Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33352e302f32342d3234203d3e20323636383736.roa
File:                     34352e3136302e33352e302f32342d3234203d3e20323636383736.roa (raw, json)
Hash identifier:          zdHj8zkMEK+V5xPspn7eqf2FbWMs24WIBEQV7EVFrTc=
Subject key identifier:   B3:6C:F5:B9:A0:23:12:A9:D9:98:D8:DE:44:4E:2A:C9:0A:AA:72:EB
Certificate issuer:       /CN=9A0A973B46C2B2B4900ED226E666340849864C77
Certificate serial:       75946A2F4FADF3FCD2D36E1B72ADCE3014FFD1C3
Authority key identifier: 9A:0A:97:3B:46:C2:B2:B4:90:0E:D2:26:E6:66:34:08:49:86:4C:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33352e302f32342d3234203d3e20323636383736.roa
Signing time:             Tue 04 Feb 2025 18:10:23 +0000
ROA not before:           Tue 04 Feb 2025 18:05:23 +0000
ROA not after:            Tue 03 Feb 2026 18:10:23 +0000
asID:                     266876
IP address blocks:        45.160.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/9A0A973B46C2B2B4900ED226E666340849864C77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/9A0A973B46C2B2B4900ED226E666340849864C77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:94:6a:2f:4f:ad:f3:fc:d2:d3:6e:1b:72:ad:ce:30:14:ff:d1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A0A973B46C2B2B4900ED226E666340849864C77
        Validity
            Not Before: Feb  4 18:05:23 2025 GMT
            Not After : Feb  3 18:10:23 2026 GMT
        Subject: CN=B36CF5B9A02312A9D998D8DE444E2AC90AAA72EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:3e:39:8d:2d:e4:04:fe:1a:e5:42:e8:ce:
                    9c:93:b1:2e:fc:9e:7f:26:bd:20:3c:b3:b8:28:fd:
                    d8:9f:f7:a0:b3:d2:80:15:68:6b:7f:39:86:56:1e:
                    9f:fe:52:05:d9:6c:92:da:27:9b:18:95:40:72:f0:
                    ae:9d:f8:4a:ba:c6:e0:cc:3d:b9:da:e2:c9:b5:c8:
                    22:ac:db:ec:7e:eb:1b:80:42:13:53:23:36:73:56:
                    7a:9f:9a:be:3c:38:40:c7:e9:ea:37:c5:61:53:d5:
                    0e:e4:ab:a4:59:da:c6:72:26:bd:81:38:9d:77:c4:
                    ce:30:63:9b:59:43:d1:93:b1:fe:0f:42:4b:73:77:
                    9f:47:dc:3b:7e:a9:51:94:3c:8e:c8:ff:72:df:37:
                    4a:76:2c:f4:bb:a7:e9:09:47:5f:9f:9f:f5:42:90:
                    c4:b4:b3:c7:1f:64:57:d1:2a:53:26:7a:ba:68:28:
                    2b:e5:bc:61:5c:d6:8d:51:a3:6a:51:bb:ea:61:5d:
                    f5:72:81:26:43:70:b0:a1:fd:d5:18:65:75:53:74:
                    f0:13:39:f3:3b:a7:9b:41:85:24:60:a7:d4:a4:cd:
                    59:06:92:f4:06:d7:28:12:86:e6:12:07:13:f9:ac:
                    94:76:36:d1:01:ab:65:95:da:03:11:3d:b6:04:43:
                    5e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6C:F5:B9:A0:23:12:A9:D9:98:D8:DE:44:4E:2A:C9:0A:AA:72:EB
            X509v3 Authority Key Identifier:
                keyid:9A:0A:97:3B:46:C2:B2:B4:90:0E:D2:26:E6:66:34:08:49:86:4C:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/9A0A973B46C2B2B4900ED226E666340849864C77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33352e302f32342d3234203d3e20323636383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:af:ee:2c:4f:a4:62:90:5b:7c:dc:74:54:6c:69:39:f9:02:
         32:95:b8:aa:7c:c9:28:8c:f5:6f:f9:97:95:39:8a:8f:30:1b:
         78:3c:0a:60:7c:cd:5a:51:02:e9:76:9d:51:67:fb:6d:9c:94:
         05:17:9d:26:16:72:a2:e4:5d:2b:f9:d5:9f:3d:cb:23:03:a6:
         1f:b9:3d:7c:02:5e:2d:9b:b4:45:78:09:41:74:0e:ff:f0:89:
         00:1f:0e:6d:3d:36:c4:14:10:65:84:36:4d:e4:07:4b:7e:ba:
         11:5d:5e:02:b3:6f:fe:13:bb:89:ea:e1:4e:f4:b4:70:57:7b:
         86:0f:38:65:aa:2d:2b:0a:f7:c3:0e:6d:fc:9e:ee:0a:db:f0:
         19:d9:40:97:41:d0:29:2f:5a:00:03:63:73:c2:13:a7:c5:b3:
         a0:5b:59:1f:80:1b:e2:1a:1d:bb:62:58:6b:18:43:d2:4c:7d:
         02:25:fb:6d:e9:d2:ae:5b:34:e5:b1:5e:cd:a0:d8:92:e5:ad:
         7a:b2:83:ca:99:0b:7f:b5:21:79:18:a2:c1:09:2b:9d:bc:ce:
         6b:67:81:9a:78:26:4a:a4:c0:e2:be:68:13:97:e7:0c:09:1a:
         7f:ab:00:da:1e:9f:4a:a4:5e:ba:c5:bd:9c:c5:58:01:41:e1:
         78:1a:3b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:53:37 2025 by rpki-client