Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/34352e3139302e39322e302f32322d3234203d3e20323639383738.roa
File:                     34352e3139302e39322e302f32322d3234203d3e20323639383738.roa (raw, json)
Hash identifier:          Mn77TsiNYOiLIuY85pnG7KyxHCLrrpvDUI8jKhNzFBs=
Subject key identifier:   4F:8D:96:EC:2E:20:39:43:99:9A:A0:43:F9:4C:E0:E8:32:DA:8D:37
Certificate issuer:       /CN=0A5D0DA27AEF033371A74DEA11C4AF833677DD51
Certificate serial:       1C4D373277DBAFB2D087388971C9B13E91A8EF8C
Authority key identifier: 0A:5D:0D:A2:7A:EF:03:33:71:A7:4D:EA:11:C4:AF:83:36:77:DD:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/34352e3139302e39322e302f32322d3234203d3e20323639383738.roa
Signing time:             Tue 04 Feb 2025 18:00:58 +0000
ROA not before:           Tue 04 Feb 2025 17:55:58 +0000
ROA not after:            Tue 03 Feb 2026 18:00:58 +0000
asID:                     269878
IP address blocks:        45.190.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4d:37:32:77:db:af:b2:d0:87:38:89:71:c9:b1:3e:91:a8:ef:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5D0DA27AEF033371A74DEA11C4AF833677DD51
        Validity
            Not Before: Feb  4 17:55:58 2025 GMT
            Not After : Feb  3 18:00:58 2026 GMT
        Subject: CN=4F8D96EC2E203943999AA043F94CE0E832DA8D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:f9:48:3b:72:19:c4:81:03:e5:0a:e1:1e:
                    ed:6b:66:4d:27:15:7e:65:f4:92:8f:aa:6d:b3:1c:
                    c2:29:4f:ff:ba:a3:20:33:a7:ac:fc:e4:0b:69:71:
                    83:4e:fc:2a:ba:f0:b3:f1:7b:eb:0f:74:f9:81:9e:
                    a2:48:9c:19:6e:e2:40:e8:2e:d5:40:e3:60:53:41:
                    50:3d:7b:71:c1:5a:c6:dd:37:f7:f9:06:47:16:5b:
                    0c:c5:e0:97:10:de:09:9a:54:f8:c5:37:c8:3c:88:
                    ce:d8:ae:fe:ed:a7:63:ee:21:1d:73:cf:cc:49:05:
                    07:38:72:fb:4d:bc:77:31:de:04:1d:9b:b1:25:4d:
                    4a:53:59:cf:d8:92:69:4d:37:60:d0:33:f7:7f:72:
                    b3:9e:bb:25:ca:00:bb:27:ed:0b:7d:74:ad:96:ed:
                    aa:b8:ab:3e:a4:5e:4c:f9:71:c5:49:f8:56:2f:0e:
                    53:ea:bc:60:3e:b1:25:d2:a3:fa:ec:69:21:39:70:
                    32:40:73:41:ca:3b:57:e5:5b:9e:31:e7:b5:83:1e:
                    53:82:2b:5a:a9:4c:70:f7:10:0a:e7:d1:ab:91:1a:
                    a8:43:3f:4d:b1:93:63:e0:03:23:0f:41:57:32:44:
                    b6:40:df:ba:d9:a5:c6:9e:b3:cf:72:83:58:dc:b4:
                    38:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8D:96:EC:2E:20:39:43:99:9A:A0:43:F9:4C:E0:E8:32:DA:8D:37
            X509v3 Authority Key Identifier:
                keyid:0A:5D:0D:A2:7A:EF:03:33:71:A7:4D:EA:11:C4:AF:83:36:77:DD:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/34352e3139302e39322e302f32322d3234203d3e20323639383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:bd:03:ce:56:32:74:d2:5a:31:22:65:ee:a4:36:7d:52:4b:
         7c:73:1c:6b:98:24:de:fa:fe:92:11:4f:4e:9b:38:67:e4:72:
         6f:cf:20:62:4c:c7:47:9a:a3:f3:e2:ee:26:7e:a2:65:57:ff:
         e3:f2:72:a4:fe:9a:90:ab:dd:af:0a:6e:6c:1d:31:d0:e8:d3:
         a7:03:f9:26:9c:44:53:6a:db:fc:46:7d:df:d6:ad:b0:62:3e:
         44:c0:fe:14:68:bb:fa:37:5d:d2:70:c6:f4:50:7d:1b:47:c1:
         ed:60:c7:0a:dc:35:4d:40:80:a7:75:e4:fb:c7:8f:b4:5b:2d:
         6a:84:b0:20:8f:70:c2:ba:6c:c1:58:94:eb:82:2e:44:b2:4c:
         0f:a2:02:0a:97:3a:dd:61:fa:ed:88:db:94:4a:14:c0:ce:bd:
         96:f8:10:d4:1c:7e:d3:6d:6a:8a:86:19:7b:38:58:d7:3e:5e:
         70:e7:3e:b8:d3:39:0c:ba:99:80:a4:b9:1e:c7:c5:ba:0d:04:
         e8:d5:f7:a5:f6:28:10:2b:83:ff:0c:4d:d2:86:d3:10:be:f2:
         29:58:77:39:05:f8:d7:51:8f:f2:0d:a2:05:82:ab:7b:20:fb:
         da:42:7b:1d:a2:ef:34:af:4c:20:83:9e:90:13:c0:fe:ef:25:
         67:6f:03:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:49:14 2025 by rpki-client