Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138302e302f32322d3232203d3e20323637373034.roa
File:                     34352e3136322e3138302e302f32322d3232203d3e20323637373034.roa (raw, json)
Hash identifier:          n7OaqPymjd5l5NYhQoWBi3KRsSbTBVcX/cN1vIUbAzg=
Subject key identifier:   1D:91:9D:5D:E2:0A:D8:90:DF:AD:82:50:9E:5C:EB:BB:5C:6E:4F:48
Certificate issuer:       /CN=BD9037968409387615A2867C81BDF4EE88009203
Certificate serial:       184F1BD18DE7A7021F95476F99E19A21E49DB3BA
Authority key identifier: BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138302e302f32322d3232203d3e20323637373034.roa
Signing time:             Thu 29 May 2025 19:20:28 +0000
ROA not before:           Thu 29 May 2025 19:15:28 +0000
ROA not after:            Thu 28 May 2026 19:20:28 +0000
asID:                     267704
IP address blocks:        45.162.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4f:1b:d1:8d:e7:a7:02:1f:95:47:6f:99:e1:9a:21:e4:9d:b3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9037968409387615A2867C81BDF4EE88009203
        Validity
            Not Before: May 29 19:15:28 2025 GMT
            Not After : May 28 19:20:28 2026 GMT
        Subject: CN=1D919D5DE20AD890DFAD82509E5CEBBB5C6E4F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ae:71:36:e4:de:54:30:01:8f:7f:f4:f4:79:
                    ff:3f:3b:92:0a:44:03:dc:65:17:d1:3e:ba:f1:5b:
                    44:7a:4a:9f:86:39:62:f1:cc:f5:cf:22:b2:20:38:
                    e2:f8:8b:4b:ef:59:75:ff:01:d1:7d:8e:86:2c:a9:
                    a8:44:ab:ef:65:09:3e:1e:42:87:fc:f9:79:b4:1b:
                    0a:43:f5:ba:9d:07:65:cc:7b:2e:e0:9c:ef:1a:a1:
                    aa:86:0a:d5:dc:3f:ca:50:d1:2e:b4:1f:22:0a:bf:
                    bd:6d:fe:ca:1b:53:2b:a8:89:15:63:0f:f6:18:56:
                    67:98:0c:32:b2:df:82:9f:5c:92:3d:51:58:70:28:
                    5f:00:1f:a9:bd:28:c1:63:2f:01:ca:64:6e:3f:e7:
                    4e:c8:c5:8b:8b:48:f6:3e:ca:36:8b:f6:3f:aa:69:
                    2b:22:da:b5:3b:ff:40:b5:04:2b:82:b9:a1:c1:7a:
                    ca:09:1f:8c:9e:6b:a9:67:13:d9:bd:5f:19:61:e1:
                    21:9e:31:ec:ca:4d:20:76:b7:41:6f:9f:2e:80:d5:
                    7f:26:a5:8a:37:ea:f1:bc:cb:83:a0:52:0a:28:d8:
                    22:43:f7:8f:cd:f0:06:2d:40:6e:94:6c:f4:10:eb:
                    8a:72:8b:66:1c:f9:c0:0e:60:e3:57:dc:6d:41:5b:
                    a5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:91:9D:5D:E2:0A:D8:90:DF:AD:82:50:9E:5C:EB:BB:5C:6E:4F:48
            X509v3 Authority Key Identifier:
                keyid:BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138302e302f32322d3232203d3e20323637373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:8e:3a:5b:36:c8:bf:16:35:28:fb:26:f9:34:45:dc:1e:b6:
         62:2c:51:1e:44:61:20:3c:73:d5:61:1f:4c:58:50:d6:45:15:
         a8:bd:77:8d:e6:4f:7f:41:ba:f8:3e:70:11:8f:c9:f7:32:fa:
         76:87:76:6b:84:a1:2e:d3:7f:dd:f5:9c:c7:03:2f:74:99:5b:
         8a:61:41:e4:41:66:9f:f8:74:56:12:d7:88:5c:f3:cb:e4:91:
         8b:f8:b2:2f:16:6d:99:48:55:75:e5:b1:aa:ad:f1:95:13:3b:
         dd:f8:f6:99:c2:45:4f:a8:b0:ea:69:e6:a2:65:6e:4c:40:4b:
         67:fa:bb:77:f3:ea:fc:55:ce:66:2c:82:45:b2:21:e3:24:3f:
         ec:4b:b6:56:40:55:9d:0e:d4:c4:de:e6:26:fc:1f:d8:52:f1:
         cb:c7:6a:36:21:08:83:33:ef:43:0c:e9:5e:dc:14:9f:67:e6:
         73:d2:1d:5b:fd:83:ad:20:62:4b:36:93:7d:78:be:96:50:39:
         1b:38:e7:1c:c1:be:19:7d:13:c3:14:4c:fa:b3:e5:cc:28:47:
         94:21:70:6e:bf:11:a6:4b:58:53:2d:c8:7f:46:0c:65:a8:e1:
         1b:b6:77:1b:42:82:18:2a:43:b5:55:3b:22:90:37:45:ac:5d:
         7e:11:c4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:08:35 2025 by rpki-client