Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B798333D4C59DEA785D86F630F4A0F701AE765A022AFAE0177D4384BDA508BD5/0/34352e3136322e3139322e302f32322d3234203d3e20323637363937.roa
File:                     34352e3136322e3139322e302f32322d3234203d3e20323637363937.roa (raw, json)
Hash identifier:          SgKZBiO/83jmxvdpZBcA480CxDInkqni1f1+ZPaaFqk=
Subject key identifier:   1A:A9:61:CB:D4:9A:F9:0A:85:81:A1:27:8A:A2:E4:CE:B9:59:08:81
Certificate issuer:       /CN=82C408605C62BDEBE4F49FE1BE2E967739AE70A5
Certificate serial:       71B7744A59761FA99C3D5BFCF2EE19356DB53794
Authority key identifier: 82:C4:08:60:5C:62:BD:EB:E4:F4:9F:E1:BE:2E:96:77:39:AE:70:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82C408605C62BDEBE4F49FE1BE2E967739AE70A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B798333D4C59DEA785D86F630F4A0F701AE765A022AFAE0177D4384BDA508BD5/0/34352e3136322e3139322e302f32322d3234203d3e20323637363937.roa
Signing time:             Tue 04 Feb 2025 18:12:00 +0000
ROA not before:           Tue 04 Feb 2025 18:07:00 +0000
ROA not after:            Tue 03 Feb 2026 18:12:00 +0000
asID:                     267697
IP address blocks:        45.162.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B798333D4C59DEA785D86F630F4A0F701AE765A022AFAE0177D4384BDA508BD5/0/82C408605C62BDEBE4F49FE1BE2E967739AE70A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B798333D4C59DEA785D86F630F4A0F701AE765A022AFAE0177D4384BDA508BD5/0/82C408605C62BDEBE4F49FE1BE2E967739AE70A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82C408605C62BDEBE4F49FE1BE2E967739AE70A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 01:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b7:74:4a:59:76:1f:a9:9c:3d:5b:fc:f2:ee:19:35:6d:b5:37:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82C408605C62BDEBE4F49FE1BE2E967739AE70A5
        Validity
            Not Before: Feb  4 18:07:00 2025 GMT
            Not After : Feb  3 18:12:00 2026 GMT
        Subject: CN=1AA961CBD49AF90A8581A1278AA2E4CEB9590881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a1:39:39:e7:1f:6a:ca:18:43:94:3b:3c:5b:
                    f1:43:1c:2a:7a:c5:cf:63:4d:95:c4:12:c3:3d:55:
                    99:32:e1:0b:77:b0:69:d9:da:42:be:6a:d6:e2:5a:
                    dc:6e:f8:bc:d9:9d:77:08:bd:1e:3b:25:01:9f:81:
                    05:30:ba:5a:5b:0c:51:a0:15:22:53:66:ed:17:f3:
                    f1:d3:3b:6c:67:8c:3b:a9:1e:7f:8d:d2:17:ce:2d:
                    b2:ac:c6:ba:8d:d5:20:43:6d:0e:86:5a:db:c5:66:
                    b5:d9:2a:7e:8a:a8:33:07:61:3e:42:90:2e:24:07:
                    e2:a3:cb:b9:2c:3e:71:fd:74:ad:1d:86:cf:39:73:
                    f1:ce:14:3f:db:d4:03:c1:47:e8:47:fb:ca:b9:3e:
                    57:b4:38:ef:bd:24:13:60:3d:ea:44:2f:04:c2:ad:
                    21:7d:24:1b:8a:b6:d6:bc:fa:00:19:dd:f7:e9:60:
                    f2:a6:03:a8:95:86:a4:32:86:4f:a6:50:a4:65:2f:
                    c5:fd:b5:e2:b8:53:49:f8:36:fe:87:f6:5a:71:79:
                    57:50:d1:03:4c:1b:de:8e:16:c3:fd:7b:4d:e5:6c:
                    53:36:7d:aa:7d:39:92:3f:a8:29:5e:22:4d:94:cc:
                    f2:d3:99:a4:66:2d:fa:89:72:d3:71:4b:b9:36:fc:
                    39:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A9:61:CB:D4:9A:F9:0A:85:81:A1:27:8A:A2:E4:CE:B9:59:08:81
            X509v3 Authority Key Identifier:
                keyid:82:C4:08:60:5C:62:BD:EB:E4:F4:9F:E1:BE:2E:96:77:39:AE:70:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B798333D4C59DEA785D86F630F4A0F701AE765A022AFAE0177D4384BDA508BD5/0/82C408605C62BDEBE4F49FE1BE2E967739AE70A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82C408605C62BDEBE4F49FE1BE2E967739AE70A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B798333D4C59DEA785D86F630F4A0F701AE765A022AFAE0177D4384BDA508BD5/0/34352e3136322e3139322e302f32322d3234203d3e20323637363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:7f:0f:2b:78:39:e0:66:20:99:59:e4:73:00:2a:f9:51:e6:
         bb:41:f0:33:c4:c8:05:4d:fc:86:3f:b9:06:fe:d6:fa:88:dd:
         02:f1:57:86:1d:3e:db:c0:df:94:d1:46:92:ef:68:6b:cc:2d:
         10:a3:ca:cf:3d:3b:c6:e6:24:c3:55:ca:5f:37:63:2c:bd:ee:
         17:58:5c:7c:04:fa:5b:4d:eb:17:df:3c:ce:40:ec:3f:dc:66:
         3c:85:03:1a:4e:48:27:16:31:e1:58:f7:3b:47:5a:e8:33:29:
         fb:89:ac:52:29:04:97:65:da:9c:86:de:81:f0:39:79:d1:6a:
         f3:5b:c4:6b:41:bf:c6:ed:ed:90:d5:ae:c6:d1:ac:d9:cd:51:
         ef:89:ce:90:e9:88:a0:fd:5d:43:67:aa:a1:cf:cc:16:32:4f:
         fe:d6:44:72:e2:65:b9:82:6e:3d:0f:c6:1a:43:ac:46:62:f7:
         eb:1e:59:fb:76:b1:45:52:34:cc:97:36:ee:cd:d3:19:c8:00:
         28:4a:46:28:20:40:f0:97:8c:a2:72:7c:33:86:a3:a0:3a:18:
         54:c4:73:a8:50:69:a9:bf:14:a3:27:02:ba:f4:10:93:79:ea:
         a5:e3:16:db:d4:06:02:b5:c4:b9:75:86:df:f6:36:4c:67:57:
         fd:23:34:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:52:10 2025 by rpki-client