Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/34352e342e3235322e302f32322d3234203d3e20323635363631.roa
File:                     34352e342e3235322e302f32322d3234203d3e20323635363631.roa (raw, json)
Hash identifier:          LHBO1yHuXEOPVtAnlLjPiihqEBs2fONWX15Y36UXvhg=
Subject key identifier:   54:77:1C:BD:54:09:39:0D:D5:BC:7B:56:E1:A1:7A:A7:C2:F7:03:A5
Certificate issuer:       /CN=526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9
Certificate serial:       6E88C635B0365EEA1E1A5218BDFEC1ABDC8B020F
Authority key identifier: 52:6F:6C:7C:CB:8D:09:09:9E:22:3D:97:E1:F2:B7:2D:F5:ED:EE:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/34352e342e3235322e302f32322d3234203d3e20323635363631.roa
Signing time:             Tue 04 Feb 2025 20:05:35 +0000
ROA not before:           Tue 04 Feb 2025 20:00:35 +0000
ROA not after:            Tue 03 Feb 2026 20:05:35 +0000
asID:                     265661
IP address blocks:        45.4.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 23:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:88:c6:35:b0:36:5e:ea:1e:1a:52:18:bd:fe:c1:ab:dc:8b:02:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9
        Validity
            Not Before: Feb  4 20:00:35 2025 GMT
            Not After : Feb  3 20:05:35 2026 GMT
        Subject: CN=54771CBD5409390DD5BC7B56E1A17AA7C2F703A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:56:d1:b7:52:63:c0:ad:21:fb:63:8f:df:
                    84:ac:ef:f5:10:03:a7:02:71:dd:50:c5:55:5f:f8:
                    d7:02:19:74:a5:03:ee:ab:55:5a:05:79:aa:9e:97:
                    dc:2b:7b:db:3d:1f:39:08:79:91:0d:2f:03:fc:71:
                    28:fc:44:49:3c:f2:89:3c:09:af:8c:69:07:53:a4:
                    83:92:b3:d2:10:98:6d:2b:08:57:b0:c8:df:aa:bc:
                    60:b5:8b:c1:d8:a4:8a:7d:aa:10:1b:f5:85:5d:9e:
                    d8:48:4b:9f:7c:f8:bc:80:08:92:0e:fe:fc:d1:d9:
                    1d:41:32:c6:dc:d3:0a:ad:ef:d9:f3:c7:c4:27:67:
                    29:19:0a:02:30:1a:03:16:7c:41:b0:68:ed:16:63:
                    d6:e5:d4:9c:3f:2e:93:ad:7e:5d:42:15:3f:b9:c7:
                    cb:35:e8:7f:2a:cf:10:09:2d:7d:4b:f3:77:78:13:
                    c6:37:11:a7:af:d2:c8:51:28:40:1d:7c:09:be:40:
                    5a:5a:9a:b1:a7:34:b1:45:f3:01:28:4f:90:56:c4:
                    da:16:3a:06:48:f6:0c:7a:fa:35:ae:1a:af:4f:40:
                    5e:d9:52:f3:a8:8e:a0:e7:b7:35:40:9e:53:0e:52:
                    42:ce:96:b6:32:06:5a:43:03:1d:3f:bb:97:01:d1:
                    c1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:77:1C:BD:54:09:39:0D:D5:BC:7B:56:E1:A1:7A:A7:C2:F7:03:A5
            X509v3 Authority Key Identifier:
                keyid:52:6F:6C:7C:CB:8D:09:09:9E:22:3D:97:E1:F2:B7:2D:F5:ED:EE:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/526F6C7CCB8D09099E223D97E1F2B72DF5EDEEC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FA71B0940D35E413B729B99AFD8A0B7D3B95922121F2F7667C6C00C72749AC3/0/34352e342e3235322e302f32322d3234203d3e20323635363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:c2:3c:70:66:bd:6a:de:61:cd:c1:81:a7:83:f1:08:d9:a7:
         86:f3:d7:cc:2c:06:ad:1c:dc:1f:f1:4f:bd:59:9b:16:02:ec:
         56:0c:5b:62:b0:d1:bc:27:cb:17:45:1d:e6:55:fb:83:ee:63:
         dd:75:99:f7:98:65:7b:c2:e2:71:38:4a:b8:fb:67:14:2c:39:
         38:c1:18:fa:39:e7:24:25:42:b8:99:67:ce:d0:97:b9:f9:e0:
         88:96:95:1c:dc:d2:f7:f0:2a:76:41:fd:98:c6:d4:bb:54:1c:
         dc:20:b0:c3:40:3d:9f:47:fa:cf:ed:d5:d5:4f:72:4f:57:84:
         31:64:cd:8c:66:dc:e9:08:d4:d3:0b:a3:4f:1c:f0:aa:e1:5c:
         3f:34:c9:e7:f6:4c:68:df:1e:4d:84:c8:56:31:12:fa:17:41:
         6e:f2:50:76:f1:e7:ba:bd:e1:0c:5d:0d:d9:e6:d2:53:90:b0:
         9c:f6:2d:3b:dd:bb:f7:58:d0:7b:e1:7d:1b:18:88:09:12:15:
         0d:ff:ed:2c:d6:0a:15:0e:28:34:89:cc:79:33:29:75:c0:28:
         3e:e6:43:ef:73:b5:00:a7:e7:03:6f:31:e3:c1:f8:50:54:22:
         3b:6d:70:e4:62:8e:28:e1:6b:63:ca:41:28:c5:da:23:2b:dc:
         be:27:69:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:09 2025 by rpki-client