Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/34352e3233312e3232342e302f32322d3234203d3e20323636373335.roa
File:                     34352e3233312e3232342e302f32322d3234203d3e20323636373335.roa (raw, json)
Hash identifier:          KSQf844yl3THpESi8ejIbnSA8FtZh1VVEqb/kNiHh8c=
Subject key identifier:   58:4F:56:18:45:11:16:39:E4:18:68:5F:96:56:14:58:D1:76:80:E5
Certificate issuer:       /CN=1B0F0F43ADFB6665EE40662998FE2F940C303C66
Certificate serial:       3D9A069DEDFC9155028B01F2D5C8C1B65A1B7E97
Authority key identifier: 1B:0F:0F:43:AD:FB:66:65:EE:40:66:29:98:FE:2F:94:0C:30:3C:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/34352e3233312e3232342e302f32322d3234203d3e20323636373335.roa
Signing time:             Tue 04 Feb 2025 18:15:04 +0000
ROA not before:           Tue 04 Feb 2025 18:10:04 +0000
ROA not after:            Tue 03 Feb 2026 18:15:04 +0000
asID:                     266735
IP address blocks:        45.231.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:9a:06:9d:ed:fc:91:55:02:8b:01:f2:d5:c8:c1:b6:5a:1b:7e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B0F0F43ADFB6665EE40662998FE2F940C303C66
        Validity
            Not Before: Feb  4 18:10:04 2025 GMT
            Not After : Feb  3 18:15:04 2026 GMT
        Subject: CN=584F561845111639E418685F96561458D17680E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:d1:8c:51:71:3e:40:06:01:d3:b9:a4:de:
                    90:cc:07:b1:26:08:56:68:a0:bd:14:b1:0c:5b:b2:
                    8e:d4:ca:b0:9c:76:a9:5b:19:c7:a9:78:bc:53:c6:
                    de:6b:35:19:d5:ae:37:dd:7c:8a:2c:2d:00:5b:a0:
                    22:84:ac:93:ab:50:58:10:f0:93:cd:f8:c8:74:a1:
                    e1:53:61:dd:07:f9:ac:d5:ec:a4:8e:95:2b:8c:c1:
                    a7:4a:3e:7c:ae:1d:39:ef:6b:8a:95:4e:16:25:e2:
                    e5:fe:11:38:c4:22:d9:33:b4:6b:ca:79:3b:58:37:
                    8c:69:a6:f9:e6:26:ec:c5:a1:ff:3d:51:41:a1:83:
                    28:83:9c:d1:a2:78:b7:28:7d:96:7e:50:9d:74:8a:
                    92:0c:4e:44:74:cf:fc:6b:90:7d:9a:70:a2:4b:c6:
                    f9:9c:8b:40:f8:e6:9e:c0:ef:27:48:b0:2d:f5:32:
                    ca:fe:c3:de:d3:bd:0f:6f:b1:1c:41:46:a8:8a:35:
                    95:c7:53:15:72:26:19:9c:c7:5d:c0:6f:f7:87:74:
                    a0:b9:3f:b8:29:3a:a7:c5:23:f2:4f:f5:d4:55:74:
                    d7:d8:5b:f5:1b:64:16:c9:60:c3:10:85:a6:58:59:
                    4b:b6:d4:3a:91:78:9c:04:64:9d:9c:2a:06:f0:1e:
                    cc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4F:56:18:45:11:16:39:E4:18:68:5F:96:56:14:58:D1:76:80:E5
            X509v3 Authority Key Identifier:
                keyid:1B:0F:0F:43:AD:FB:66:65:EE:40:66:29:98:FE:2F:94:0C:30:3C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F0F43ADFB6665EE40662998FE2F940C303C66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D3305C5D5B3CB7388ADA7678ECFBF561BF353F73851CA67485BD909533A6084/0/34352e3233312e3232342e302f32322d3234203d3e20323636373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:34:09:cd:da:c8:f3:ed:d0:99:d8:d1:06:f1:da:d9:4a:43:
         ce:12:d1:a5:0f:18:1b:ab:3c:3e:57:d9:69:cd:93:49:fd:4b:
         fc:5c:37:6d:4f:74:7c:8a:a5:ea:84:a9:fd:36:a4:44:10:39:
         df:b2:69:30:db:af:48:6e:39:15:67:34:28:9c:66:59:15:73:
         b6:8c:e0:dd:33:12:32:d3:56:20:f2:d0:2d:c5:99:4a:0a:a6:
         b2:99:e3:37:1e:d0:09:07:31:78:e3:b8:ef:e7:a5:6a:26:bd:
         fe:dc:72:a5:9e:77:3d:77:d8:fd:a6:e3:6f:57:65:0c:a7:b7:
         cf:be:7b:70:62:d9:9e:80:0e:86:c9:2d:0a:be:46:b2:72:bc:
         cf:ad:a9:4a:3c:2e:f7:fb:72:b7:b6:78:bc:8a:3a:c5:67:84:
         34:60:b4:1a:b8:24:63:73:8a:62:3b:9f:da:58:d7:6c:f3:b7:
         a8:2a:5a:6c:94:ea:55:ef:40:ac:a5:fe:15:4e:bb:e9:1a:ff:
         47:5c:67:8b:36:61:ea:a8:77:09:66:d6:25:aa:aa:0d:60:7f:
         14:21:0f:02:41:99:18:a5:6e:0b:8e:dc:d4:7e:e8:da:c3:76:
         56:9b:fe:ae:88:3a:82:5d:a5:6f:40:65:a4:44:4c:8a:c0:d6:
         28:b2:9f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:52:58 2025 by rpki-client