Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138312e302f32342d3234203d3e20323637373034.roa
File:                     34352e3136322e3138312e302f32342d3234203d3e20323637373034.roa (raw, json)
Hash identifier:          pDACbHJ9vO/VZN6Wh7ZgZ1nHbXKKRK+mXnO4eU8CaEo=
Subject key identifier:   66:96:DE:D2:34:AB:08:D1:A7:92:E0:56:6D:E5:5A:C0:41:2A:AC:B7
Certificate issuer:       /CN=BD9037968409387615A2867C81BDF4EE88009203
Certificate serial:       1664BC929E8C93D6EE5852194B06356ED9576E6A
Authority key identifier: BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138312e302f32342d3234203d3e20323637373034.roa
Signing time:             Thu 29 May 2025 19:20:29 +0000
ROA not before:           Thu 29 May 2025 19:15:29 +0000
ROA not after:            Thu 28 May 2026 19:20:29 +0000
asID:                     267704
IP address blocks:        45.162.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:64:bc:92:9e:8c:93:d6:ee:58:52:19:4b:06:35:6e:d9:57:6e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9037968409387615A2867C81BDF4EE88009203
        Validity
            Not Before: May 29 19:15:29 2025 GMT
            Not After : May 28 19:20:29 2026 GMT
        Subject: CN=6696DED234AB08D1A792E0566DE55AC0412AACB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f8:b6:35:4d:26:b3:77:63:91:95:71:99:d4:
                    c3:c5:a6:3b:56:ea:e0:c0:36:57:42:39:c7:42:5c:
                    8c:27:06:47:d8:6a:20:c6:0a:ff:d2:31:97:3e:da:
                    96:dc:d3:23:ad:56:77:90:7d:7b:ff:e7:73:ba:7b:
                    fa:1e:3d:08:5a:37:e8:eb:b8:e6:f2:31:4f:c4:98:
                    a0:db:be:06:2b:68:4d:60:7a:44:25:87:95:c7:30:
                    57:ec:8e:40:62:b5:f4:b2:2d:70:16:1f:68:e4:e8:
                    b8:32:71:c3:9c:c1:bf:5f:94:4d:6e:52:d4:1d:28:
                    a5:1f:75:c4:6c:99:6d:e6:27:ed:17:49:64:dd:d2:
                    7b:16:e4:39:f8:f3:82:72:af:b3:5f:ee:16:50:6e:
                    81:cc:0a:5b:f2:14:1a:e4:e5:bf:6f:00:44:e1:de:
                    08:00:e0:1c:72:24:f5:10:40:f4:1b:c3:2e:fb:ba:
                    c0:c6:ec:0d:eb:65:80:43:f8:61:08:bd:4e:01:18:
                    da:81:43:0e:56:30:11:d0:6d:c3:58:b3:69:08:b3:
                    f2:32:2c:61:16:5f:59:2a:a8:06:f6:ac:38:39:8c:
                    48:aa:ba:d5:95:58:93:c4:d3:33:89:05:99:a2:b6:
                    5a:fb:a0:19:2a:5b:76:b0:75:0a:7e:ef:28:bb:52:
                    1f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:96:DE:D2:34:AB:08:D1:A7:92:E0:56:6D:E5:5A:C0:41:2A:AC:B7
            X509v3 Authority Key Identifier:
                keyid:BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138312e302f32342d3234203d3e20323637373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:01:f2:1c:0d:89:a6:8c:f5:1a:d4:f8:d8:59:39:cc:e6:fc:
         f4:68:04:ab:fa:73:d4:87:10:2a:5b:b5:81:96:2e:8c:27:83:
         fe:52:de:dd:3c:30:5a:c7:4c:d8:71:33:a1:fc:d4:d3:b5:0a:
         93:d9:54:8f:ae:23:9e:26:c9:f8:16:25:08:17:c9:62:05:d3:
         34:d2:91:63:e2:5d:d6:be:e5:0f:53:5f:4c:e2:f0:4d:c5:e8:
         84:b9:bd:8c:04:3e:c7:c2:6f:6a:85:7c:db:2e:ed:51:9f:27:
         6a:c7:2d:a2:93:a8:8e:27:e9:74:3c:15:03:e9:a0:18:3a:0b:
         70:c9:f9:00:44:89:16:3a:04:83:93:40:8c:b5:af:e4:9a:98:
         44:80:b3:8e:e8:07:6c:d0:26:74:a1:52:2c:65:99:d0:ef:13:
         59:dc:c3:83:49:f9:06:0b:1c:02:30:5a:57:74:68:62:90:a4:
         d8:24:ca:72:b5:34:da:9b:fc:13:1b:98:fb:b5:07:67:08:9e:
         36:68:f1:5e:eb:cd:ed:27:a8:b7:fe:af:c7:bc:a0:9b:ba:41:
         11:f9:aa:0d:7b:cf:26:11:e6:f8:09:d9:76:93:c6:b4:ee:6f:
         e3:62:9f:91:69:ee:28:38:d1:d8:cd:c4:f6:7c:e2:2a:1e:a0:
         0a:54:6a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:08:21 2025 by rpki-client