Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B4C5EFFD8363B67E9463A586F0FC4ABD4945615AC31DA8D3B065447527EA06B/0/34352e37312e31362e302f32322d3234203d3e20323635383237.roa
File:                     34352e37312e31362e302f32322d3234203d3e20323635383237.roa (raw, json)
Hash identifier:          6HdywZXkZeZcRhv77OhVg6k+HZGKGk52VvXMFvfLC1Q=
Subject key identifier:   D1:9E:61:9A:C5:5F:65:5B:95:86:CE:09:DA:CA:DC:60:52:03:F5:30
Certificate issuer:       /CN=6573871E9B3F666876C77FFBBF374043AB7939BA
Certificate serial:       4C3036FDB27B7A621E47ACDABBD9DC7549A0E834
Authority key identifier: 65:73:87:1E:9B:3F:66:68:76:C7:7F:FB:BF:37:40:43:AB:79:39:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6573871E9B3F666876C77FFBBF374043AB7939BA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B4C5EFFD8363B67E9463A586F0FC4ABD4945615AC31DA8D3B065447527EA06B/0/34352e37312e31362e302f32322d3234203d3e20323635383237.roa
Signing time:             Tue 04 Feb 2025 18:15:58 +0000
ROA not before:           Tue 04 Feb 2025 18:10:58 +0000
ROA not after:            Tue 03 Feb 2026 18:15:58 +0000
asID:                     265827
IP address blocks:        45.71.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B4C5EFFD8363B67E9463A586F0FC4ABD4945615AC31DA8D3B065447527EA06B/0/6573871E9B3F666876C77FFBBF374043AB7939BA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B4C5EFFD8363B67E9463A586F0FC4ABD4945615AC31DA8D3B065447527EA06B/0/6573871E9B3F666876C77FFBBF374043AB7939BA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6573871E9B3F666876C77FFBBF374043AB7939BA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:30:36:fd:b2:7b:7a:62:1e:47:ac:da:bb:d9:dc:75:49:a0:e8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6573871E9B3F666876C77FFBBF374043AB7939BA
        Validity
            Not Before: Feb  4 18:10:58 2025 GMT
            Not After : Feb  3 18:15:58 2026 GMT
        Subject: CN=D19E619AC55F655B9586CE09DACADC605203F530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:aa:45:53:e3:76:64:fa:81:8f:08:f1:63:75:
                    4c:6b:30:2d:56:60:cd:ca:7f:25:20:bc:39:82:88:
                    5c:e3:fe:2c:c2:b9:42:7e:69:d4:41:61:54:ba:e7:
                    a0:eb:14:8d:fb:4e:61:df:e0:75:b9:46:bb:4e:23:
                    a8:d1:3b:03:e4:91:a9:83:f9:a0:e7:53:fc:c4:6d:
                    6d:71:49:35:8d:64:0a:2e:b1:92:d3:18:ea:6f:9c:
                    65:41:83:25:6f:e0:03:00:ec:f4:b0:5e:4d:14:8c:
                    75:cd:1e:0e:9b:6e:f2:d6:01:09:be:6b:48:6c:a7:
                    a6:16:b3:b4:2f:09:f4:3a:d4:f7:aa:e0:42:c7:31:
                    61:b3:12:2d:fb:1e:8f:c1:65:d1:98:3b:2a:98:a8:
                    41:7d:06:ba:e7:0f:c6:7a:d6:2d:e1:75:22:b1:55:
                    14:05:d3:5e:69:4f:e8:c1:6a:fd:1f:1a:27:6d:21:
                    d9:1c:f8:ee:3d:61:23:ee:74:66:2f:53:97:fe:0b:
                    cf:ed:dd:08:57:ad:09:fc:f0:b9:b2:2c:1c:cc:97:
                    90:51:51:43:3c:8b:db:8f:c7:5e:13:22:1f:a8:b3:
                    55:9a:47:0c:6b:16:21:9c:e4:3b:cb:b2:e1:db:36:
                    dc:24:7d:4b:c3:be:49:ce:e7:89:ee:c6:24:a7:6d:
                    25:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9E:61:9A:C5:5F:65:5B:95:86:CE:09:DA:CA:DC:60:52:03:F5:30
            X509v3 Authority Key Identifier:
                keyid:65:73:87:1E:9B:3F:66:68:76:C7:7F:FB:BF:37:40:43:AB:79:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B4C5EFFD8363B67E9463A586F0FC4ABD4945615AC31DA8D3B065447527EA06B/0/6573871E9B3F666876C77FFBBF374043AB7939BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6573871E9B3F666876C77FFBBF374043AB7939BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B4C5EFFD8363B67E9463A586F0FC4ABD4945615AC31DA8D3B065447527EA06B/0/34352e37312e31362e302f32322d3234203d3e20323635383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:69:2d:25:c1:47:a5:33:fa:d5:77:d1:88:68:98:07:28:54:
         3a:fc:49:f2:d9:a4:75:f5:8b:ac:66:fb:c9:af:28:ab:87:36:
         f9:74:62:ef:4a:0e:f1:b4:cd:74:d6:43:75:93:aa:b7:df:e1:
         da:74:71:74:bd:de:8f:cc:96:a6:3e:5f:da:5e:b6:b5:49:1a:
         49:bc:fa:6d:f4:b6:a0:b6:63:18:81:15:5e:b3:9a:de:6e:8d:
         55:2c:05:a1:00:aa:b9:cd:43:18:af:78:db:d1:9f:75:58:11:
         7a:2e:16:4e:e7:c5:29:94:41:e2:a7:56:a7:30:c4:a6:a7:fc:
         27:b7:1c:28:6d:55:e5:b8:d5:65:a3:48:b6:ce:b9:06:cd:2b:
         de:f8:d0:ac:5a:8e:ef:dd:48:10:6b:0e:5e:f3:c1:f0:ad:db:
         7b:29:f2:32:45:e1:db:7f:fa:a5:1a:c6:c4:a0:8d:1f:7f:c1:
         1c:bd:ab:c7:01:94:c4:0d:f5:36:7f:ed:95:20:7a:75:8e:da:
         31:c6:3a:07:ef:eb:ef:78:74:01:fe:7c:b9:93:10:76:3f:55:
         b2:8d:da:12:95:d5:65:b7:13:85:2e:5b:7c:28:a4:6d:37:c5:
         22:ec:9d:f7:2c:97:b9:89:6e:a0:14:3b:18:f7:f8:6a:24:9c:
         fa:2f:8a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:58:26 2025 by rpki-client