Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/34352e3138382e3130382e302f32322d3234203d3e20323635363037.roa
File:                     34352e3138382e3130382e302f32322d3234203d3e20323635363037.roa (raw, json)
Hash identifier:          KhQrcV3BVQF9fpEnjo0EGewv1x2wtihRawSuT3fYJSE=
Subject key identifier:   F9:8E:FA:35:FC:EB:5D:00:61:28:7D:3F:AA:EF:71:0D:A8:20:6E:BB
Certificate issuer:       /CN=C9A3C9150051311C0AD5626033AB0DA33F1BEF9B
Certificate serial:       6FA4F7F3E804FF33549935F02DC2ABA8E2A4F7E3
Authority key identifier: C9:A3:C9:15:00:51:31:1C:0A:D5:62:60:33:AB:0D:A3:3F:1B:EF:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/34352e3138382e3130382e302f32322d3234203d3e20323635363037.roa
Signing time:             Tue 04 Feb 2025 18:37:54 +0000
ROA not before:           Tue 04 Feb 2025 18:32:54 +0000
ROA not after:            Tue 03 Feb 2026 18:37:54 +0000
asID:                     265607
IP address blocks:        45.188.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a4:f7:f3:e8:04:ff:33:54:99:35:f0:2d:c2:ab:a8:e2:a4:f7:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9A3C9150051311C0AD5626033AB0DA33F1BEF9B
        Validity
            Not Before: Feb  4 18:32:54 2025 GMT
            Not After : Feb  3 18:37:54 2026 GMT
        Subject: CN=F98EFA35FCEB5D0061287D3FAAEF710DA8206EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d8:bf:32:c7:90:75:67:c1:86:7e:99:a1:bb:
                    a9:2d:b0:47:04:3d:6a:19:44:54:36:9b:e4:5b:54:
                    3c:52:63:15:ac:08:82:d8:67:74:a5:92:e8:df:82:
                    7f:a5:14:f4:86:20:a4:a4:10:79:82:47:25:a1:91:
                    bb:45:91:49:07:0e:ce:4f:38:ce:89:88:d4:b7:0d:
                    01:c8:28:b8:ad:52:1a:48:98:8c:54:bc:97:cd:59:
                    b7:da:94:72:1b:14:a1:a1:aa:16:8c:cb:ab:c3:ba:
                    ac:ca:a6:89:17:95:bf:bb:9f:ad:3c:c3:12:6b:4d:
                    ec:de:b8:e8:47:c0:36:e4:eb:c4:68:df:23:ff:dd:
                    81:1e:a9:77:2e:80:bf:45:4e:ff:46:cd:4c:04:9b:
                    44:2c:c7:b2:71:f4:49:1f:12:0f:0b:81:ee:f9:29:
                    e5:51:4c:2f:eb:81:ba:80:ad:af:bf:6b:69:0b:f0:
                    a1:3c:f6:8e:49:d7:83:19:5b:a1:ca:80:65:fe:f0:
                    fd:14:57:5f:58:99:69:4a:6e:b2:59:c7:3d:b0:02:
                    78:e5:8d:16:97:0a:82:7f:c1:41:51:6c:67:c8:43:
                    f0:be:6c:5b:3f:dd:6a:c7:56:9f:df:23:83:e7:af:
                    30:eb:42:93:39:24:87:29:95:0b:e9:d9:dd:ee:23:
                    3d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8E:FA:35:FC:EB:5D:00:61:28:7D:3F:AA:EF:71:0D:A8:20:6E:BB
            X509v3 Authority Key Identifier:
                keyid:C9:A3:C9:15:00:51:31:1C:0A:D5:62:60:33:AB:0D:A3:3F:1B:EF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/34352e3138382e3130382e302f32322d3234203d3e20323635363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:b0:04:08:e3:9b:2c:92:36:cf:a8:6e:6d:f8:c8:a7:c3:34:
         9e:82:da:40:7a:61:0e:6c:e8:80:b1:4e:4a:88:28:08:da:1e:
         ea:15:fb:aa:a2:ef:44:b1:c0:77:87:b5:95:62:e9:90:56:03:
         ea:76:b0:e4:52:0b:ba:68:28:86:e7:ca:89:e4:81:fc:ed:c1:
         3e:ba:be:51:89:7c:d9:4b:0d:64:e2:f3:5e:18:ee:34:25:47:
         8a:b3:4b:87:e6:4c:71:84:5a:39:87:a1:51:c3:4d:af:9f:6e:
         ca:e2:03:9c:ce:4c:9a:ce:86:7c:de:b1:b3:df:d0:89:a6:4f:
         66:31:17:b6:21:92:8a:6e:f6:38:fc:4b:c3:aa:a5:94:7a:2f:
         89:4f:42:69:f9:b2:60:99:c0:c9:55:18:06:0a:d3:9c:bd:f5:
         d3:fe:46:f0:bf:21:77:06:de:54:b1:58:7b:68:b5:cf:8a:46:
         fc:2d:4b:69:d7:b2:63:1b:30:50:92:45:c9:e6:4f:b7:56:0e:
         7b:76:8f:a9:6c:b8:e7:ae:cc:55:4c:5a:f1:3c:d5:00:72:be:
         48:04:5f:07:d1:7d:44:03:e4:90:ac:a1:05:73:8b:35:3d:64:
         15:77:cf:f7:af:76:8f:18:ca:d7:c5:51:0a:07:05:32:89:b3:
         47:df:f3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:53:40 2025 by rpki-client