Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/34352e3138332e3135362e302f32322d3234203d3e20323639373831.roa
File:                     34352e3138332e3135362e302f32322d3234203d3e20323639373831.roa (raw, json)
Hash identifier:          D7sgZpbY5KEs52J/z6hr0N+rfnyiTsI5fXQr35DKG68=
Subject key identifier:   C9:BB:FB:0E:36:73:6C:1C:C3:DB:B2:C3:6A:AB:86:1B:73:37:75:D1
Certificate issuer:       /CN=5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4
Certificate serial:       530848CD3B9AE8DE144ED515D106BA09A2C40AEF
Authority key identifier: 5D:F5:63:A0:C9:5D:89:DB:EC:34:5C:65:29:CB:C9:A6:ED:43:CF:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/34352e3138332e3135362e302f32322d3234203d3e20323639373831.roa
Signing time:             Tue 04 Feb 2025 18:14:15 +0000
ROA not before:           Tue 04 Feb 2025 18:09:15 +0000
ROA not after:            Tue 03 Feb 2026 18:14:15 +0000
asID:                     269781
IP address blocks:        45.183.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:08:48:cd:3b:9a:e8:de:14:4e:d5:15:d1:06:ba:09:a2:c4:0a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4
        Validity
            Not Before: Feb  4 18:09:15 2025 GMT
            Not After : Feb  3 18:14:15 2026 GMT
        Subject: CN=C9BBFB0E36736C1CC3DBB2C36AAB861B733775D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:69:eb:51:e3:45:6d:05:cd:50:23:e2:dc:1e:
                    62:1a:fd:b4:25:a1:db:1b:79:f9:26:e4:1a:a5:ac:
                    97:ed:95:fa:78:5f:27:50:71:f3:6f:9d:e6:b0:42:
                    c9:c9:44:45:b3:b8:db:50:09:55:2f:5d:68:f6:10:
                    4a:de:41:aa:b3:3b:d4:d9:6c:d0:6b:58:7a:ea:d9:
                    88:d2:e3:d7:01:51:6f:e7:ce:fc:cc:8d:9b:7e:98:
                    9b:c3:d2:05:99:65:1d:8d:a1:89:3b:10:89:f3:93:
                    1a:8c:5e:c0:d3:d7:54:38:e5:0d:9f:bc:e7:2f:8a:
                    fc:75:b3:68:af:48:0b:8c:9e:ea:45:13:ea:81:8f:
                    94:18:d7:2a:4d:d3:ad:aa:9b:8f:6e:c1:e4:5f:57:
                    57:e9:8d:2c:3e:93:79:13:a9:49:97:46:c0:ca:aa:
                    a7:b8:af:2b:7b:21:61:5b:72:3a:33:57:5a:2a:2e:
                    c3:1a:91:7d:bd:5f:5a:f6:69:a0:d3:d2:d2:52:43:
                    ff:4a:d1:cd:96:fa:be:d1:bd:03:6f:bd:d5:3f:7e:
                    bb:c2:e5:51:a5:18:0a:e9:3c:80:eb:47:86:ed:da:
                    07:e3:0e:4c:e7:67:de:a8:ab:1e:f6:a6:61:64:4e:
                    88:8a:d9:9e:c6:96:f6:3b:1f:d6:cd:a3:d6:5b:98:
                    f8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BB:FB:0E:36:73:6C:1C:C3:DB:B2:C3:6A:AB:86:1B:73:37:75:D1
            X509v3 Authority Key Identifier:
                keyid:5D:F5:63:A0:C9:5D:89:DB:EC:34:5C:65:29:CB:C9:A6:ED:43:CF:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/34352e3138332e3135362e302f32322d3234203d3e20323639373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:45:63:7b:e6:83:16:91:94:7a:20:66:0d:ae:e4:e2:70:e4:
         fe:e1:9e:08:0e:02:d7:ba:12:0e:1c:fb:85:d0:1b:c6:66:2d:
         e1:18:68:c5:f5:8a:9d:b5:cb:0a:5b:31:dc:b2:92:fc:bc:27:
         aa:80:09:bd:ca:c8:07:90:e5:6b:68:77:0e:5c:72:59:a8:e2:
         8a:0b:17:da:01:b8:9f:92:a4:7e:16:5f:b7:01:e0:58:56:62:
         9b:01:ed:40:46:44:06:f6:10:0f:5b:5c:9f:b7:61:97:a8:66:
         5e:c5:86:6c:9e:08:0c:ad:23:af:f0:af:73:f1:c0:88:07:34:
         57:28:a3:8e:3a:c0:8c:ab:7a:ae:8a:71:41:ef:51:ae:67:b9:
         2d:86:46:da:4e:13:14:21:9c:41:53:1c:bf:97:83:19:23:fd:
         18:2f:74:f6:d2:92:c6:21:a2:18:67:39:d0:2a:39:b6:6b:31:
         8e:3e:0a:eb:40:e5:56:eb:2d:b2:5a:b3:a2:88:85:29:b1:cb:
         b6:db:aa:ac:a2:d5:22:78:22:64:4b:6e:0b:b9:46:a8:04:e1:
         ec:78:3b:ba:00:d2:1a:d5:dd:da:6b:31:cd:15:78:98:01:1a:
         13:4b:03:2d:85:af:94:dc:f2:ea:62:d8:29:1a:49:b7:df:40:
         97:b6:df:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:28 2025 by rpki-client