Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e20323636383538.roa
File:                     34352e3233392e34342e302f32322d3234203d3e20323636383538.roa (raw, json)
Hash identifier:          odM7zbtJXl9RM8ZkLhjcgrYnToyisA/RjF53i3W/C5I=
Subject key identifier:   75:E2:C3:0A:29:CB:DE:BE:4C:A1:F1:EA:1B:F1:5B:DE:58:ED:35:81
Certificate issuer:       /CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Certificate serial:       384C57BEECDD1EF1529AABF160DA93FD5EBCC6C6
Authority key identifier: 8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e20323636383538.roa
Signing time:             Thu 03 Apr 2025 19:10:00 +0000
ROA not before:           Thu 03 Apr 2025 19:05:00 +0000
ROA not after:            Thu 02 Apr 2026 19:10:00 +0000
asID:                     266858
IP address blocks:        45.239.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 20:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4c:57:be:ec:dd:1e:f1:52:9a:ab:f1:60:da:93:fd:5e:bc:c6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
        Validity
            Not Before: Apr  3 19:05:00 2025 GMT
            Not After : Apr  2 19:10:00 2026 GMT
        Subject: CN=75E2C30A29CBDEBE4CA1F1EA1BF15BDE58ED3581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d6:f3:f7:fb:eb:58:5a:f7:f2:12:37:cf:a3:
                    6f:ce:65:ff:c4:27:ad:ed:db:0e:c9:51:fb:92:f6:
                    4d:b0:0e:28:b9:cb:55:21:d5:1b:ac:23:62:d2:1f:
                    b0:67:9b:9f:64:61:3b:4e:2e:40:3c:63:fd:a8:ef:
                    49:03:7b:00:e4:f9:da:35:ad:6e:6d:7a:66:66:d2:
                    d1:6f:59:ff:e8:84:97:99:95:16:f8:9f:ee:90:1f:
                    75:68:46:74:f4:7e:35:63:bb:3b:95:26:91:bc:c0:
                    f8:f9:3c:ce:59:c3:d3:17:d6:aa:76:0c:81:ab:04:
                    4b:76:7f:c9:0c:0a:60:fa:09:44:da:0e:31:f1:ba:
                    63:78:1e:da:30:8c:6c:fb:93:03:65:aa:61:d7:04:
                    6d:48:d9:1b:20:27:75:04:ba:33:c8:8d:7a:c1:11:
                    f7:31:67:8a:7e:7d:ca:a7:b3:f8:74:59:cb:6b:6a:
                    8f:64:32:31:9b:25:0e:2f:e8:1e:13:9d:19:11:46:
                    21:5d:e2:0e:d8:2b:ff:7c:39:1a:7b:93:a1:70:bb:
                    01:18:b3:f0:2b:82:b2:d4:85:f8:2b:97:65:fb:80:
                    d1:c1:28:82:df:f8:5e:f5:1c:e4:72:64:80:1e:e7:
                    f7:5d:03:7e:5e:d7:c0:9a:5f:3e:f4:26:6a:f2:ef:
                    e4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E2:C3:0A:29:CB:DE:BE:4C:A1:F1:EA:1B:F1:5B:DE:58:ED:35:81
            X509v3 Authority Key Identifier:
                keyid:8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e20323636383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:0c:4f:d2:b7:44:5f:33:ee:f8:28:d7:ae:f2:52:7b:50:ef:
         ac:97:35:5e:19:16:a7:7c:61:38:24:9c:63:6b:53:29:7e:85:
         d8:5e:b9:e1:77:b5:03:0e:53:23:eb:74:b4:f8:22:2a:63:22:
         0c:6d:39:a9:c1:75:b6:66:56:f1:b1:38:89:f9:72:97:4c:f0:
         46:ec:4e:91:a9:d3:7a:65:d9:14:18:3c:bb:fe:f9:95:15:8f:
         2e:74:d7:c9:a0:5a:10:7d:63:af:76:62:70:31:aa:12:ff:e7:
         99:f2:af:b7:29:2b:30:cc:89:57:51:ce:81:58:5f:08:ef:86:
         2f:27:2c:df:f6:db:c0:00:5c:88:13:fd:22:2e:c7:b7:24:9f:
         01:b6:19:11:8b:58:59:e7:83:e7:1a:76:44:09:a6:c0:c4:fe:
         40:a1:de:20:46:77:49:b7:e1:1b:ef:16:5d:97:da:c9:4e:e7:
         5a:2c:08:82:f9:e0:9c:4b:b0:fd:b0:8d:73:47:96:c4:6c:ed:
         62:aa:bf:45:4d:1c:da:2f:c9:0f:b9:d8:11:78:2d:36:62:19:
         f3:7d:c8:17:c6:5e:e9:be:ba:fe:f4:99:ce:bc:c7:ec:fa:1b:
         c9:39:96:f7:c0:92:a4:52:f5:2d:db:b4:6c:de:ac:8f:c6:89:
         22:f3:38:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:53:59 2025 by rpki-client