Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/34352e3138362e32302e302f32322d3232203d3e20323639373938.roa
File:                     34352e3138362e32302e302f32322d3232203d3e20323639373938.roa (raw, json)
Hash identifier:          5xGuNkeebE9rs+KpkHSvX6EjcGzvCHDVORPt1mN5xFQ=
Subject key identifier:   8C:63:05:32:31:84:1F:85:A9:FE:0D:B1:73:56:B2:2B:0A:FD:AE:C4
Certificate issuer:       /CN=EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED
Certificate serial:       45C5BAF2CD71260CFA8EF7FCEF6A2B5D98DC4F07
Authority key identifier: EA:7A:F6:DB:EB:46:9C:DF:D2:0B:7B:6B:09:28:D4:CC:B4:7C:D6:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/34352e3138362e32302e302f32322d3232203d3e20323639373938.roa
Signing time:             Tue 04 Feb 2025 18:36:52 +0000
ROA not before:           Tue 04 Feb 2025 18:31:52 +0000
ROA not after:            Tue 03 Feb 2026 18:36:52 +0000
asID:                     269798
IP address blocks:        45.186.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 10:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c5:ba:f2:cd:71:26:0c:fa:8e:f7:fc:ef:6a:2b:5d:98:dc:4f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED
        Validity
            Not Before: Feb  4 18:31:52 2025 GMT
            Not After : Feb  3 18:36:52 2026 GMT
        Subject: CN=8C63053231841F85A9FE0DB17356B22B0AFDAEC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a4:0a:19:eb:fa:c1:9e:14:67:f7:91:04:c4:
                    11:5c:35:f3:b4:92:b0:08:d6:4e:46:4f:55:b6:d7:
                    8d:12:ac:7b:b4:33:73:77:a7:71:63:c4:f6:52:f9:
                    f4:09:11:6f:54:c6:84:7f:37:17:f8:88:a7:45:58:
                    7e:88:5a:3e:e3:b0:1d:81:e5:de:a1:fa:48:d7:f9:
                    c6:4a:00:95:fe:ff:a9:dd:a2:5e:a6:e0:fc:c9:0f:
                    17:f6:08:99:f9:b7:c1:e2:1b:08:31:42:78:e3:e6:
                    b5:6e:b3:ec:d2:c3:b6:f4:94:31:f8:67:79:c3:19:
                    be:51:f3:7f:a0:7c:4e:72:08:15:fc:2d:b1:f5:30:
                    e9:9d:2c:35:45:c1:6a:cc:1d:e7:5f:cf:9e:99:31:
                    16:28:2b:3f:34:d3:cd:77:85:0e:d5:e9:be:36:ea:
                    ff:62:0e:9f:59:ae:04:3b:b9:c9:4f:6b:08:4a:20:
                    c8:a9:72:3a:f6:50:0d:82:4c:8d:f6:6a:be:f5:5c:
                    af:97:47:e4:6f:78:91:60:bd:88:4c:d9:87:0e:50:
                    4f:71:03:9d:b3:35:21:bd:e5:f7:d7:28:e5:e9:57:
                    4e:74:4f:88:b9:3c:fc:7e:a7:98:42:a7:6f:c8:83:
                    fa:d4:96:56:02:ea:09:7f:ed:f7:6c:1f:19:92:1c:
                    d9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:63:05:32:31:84:1F:85:A9:FE:0D:B1:73:56:B2:2B:0A:FD:AE:C4
            X509v3 Authority Key Identifier:
                keyid:EA:7A:F6:DB:EB:46:9C:DF:D2:0B:7B:6B:09:28:D4:CC:B4:7C:D6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/34352e3138362e32302e302f32322d3232203d3e20323639373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:a9:8c:1f:b2:79:c2:64:f2:45:e0:84:a4:5f:c3:b8:86:a7:
         fd:4d:62:92:2b:e9:c1:e8:24:79:db:ed:74:f0:46:2d:26:ce:
         af:c9:57:18:47:9a:04:e5:24:4b:e9:18:fd:6d:44:5b:1c:76:
         b7:e4:ae:81:46:d2:88:69:40:a7:e5:63:d6:4b:8c:52:07:db:
         4d:53:91:d0:6e:f3:72:ed:6e:94:44:d4:bb:60:13:36:4d:39:
         24:ea:6a:c4:a8:7e:73:a9:59:26:90:8d:93:3f:6a:67:cb:b3:
         2f:5f:8b:39:42:19:41:b1:d6:fc:f6:3d:d1:70:a4:71:07:27:
         06:7c:81:89:d0:74:e7:4a:c1:29:7a:93:e6:5a:9f:0d:fe:fa:
         2e:e7:bb:35:7c:4c:06:a6:4f:7c:57:59:dd:02:c8:60:9c:b2:
         5e:37:44:89:60:84:7a:90:14:83:4b:0b:87:4a:69:ca:5d:62:
         cb:d9:81:99:3e:6e:4d:13:fc:51:bc:0c:8d:6b:6c:0e:64:bc:
         1d:cf:da:4d:f4:3a:a3:75:9b:06:87:65:f0:15:6a:c1:44:46:
         28:a9:61:6d:f1:bb:85:82:7e:43:f7:c1:bb:7c:ce:b6:8b:2b:
         4e:61:17:55:27:fe:a3:3a:09:ac:81:fd:82:dc:8b:eb:58:e0:
         33:00:14:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:05 2025 by rpki-client