Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D54681FFF997F8040EFA8E1D35BCDC4E674F0823FBACCF06DB89AD7ADECB062/0/34352e3233382e31362e302f32322d3234203d3e20323636383336.roa
File:                     34352e3233382e31362e302f32322d3234203d3e20323636383336.roa (raw, json)
Hash identifier:          Rei3C8Mh+F2PpC4FnJ4zElzJsXiWkloeiMLGzy+FL2g=
Subject key identifier:   57:5A:67:7A:08:54:69:82:C0:38:74:D3:5C:45:FD:A4:5A:60:FB:EE
Certificate issuer:       /CN=9C836840BDCD6AB6E82EDE5BA99AC306F51FB415
Certificate serial:       321BA714C3A776DC772889C4271C3237072944F3
Authority key identifier: 9C:83:68:40:BD:CD:6A:B6:E8:2E:DE:5B:A9:9A:C3:06:F5:1F:B4:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C836840BDCD6AB6E82EDE5BA99AC306F51FB415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D54681FFF997F8040EFA8E1D35BCDC4E674F0823FBACCF06DB89AD7ADECB062/0/34352e3233382e31362e302f32322d3234203d3e20323636383336.roa
Signing time:             Tue 04 Feb 2025 18:39:44 +0000
ROA not before:           Tue 04 Feb 2025 18:34:44 +0000
ROA not after:            Tue 03 Feb 2026 18:39:44 +0000
asID:                     266836
IP address blocks:        45.238.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D54681FFF997F8040EFA8E1D35BCDC4E674F0823FBACCF06DB89AD7ADECB062/0/9C836840BDCD6AB6E82EDE5BA99AC306F51FB415.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D54681FFF997F8040EFA8E1D35BCDC4E674F0823FBACCF06DB89AD7ADECB062/0/9C836840BDCD6AB6E82EDE5BA99AC306F51FB415.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C836840BDCD6AB6E82EDE5BA99AC306F51FB415.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:1b:a7:14:c3:a7:76:dc:77:28:89:c4:27:1c:32:37:07:29:44:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C836840BDCD6AB6E82EDE5BA99AC306F51FB415
        Validity
            Not Before: Feb  4 18:34:44 2025 GMT
            Not After : Feb  3 18:39:44 2026 GMT
        Subject: CN=575A677A08546982C03874D35C45FDA45A60FBEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:47:1e:92:8b:ba:d2:bf:e1:2f:74:99:ef:
                    4c:62:8f:7e:5b:e8:ef:6e:c8:4b:b0:10:51:8c:aa:
                    76:9b:a9:35:2a:77:bd:a2:d4:e3:07:3f:71:3e:28:
                    20:d2:a6:e9:13:2c:e9:4c:e8:7d:42:48:2c:5a:8d:
                    9e:17:c4:80:ab:4b:79:83:40:6f:e3:e3:5c:ce:04:
                    70:86:78:0f:c8:c6:81:58:b0:06:c8:7b:7a:db:24:
                    ae:a4:a7:f6:ea:9a:11:d8:e2:d8:35:fb:90:6e:db:
                    73:dc:69:67:ed:88:5a:21:f0:65:ad:0d:35:68:5b:
                    e0:4d:03:4d:6f:0c:5b:77:7f:de:25:cc:24:e2:c7:
                    b2:03:33:37:65:6a:f3:41:30:2b:6b:0a:27:0e:f1:
                    5f:e7:ed:af:27:05:77:0e:ee:2a:20:c1:6c:58:fe:
                    d3:61:88:fc:18:15:df:bd:d7:33:15:8a:3b:fe:91:
                    3d:d0:69:8b:28:53:39:fd:eb:3e:9d:5b:ae:ba:3a:
                    b0:d2:af:5e:5a:58:27:c5:f7:fe:51:80:ac:da:32:
                    93:08:49:b8:73:0c:0b:d1:c7:ce:ee:f4:32:1b:48:
                    0f:13:02:0f:6c:03:b5:42:d6:5a:96:f1:5f:a7:6f:
                    db:ee:92:1b:5d:5d:0f:62:8f:f7:52:63:f1:6f:15:
                    0b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5A:67:7A:08:54:69:82:C0:38:74:D3:5C:45:FD:A4:5A:60:FB:EE
            X509v3 Authority Key Identifier:
                keyid:9C:83:68:40:BD:CD:6A:B6:E8:2E:DE:5B:A9:9A:C3:06:F5:1F:B4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D54681FFF997F8040EFA8E1D35BCDC4E674F0823FBACCF06DB89AD7ADECB062/0/9C836840BDCD6AB6E82EDE5BA99AC306F51FB415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C836840BDCD6AB6E82EDE5BA99AC306F51FB415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D54681FFF997F8040EFA8E1D35BCDC4E674F0823FBACCF06DB89AD7ADECB062/0/34352e3233382e31362e302f32322d3234203d3e20323636383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:46:9e:7d:a9:56:c8:33:1e:ca:20:ca:da:df:e5:84:1b:ce:
         f4:56:e0:df:7d:e6:d2:c7:16:21:c4:6b:87:82:9d:b4:5b:5d:
         22:c4:e3:0a:05:ed:c6:a4:ae:4e:47:ac:56:65:76:15:ef:28:
         0c:8c:46:b5:36:bb:d3:d6:db:70:98:2b:80:e6:da:ef:04:c5:
         f1:e3:5f:56:be:9e:9f:6e:63:0e:6e:52:d9:98:e1:fa:56:46:
         6d:7d:cb:0f:51:90:08:9f:6f:19:ea:2e:17:7c:9b:81:93:91:
         47:e8:d8:f4:e6:da:0b:b8:15:81:f7:f2:6c:37:42:24:9c:d0:
         b9:63:a8:02:63:5c:fd:d4:cf:4f:d9:25:64:8c:2f:da:93:e5:
         0c:11:99:25:e3:28:1c:15:d9:96:21:03:8b:15:b7:9a:40:6a:
         a3:8c:8c:cc:27:9f:37:d7:e1:a5:c0:c3:6a:5b:23:de:57:21:
         15:41:9d:2f:e8:ec:7a:a4:68:8b:0b:58:b2:11:93:04:72:64:
         55:02:22:5c:bc:96:47:83:2e:36:0c:1d:df:d5:f8:fc:5c:57:
         21:bb:df:e5:1f:30:d1:1a:ff:6e:c8:3e:c6:d5:df:f9:eb:21:
         81:ed:b7:0e:17:c9:16:34:89:71:d3:1d:53:9d:30:7d:5a:7c:
         9e:bd:b7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:35 2025 by rpki-client