Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/34352e3233362e3136382e302f32322d3234203d3e20323636383032.roa
File:                     34352e3233362e3136382e302f32322d3234203d3e20323636383032.roa (raw, json)
Hash identifier:          8Ao9UxZv0IHO6AEHx45GDpY/sz9d4vMlHDsGMw1HvqU=
Subject key identifier:   81:41:75:FB:3F:6A:D3:14:A8:42:78:1E:50:C9:E3:1B:70:D9:98:B8
Certificate issuer:       /CN=9DDF7010D9766829525CC44FC34F3B14225EB013
Certificate serial:       406D0101BAC648920ED826E1A595654A88199A6E
Authority key identifier: 9D:DF:70:10:D9:76:68:29:52:5C:C4:4F:C3:4F:3B:14:22:5E:B0:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DDF7010D9766829525CC44FC34F3B14225EB013.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/34352e3233362e3136382e302f32322d3234203d3e20323636383032.roa
Signing time:             Tue 04 Feb 2025 18:41:02 +0000
ROA not before:           Tue 04 Feb 2025 18:36:02 +0000
ROA not after:            Tue 03 Feb 2026 18:41:02 +0000
asID:                     266802
IP address blocks:        45.236.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DDF7010D9766829525CC44FC34F3B14225EB013.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6d:01:01:ba:c6:48:92:0e:d8:26:e1:a5:95:65:4a:88:19:9a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DDF7010D9766829525CC44FC34F3B14225EB013
        Validity
            Not Before: Feb  4 18:36:02 2025 GMT
            Not After : Feb  3 18:41:02 2026 GMT
        Subject: CN=814175FB3F6AD314A842781E50C9E31B70D998B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b7:14:b2:ec:be:04:63:87:0f:a1:fe:9f:69:
                    0b:38:47:5d:40:9c:81:e7:c8:2f:f0:f7:53:53:1d:
                    9f:45:7e:b5:e2:78:ec:3a:3c:ba:b4:5e:e8:63:c0:
                    15:4c:9d:d0:c0:76:a4:62:14:1e:c7:ba:ec:2c:19:
                    ea:c4:58:92:aa:9f:c4:ec:3d:47:bd:e7:38:d4:ee:
                    aa:8c:f0:b8:6d:93:8b:d5:15:d2:ce:60:1c:72:87:
                    81:6c:0e:7f:07:08:1a:1e:71:4c:a2:97:46:51:71:
                    ca:85:8e:e6:45:c6:ae:d3:2f:d2:19:09:12:d8:07:
                    57:c9:6e:96:d4:c2:62:2d:da:a9:02:d7:da:4f:29:
                    25:1e:8b:15:ac:4c:aa:ad:3a:e9:d9:46:10:bf:2d:
                    4f:b0:d9:88:3b:7a:1c:3d:6d:d1:4d:56:1f:95:82:
                    39:70:a9:4d:e9:26:0e:02:cb:03:8c:aa:47:87:a2:
                    31:59:76:05:f8:2e:1a:95:fa:72:83:b9:b4:a5:b1:
                    2a:05:d3:24:ed:68:6b:e3:6b:88:73:f9:66:ed:32:
                    c4:71:7d:93:4f:1c:5d:fe:81:73:c4:ad:33:18:58:
                    0f:5d:c9:94:d4:c4:1d:54:9e:9d:54:4c:f5:67:05:
                    96:4c:49:12:d7:c4:f3:7b:a1:33:91:17:b3:9e:da:
                    01:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:41:75:FB:3F:6A:D3:14:A8:42:78:1E:50:C9:E3:1B:70:D9:98:B8
            X509v3 Authority Key Identifier:
                keyid:9D:DF:70:10:D9:76:68:29:52:5C:C4:4F:C3:4F:3B:14:22:5E:B0:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DDF7010D9766829525CC44FC34F3B14225EB013.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/34352e3233362e3136382e302f32322d3234203d3e20323636383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:73:70:6f:bd:e4:44:cd:e9:b8:08:bf:bb:61:8f:0d:4b:67:
         07:dd:d4:b3:f1:ca:f6:88:b7:c3:6d:b7:d0:ba:98:c5:e5:d6:
         a3:7a:08:8d:d9:ec:91:94:8c:dd:ae:03:62:0f:08:1e:1c:96:
         ee:68:bc:e7:f6:5a:af:2d:1f:40:e3:02:eb:96:f1:18:f0:11:
         9c:ad:fb:d9:e3:0c:7f:2d:e4:7b:be:1e:7f:e1:71:6b:26:58:
         a3:2c:48:2c:1f:db:34:a0:8d:ff:a4:bf:d5:b5:28:a0:c1:e8:
         a0:bc:84:4d:ef:15:4c:94:d9:09:b8:53:bf:56:4a:fe:e5:32:
         57:aa:22:a8:ad:ce:e5:3b:52:3f:19:e2:96:d9:aa:77:fe:4b:
         96:52:dc:4c:cd:9d:af:15:12:5c:d0:71:6b:3e:67:5f:0d:7c:
         fd:c2:eb:6d:19:4c:82:11:15:36:36:45:46:73:e7:92:1e:07:
         9e:12:44:4a:48:c9:29:44:01:67:07:5f:65:4f:f8:f0:db:86:
         83:3d:97:03:b8:d0:0c:9a:87:9c:54:84:6b:c9:44:a4:38:f8:
         9a:c5:9b:dc:f0:2a:bf:2f:ce:be:1e:bd:84:59:0e:b3:e4:a2:
         0b:b1:56:ab:cb:53:03:c9:a6:9d:85:c3:db:3c:93:87:83:5f:
         bb:85:56:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:31:19 2025 by rpki-client