Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/34352e3137372e3137362e302f32322d3234203d3e20323730313538.roa
File:                     34352e3137372e3137362e302f32322d3234203d3e20323730313538.roa (raw, json)
Hash identifier:          30mGLwD7yXzTD6Qlqgi0bs5eSm7BssKOnUJXgy7anNI=
Subject key identifier:   A6:D3:4B:6A:4F:46:2E:D1:EC:4D:F9:4F:AE:88:7C:A7:F8:01:CD:41
Certificate issuer:       /CN=1253F5565479B7C7B04A2795544458932EC06F6C
Certificate serial:       7022EFF0A9DDDF39A4439DBED32BBAE4EF64FD2A
Authority key identifier: 12:53:F5:56:54:79:B7:C7:B0:4A:27:95:54:44:58:93:2E:C0:6F:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/34352e3137372e3137362e302f32322d3234203d3e20323730313538.roa
Signing time:             Tue 04 Feb 2025 18:22:26 +0000
ROA not before:           Tue 04 Feb 2025 18:17:26 +0000
ROA not after:            Tue 03 Feb 2026 18:22:26 +0000
asID:                     270158
IP address blocks:        45.177.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:22:ef:f0:a9:dd:df:39:a4:43:9d:be:d3:2b:ba:e4:ef:64:fd:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1253F5565479B7C7B04A2795544458932EC06F6C
        Validity
            Not Before: Feb  4 18:17:26 2025 GMT
            Not After : Feb  3 18:22:26 2026 GMT
        Subject: CN=A6D34B6A4F462ED1EC4DF94FAE887CA7F801CD41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:29:d5:52:b9:29:20:29:a9:18:3a:cf:86:19:
                    20:30:69:de:1b:44:84:87:22:8b:2d:76:f1:e1:78:
                    31:f1:3a:45:7f:82:28:dc:b9:bf:a6:c7:45:f8:9f:
                    44:5f:ec:a8:94:66:f4:04:68:e0:72:0b:63:4c:b2:
                    33:76:df:86:9e:00:99:b7:58:0e:33:e2:fc:ab:55:
                    96:51:85:af:38:6f:33:d5:21:93:e8:14:8d:36:ba:
                    be:2f:be:3a:e1:88:62:8a:d8:fa:8a:ff:0e:1d:5e:
                    94:b5:ba:73:c9:3f:f6:c3:cb:88:a2:d3:52:14:db:
                    1a:95:88:a8:ea:6c:c1:4f:7d:fe:80:95:8c:39:5b:
                    60:9d:db:35:2e:a8:ba:d9:9b:b5:c6:a4:79:32:58:
                    14:25:15:7d:cb:0c:b9:6c:2c:7d:d2:58:2c:3a:bd:
                    88:55:66:b4:3d:b9:d8:be:80:4c:aa:50:88:38:63:
                    3d:e5:f8:b7:93:75:9d:36:b9:4f:19:bb:1b:29:25:
                    11:bf:37:05:a5:24:a6:a2:ca:da:cb:31:d9:51:8d:
                    95:a5:dd:b5:cc:27:9e:91:aa:9d:49:0d:67:4e:3e:
                    55:aa:0e:e1:3c:40:50:46:43:42:ce:8a:d7:0f:6e:
                    80:de:d2:02:f9:4b:aa:bc:a7:79:cb:f5:83:79:1a:
                    51:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D3:4B:6A:4F:46:2E:D1:EC:4D:F9:4F:AE:88:7C:A7:F8:01:CD:41
            X509v3 Authority Key Identifier:
                keyid:12:53:F5:56:54:79:B7:C7:B0:4A:27:95:54:44:58:93:2E:C0:6F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/34352e3137372e3137362e302f32322d3234203d3e20323730313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:02:01:97:8d:42:1c:cc:33:7a:ef:73:57:05:09:6f:bd:e2:
         31:c5:a7:7b:fc:ee:36:4c:42:f3:bd:cd:3d:ac:e3:11:e8:0a:
         d9:31:35:0a:a3:f6:f7:82:75:78:10:eb:c1:86:88:9c:82:0c:
         02:b1:15:a4:7c:f7:d8:02:2f:e6:86:28:18:e0:87:b4:49:9a:
         2e:0f:ee:37:bd:45:dd:23:56:b0:8a:ba:30:1c:55:1f:64:f3:
         d7:41:76:6d:1b:9d:bb:6d:eb:b1:6a:73:cf:5c:73:9c:28:8c:
         e0:1e:6d:0a:0f:9f:4a:b7:01:ce:88:38:d4:60:86:d8:a9:9a:
         db:6e:7f:81:6e:6c:b5:97:a8:1f:10:04:de:1e:b0:aa:52:69:
         cb:9e:c7:fe:a7:c4:21:62:82:47:b3:00:fd:60:2e:29:ae:19:
         2f:7c:c2:d9:07:ff:a7:5c:a7:9e:4e:b5:f7:8a:ed:74:df:cd:
         76:2e:95:c2:08:4e:13:ef:a9:de:92:14:33:0f:24:61:02:bc:
         7e:6a:d9:1a:7a:41:f9:ba:3e:a9:73:f8:eb:c8:c9:cd:3b:e5:
         db:d9:ae:f1:02:6a:60:07:45:ba:4a:c4:cd:b3:a0:6d:d9:b9:
         26:7b:40:c2:b4:3f:e0:23:90:2f:f6:19:a9:c0:05:ae:eb:38:
         ce:eb:94:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:59 2025 by rpki-client