 04:21:08 +0000
asID:                     263170
IP address blocks:        45.226.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bb:33:ad:df:1a:5f:43:d8:4f:45:07:32:00:aa:b9:85:3b:79:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C07ED76182959652B8E9E133053015F589BFC7F
        Validity
            Not Before: Jun  6 04:16:08 2025 GMT
            Not After : Jun  5 04:21:08 2026 GMT
        Subject: CN=94199A396326FE903D386DA4399AB04A3541166C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:03:f9:4d:cc:19:37:2f:27:a1:db:e8:3d:61:
                    1d:60:93:39:89:eb:6e:96:6e:ff:0a:7b:da:52:1a:
                    f7:0c:21:aa:9a:ed:e8:84:04:c1:72:bd:49:03:4e:
                    8f:e9:89:98:dd:3d:36:87:f6:67:ca:1c:69:84:10:
                    6c:b3:45:c0:b2:b8:80:47:ef:03:8f:42:5b:4a:21:
                    8c:95:87:fd:8a:6b:68:cd:45:f3:ed:12:5e:d6:4f:
                    33:3e:a7:96:d0:c5:07:08:43:c6:ac:13:73:65:a1:
                    36:a8:76:f6:30:e9:74:cc:05:64:c6:85:c4:73:c5:
                    e6:37:d5:66:55:34:df:53:bc:ee:24:97:5e:e2:dd:
                    83:65:fb:e7:d6:2d:35:33:6d:7a:78:75:16:8c:79:
                    c7:46:d5:09:ab:24:51:a9:a4:fa:37:fe:55:b6:86:
                    31:85:72:39:a6:ed:74:fd:3f:4a:3c:47:7a:a1:53:
                    85:e5:26:cf:b1:1c:a7:51:93:a2:f6:f6:02:d9:8f:
                    d9:ca:73:c8:f1:26:ad:55:56:b8:9e:79:5a:04:8c:
                    7e:c9:0d:39:74:3a:26:87:00:93:7b:de:e4:17:f6:
                    b9:86:f6:ac:23:35:7e:d8:59:24:2d:a2:0f:37:d1:
                    36:bf:b4:72:fd:4e:c8:63:c8:5e:ef:7a:7f:99:79:
                    09:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:19:9A:39:63:26:FE:90:3D:38:6D:A4:39:9A:B0:4A:35:41:16:6C
            X509v3 Authority Key Identifier:
                keyid:4C:07:ED:76:18:29:59:65:2B:8E:9E:13:30:53:01:5F:58:9B:FC:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/34352e3232362e35392e302f32342d3234203d3e20323633313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:ef:42:33:b7:96:59:c9:e5:4a:57:5a:63:43:a1:ca:29:d9:
         f2:ab:2b:4d:d9:60:4b:78:c7:ad:4e:55:aa:c4:5a:e7:50:58:
         dd:49:86:24:80:0a:9c:f0:74:db:73:d1:6a:f5:67:33:59:7b:
         4e:2f:25:16:c0:ea:f1:2a:2c:ca:d0:05:d4:a2:31:55:01:4c:
         19:9c:37:86:94:38:77:2b:9b:bd:7f:ce:6f:16:10:95:90:73:
         da:b0:b2:cd:47:ac:4d:aa:6b:e2:32:30:4b:a1:3e:e9:d2:35:
         dc:22:08:fb:d1:74:de:82:1d:22:a8:ea:90:91:d0:ed:7c:1d:
         01:0a:70:12:ca:01:08:40:e9:4d:ae:58:03:ca:72:3f:d3:82:
         dc:80:97:bf:ab:08:fe:cd:12:c0:59:cf:ce:1c:78:8b:58:fa:
         2d:04:e6:38:8b:f7:89:3d:37:c3:69:72:8e:bf:37:96:4d:e6:
         43:a6:60:33:1c:00:1f:ea:c0:a2:af:a3:19:cf:b0:13:a7:0c:
         2e:0b:70:2b:c7:48:e6:9f:31:b7:cb:98:71:ca:d3:d4:79:1e:
         b9:75:df:50:34:93:0b:5b:8e:06:13:d3:a0:f0:de:92:f1:51:
         ad:1a:3d:19:29:32:ea:ed:43:56:ab:51:28:62:cf:ab:87:67:
         ea:88:ca:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:21:44 2025 by rpki-client