Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa
File:                     34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa (raw, json)
Hash identifier:          TSO/A85oL8JfgAUvZ8+p2QH7ruIoSfE6kpsHqrhQbeI=
Subject key identifier:   5B:43:A7:A1:C1:0E:BD:A5:78:1D:5B:06:24:03:B9:31:20:79:D6:9D
Certificate issuer:       /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
Certificate serial:       6DC5D12F9B1EC0D30518F2FF27B4EBD3F63C9361
Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa
Signing time:             Tue 04 Feb 2025 19:58:26 +0000
ROA not before:           Tue 04 Feb 2025 19:53:26 +0000
ROA not after:            Tue 03 Feb 2026 19:58:26 +0000
asID:                     269886
IP address blocks:        45.191.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c5:d1:2f:9b:1e:c0:d3:05:18:f2:ff:27:b4:eb:d3:f6:3c:93:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
        Validity
            Not Before: Feb  4 19:53:26 2025 GMT
            Not After : Feb  3 19:58:26 2026 GMT
        Subject: CN=5B43A7A1C10EBDA5781D5B062403B9312079D69D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:23:95:fd:6d:eb:77:1e:68:65:d2:eb:55:08:
                    45:3c:34:e4:db:9c:b3:fc:ab:fe:47:63:7c:a6:da:
                    64:81:de:22:7e:fa:18:bd:23:10:77:c7:65:f5:1e:
                    cf:5b:5d:83:65:7b:5a:6b:b3:55:e1:a8:6b:41:75:
                    d7:ca:51:1f:88:73:ee:8d:b0:00:0d:56:43:d0:e9:
                    72:f9:38:0a:1f:05:88:4d:b5:0c:ef:15:ae:f6:c5:
                    ba:b2:7a:0d:e2:0c:da:68:45:29:cc:19:2d:03:93:
                    e6:6d:65:77:7a:27:84:96:22:08:81:78:2b:91:60:
                    bd:bb:c7:2f:72:9a:87:96:c3:63:c9:3e:00:0f:6d:
                    d3:8c:f3:c4:4d:b5:dc:19:ce:ed:36:ab:d5:17:4b:
                    65:0b:8a:36:a6:e5:e4:6d:da:25:7d:7e:ae:65:01:
                    ec:9d:5b:ae:a0:d9:04:55:c1:0f:fc:bb:0c:5b:ed:
                    71:49:13:d0:14:97:7b:7d:ec:3b:b6:d6:70:5c:48:
                    f8:ee:c1:78:b5:c1:e8:dd:3b:e5:36:2d:df:6e:53:
                    46:4e:28:76:35:ef:cf:b5:70:ca:e8:c6:0f:3b:8b:
                    c0:8b:19:3e:64:87:94:95:9f:28:75:02:86:f6:03:
                    16:16:67:2f:07:d6:e8:9a:dc:94:fe:12:6c:35:71:
                    56:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:43:A7:A1:C1:0E:BD:A5:78:1D:5B:06:24:03:B9:31:20:79:D6:9D
            X509v3 Authority Key Identifier:
                keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3131302e302f32342d3234203d3e20323639383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:30:72:4e:8a:cd:22:92:ca:1e:ac:7d:3e:b4:72:2b:dd:01:
         16:5a:b2:b2:ee:c2:a2:32:cb:07:f2:f7:8f:b8:d5:06:4b:12:
         36:35:98:8a:78:da:36:5a:0d:56:40:0a:dd:2d:37:34:64:8f:
         cd:2e:10:6a:07:58:5c:41:e5:12:e1:7d:08:0f:f2:ae:0a:30:
         44:04:5d:81:f8:33:60:8b:7f:ac:f5:18:62:0d:63:60:6c:c9:
         8a:08:59:05:42:43:37:37:bc:f7:0b:e7:8d:dc:ee:d2:73:33:
         40:ff:d1:fe:6d:d0:31:c5:91:a1:a7:ad:0b:6a:d8:7a:6c:ec:
         01:89:1f:bb:5c:5b:ef:5e:ee:a9:45:d8:09:cc:21:cd:f8:61:
         02:c2:33:fa:07:65:be:5a:ab:58:38:7d:d1:94:78:a4:be:51:
         8a:1d:fa:1f:de:b8:20:3c:80:ac:12:99:f9:9e:7c:9a:2b:d4:
         1c:a7:7b:8b:80:5b:05:2b:5c:bd:cf:54:06:b1:bb:7d:53:52:
         35:bd:00:7b:e3:85:9b:8c:3b:da:c5:31:ef:75:86:97:e2:b9:
         ec:e9:e4:ba:f8:a4:77:a9:a3:07:93:fc:5e:6d:7a:54:31:89:
         71:59:f5:1c:c1:09:4d:26:d1:6d:17:b6:0a:b6:df:c2:2b:22:
         93:81:8f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:49:11 2025 by rpki-client