Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32322e302f32342d3234203d3e20323635373830.roa
File:                     3136382e3232372e32322e302f32342d3234203d3e20323635373830.roa (raw, json)
Hash identifier:          +xqnE/u6s/C/srmyFMV5PeLbOxOy+dzbiFrQE6ZzcCk=
Subject key identifier:   A1:9D:08:67:DF:D2:4A:D4:18:E0:E2:38:D2:D3:70:50:DC:C5:90:CD
Certificate issuer:       /CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
Certificate serial:       1B2539C00BAE4ACA997795D3A7C5AC3272F007EF
Authority key identifier: 45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32322e302f32342d3234203d3e20323635373830.roa
Signing time:             Tue 04 Feb 2025 19:57:49 +0000
ROA not before:           Tue 04 Feb 2025 19:52:49 +0000
ROA not after:            Tue 03 Feb 2026 19:57:49 +0000
asID:                     265780
IP address blocks:        168.227.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 14:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:25:39:c0:0b:ae:4a:ca:99:77:95:d3:a7:c5:ac:32:72:f0:07:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
        Validity
            Not Before: Feb  4 19:52:49 2025 GMT
            Not After : Feb  3 19:57:49 2026 GMT
        Subject: CN=A19D0867DFD24AD418E0E238D2D37050DCC590CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:ed:73:82:33:31:2d:46:cf:9a:c6:ee:f4:
                    d1:cd:c6:99:b0:c2:f0:65:23:91:7e:09:dc:ce:58:
                    f1:79:12:f0:4d:f0:26:78:72:33:ba:04:e7:14:2f:
                    a9:5a:78:96:82:56:45:91:66:2c:59:b3:4c:23:7d:
                    90:67:73:eb:03:44:b7:1c:cb:c7:5c:d0:d5:96:9e:
                    0e:af:b4:3d:e1:59:10:66:8a:93:c6:1a:6a:9c:c3:
                    3e:e9:c5:19:58:c7:22:a1:6f:f4:1d:13:39:71:66:
                    9d:ff:eb:da:89:b7:31:2b:7d:af:56:91:e6:9e:61:
                    ba:da:8e:0e:d7:50:0b:56:ea:bb:b2:88:66:24:a4:
                    41:a9:47:6c:62:5d:c2:d2:f3:0a:43:57:47:04:21:
                    69:e7:d3:0d:84:b0:cf:ef:9d:96:f5:6c:a7:9b:a6:
                    1b:85:09:a5:56:c7:db:cf:48:c4:3e:e5:ab:71:83:
                    79:e5:76:6e:06:9d:ae:c4:8f:2c:80:65:45:0b:0f:
                    6f:e0:a5:42:78:2b:22:86:91:4f:3f:6e:18:4d:2b:
                    67:ca:6d:ba:b3:18:ea:1a:50:50:ac:93:26:f4:86:
                    06:36:1f:a9:5d:6a:dd:56:a2:80:3f:ef:e1:74:59:
                    3e:a7:a8:5d:36:02:e2:40:9d:b3:3c:1d:ca:41:2e:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9D:08:67:DF:D2:4A:D4:18:E0:E2:38:D2:D3:70:50:DC:C5:90:CD
            X509v3 Authority Key Identifier:
                keyid:45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32322e302f32342d3234203d3e20323635373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:b5:bf:a4:94:05:c0:20:36:cc:33:9b:82:35:40:67:22:15:
         1f:8a:0e:ff:04:fb:57:49:98:28:62:7b:f4:56:5f:40:77:0c:
         0f:1c:4b:dd:8e:ac:9f:ea:52:c3:69:e8:12:64:9b:ad:01:e4:
         1d:7a:95:d5:da:b9:bc:eb:81:79:d4:65:5f:0a:4f:c4:83:46:
         ae:78:b5:71:6d:af:fe:a0:c9:ac:64:f9:86:f7:1e:02:3b:16:
         75:b2:7b:e8:cd:59:65:89:f2:ae:a6:b1:b0:e7:2c:a4:74:d8:
         f4:8f:67:5c:1a:1a:1c:72:35:47:ec:8a:da:f0:2c:ac:77:b1:
         24:00:82:f7:a4:76:77:65:fd:c7:92:82:a0:3e:e7:f1:2b:0b:
         65:d8:d1:a7:73:65:ef:9e:71:0e:97:aa:5e:88:b4:0a:12:60:
         37:00:c9:11:85:9d:72:55:d5:3d:a4:cb:2a:6c:a7:06:ac:6a:
         4b:f6:4e:1f:e2:95:9a:f1:39:2d:eb:a4:b3:a3:dd:4d:01:f1:
         40:98:34:bb:2f:ff:3a:8a:7e:4d:33:8a:8b:26:f6:ab:4c:2d:
         fd:5e:69:b1:46:ca:87:fa:26:23:0d:7d:74:24:7d:f0:ee:f5:
         98:ec:3c:0f:bb:93:6f:fc:66:3d:1a:e8:19:a9:c9:7c:55:c4:
         f5:a4:e8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:54:59 2025 by rpki-client