Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/34352e3136322e36322e302f32332d3234203d3e20323637363739.roa
File:                     34352e3136322e36322e302f32332d3234203d3e20323637363739.roa (raw, json)
Hash identifier:          vXGWZD3JMWKBssc3qffMiVj02W5ob17Mo/zrcpHHdl0=
Subject key identifier:   DE:8E:0A:43:F0:A7:3F:68:4A:47:61:45:81:E2:7D:E8:1F:D8:63:E6
Certificate issuer:       /CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
Certificate serial:       7052E39F86D3C255FD6AA9C26FA53295610D401D
Authority key identifier: 11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/34352e3136322e36322e302f32332d3234203d3e20323637363739.roa
Signing time:             Tue 04 Feb 2025 18:33:45 +0000
ROA not before:           Tue 04 Feb 2025 18:28:45 +0000
ROA not after:            Tue 03 Feb 2026 18:33:45 +0000
asID:                     267679
IP address blocks:        45.162.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:52:e3:9f:86:d3:c2:55:fd:6a:a9:c2:6f:a5:32:95:61:0d:40:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
        Validity
            Not Before: Feb  4 18:28:45 2025 GMT
            Not After : Feb  3 18:33:45 2026 GMT
        Subject: CN=DE8E0A43F0A73F684A47614581E27DE81FD863E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4f:9e:32:ed:60:26:64:96:e2:43:4e:3e:13:
                    b7:9e:87:d1:00:ec:2b:12:32:e1:39:34:50:77:3e:
                    0a:0e:5c:23:73:88:86:f2:4c:88:c8:bf:63:9b:70:
                    51:df:94:78:d3:a7:36:42:0b:3d:6a:7b:bd:1c:ff:
                    fc:0b:fa:1b:5f:26:41:12:09:ce:bf:b5:5b:35:e0:
                    0f:62:93:0f:a4:c1:a5:ed:62:d9:f9:da:7a:b5:23:
                    8f:a6:d1:03:bb:94:ba:7b:5c:60:48:92:27:4d:74:
                    50:75:5e:82:81:d9:c3:ba:8c:31:58:20:11:86:47:
                    7e:06:63:6f:f2:dc:03:64:a0:1c:73:b5:67:1c:73:
                    00:af:e8:f8:f4:cc:eb:89:87:d2:2a:78:cb:67:b1:
                    ea:96:74:ff:d7:1b:f5:c2:5e:69:86:11:c2:ca:05:
                    bb:6f:80:8f:5e:77:3e:7e:d5:00:c8:29:0c:2f:f9:
                    82:3d:36:55:97:61:15:bb:c6:01:53:6c:5e:58:28:
                    2d:85:76:21:8c:ff:f3:2b:03:bd:ee:3e:44:0d:36:
                    97:14:91:7b:07:f4:78:3f:62:89:1a:a3:4f:a6:54:
                    b1:f9:84:1c:3c:c9:c3:6f:d2:f1:bd:d5:85:06:57:
                    ab:84:9e:73:b4:57:b0:41:96:07:bc:a4:72:04:bf:
                    f5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8E:0A:43:F0:A7:3F:68:4A:47:61:45:81:E2:7D:E8:1F:D8:63:E6
            X509v3 Authority Key Identifier:
                keyid:11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/34352e3136322e36322e302f32332d3234203d3e20323637363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:f8:8b:4e:80:dc:36:97:6c:a5:b5:48:82:cb:27:dd:d3:69:
         f9:19:57:54:50:b1:91:6e:6e:81:e2:29:3f:2c:d2:78:96:f8:
         72:38:4a:7d:f3:15:5d:f8:d4:86:c6:01:cf:87:51:8e:ac:34:
         d0:7c:98:e5:40:eb:5c:53:24:bf:4f:da:8f:ea:f7:37:11:03:
         6b:82:77:b2:16:fc:2f:8d:68:db:97:fb:d3:cb:57:f5:a2:c4:
         a9:c1:2f:20:18:93:8b:75:72:79:b4:3e:d6:18:98:10:cd:6e:
         24:7d:29:a2:f5:2e:6d:a2:d0:3a:ae:d8:28:7d:9f:ea:3f:c8:
         7b:df:c9:a3:2c:82:35:63:d9:e1:e6:f4:73:9a:08:d6:44:24:
         e3:b5:47:86:63:46:71:ef:fb:8a:7a:bf:97:77:75:cc:9e:ce:
         c0:8b:d9:b2:e4:7a:98:f5:94:34:13:c6:6b:03:33:a2:d6:1a:
         8f:da:08:d6:25:f2:8f:88:cc:d7:2c:61:d0:d3:a4:92:5e:ca:
         4d:06:3f:56:9c:e0:22:ef:aa:21:a9:05:b7:8f:2c:67:45:1f:
         ec:34:f1:94:f2:3f:29:66:16:51:0c:68:b2:f6:79:4e:0d:a5:
         3d:ab:67:d3:a2:a6:0b:f9:7d:55:d0:1b:62:28:1e:3a:7d:51:
         56:5d:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:08 2025 by rpki-client