Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/34352e3137302e34342e302f32322d3236203d3e20323637373536.roa
File:                     34352e3137302e34342e302f32322d3236203d3e20323637373536.roa (raw, json)
Hash identifier:          0p5OvzELfw7GCWIhFp2Zj84cLeQsXeUHwTU2FhVhZbY=
Subject key identifier:   EC:A6:99:C3:1A:01:C7:B5:CA:61:E2:87:57:E8:9A:A8:C4:38:A8:3D
Certificate issuer:       /CN=26357EEDCBC3F2015A201607E75DEDF2C576CFF7
Certificate serial:       0A98D2BCCE6B9681B05187A24E2D4B6B496CA954
Authority key identifier: 26:35:7E:ED:CB:C3:F2:01:5A:20:16:07:E7:5D:ED:F2:C5:76:CF:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/34352e3137302e34342e302f32322d3236203d3e20323637373536.roa
Signing time:             Tue 04 Feb 2025 18:25:50 +0000
ROA not before:           Tue 04 Feb 2025 18:20:50 +0000
ROA not after:            Tue 03 Feb 2026 18:25:50 +0000
asID:                     267756
IP address blocks:        45.170.44.0/22 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 12:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:98:d2:bc:ce:6b:96:81:b0:51:87:a2:4e:2d:4b:6b:49:6c:a9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26357EEDCBC3F2015A201607E75DEDF2C576CFF7
        Validity
            Not Before: Feb  4 18:20:50 2025 GMT
            Not After : Feb  3 18:25:50 2026 GMT
        Subject: CN=ECA699C31A01C7B5CA61E28757E89AA8C438A83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:43:03:ba:77:90:c1:87:1d:f7:66:24:f8:
                    c7:3b:fb:cb:eb:19:50:5f:c6:d7:f9:ee:c9:65:40:
                    68:b8:a1:b1:8e:2c:11:0e:04:c8:f1:24:af:a8:6b:
                    b7:d5:01:9e:94:25:9e:d1:5d:89:89:a0:53:1e:bf:
                    a5:ff:38:38:08:e8:0c:8e:33:d4:75:24:b7:26:ec:
                    1f:cb:b6:43:53:5d:15:15:a2:ac:69:31:6c:61:aa:
                    b2:fe:12:58:83:32:b6:4a:05:b1:dc:5e:c2:8a:c4:
                    e7:98:aa:33:4a:07:ed:39:8f:08:e9:94:f1:fc:09:
                    8c:89:21:40:90:17:91:06:fa:32:5d:8f:e7:00:42:
                    cf:ab:01:4d:78:4c:14:a3:31:27:b5:a1:b2:be:9c:
                    71:cd:a5:01:74:55:f2:c0:7c:06:9a:01:85:0d:54:
                    93:b7:61:c3:9a:4c:5a:6d:18:6b:36:60:52:7e:a2:
                    17:47:3e:54:4c:18:53:68:89:6d:e3:6a:45:9d:2f:
                    2c:4e:5e:49:52:6a:ea:ff:1a:ce:c4:67:80:58:10:
                    db:d3:5b:7b:94:b2:85:06:7e:7c:80:21:6c:c1:0c:
                    0c:92:12:d5:91:48:a8:c2:2f:6f:b2:65:82:02:cf:
                    96:36:26:29:0d:73:eb:fd:f2:e5:f9:2f:b3:91:ff:
                    71:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A6:99:C3:1A:01:C7:B5:CA:61:E2:87:57:E8:9A:A8:C4:38:A8:3D
            X509v3 Authority Key Identifier:
                keyid:26:35:7E:ED:CB:C3:F2:01:5A:20:16:07:E7:5D:ED:F2:C5:76:CF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/34352e3137302e34342e302f32322d3236203d3e20323637373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:b6:f8:a3:a9:26:ff:5d:5b:b4:18:81:10:84:fc:c0:fc:44:
         72:6f:4c:53:5d:4e:6d:6d:bf:01:21:5c:20:ee:9d:3d:17:60:
         18:1e:f9:51:0f:9e:62:06:91:cb:46:8f:4f:9d:b0:ec:a1:b3:
         65:24:8e:f7:c1:36:65:b4:d7:a4:8b:48:46:07:a5:73:71:d3:
         55:00:2f:c3:0a:c0:90:83:4d:37:82:54:6d:56:b0:f0:98:ab:
         ca:11:19:38:65:18:46:f0:bb:27:96:68:3e:c9:7e:8e:94:c1:
         32:bc:da:5b:19:0f:4e:ad:6e:6a:98:d1:5b:e6:a5:bd:1b:cd:
         4d:b0:10:99:bc:9a:f3:84:f4:6c:2b:53:3e:ab:d8:fb:05:20:
         cd:4e:1b:2f:5f:b7:79:f8:93:c1:ea:f4:64:15:de:e3:d7:00:
         d6:21:f6:99:20:f6:b0:77:6c:0e:f8:31:b8:e3:78:b2:52:f4:
         04:71:b1:4f:7d:06:78:27:10:57:16:9c:76:a3:6f:9f:55:03:
         57:cd:bd:11:17:ef:2f:40:cf:1c:84:90:73:48:07:ce:54:c3:
         4b:12:12:7f:e2:76:b4:7d:41:b4:9f:9c:30:f8:ca:e6:a9:3a:
         c5:bd:52:b6:b2:b7:19:4e:32:10:bb:2b:7a:04:78:a3:e6:7c:
         ae:30:84:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:23:57 2025 by rpki-client