Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32332e302f32342d3234203d3e20323633373235.roa
File:                     34352e3138322e32332e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          TsT7F4q8mbWAQHDCtRqSKmzt/o1LGHavVSqp90OHzRg=
Subject key identifier:   23:FA:77:AB:D0:BB:23:B8:71:C1:92:E8:2E:94:72:C7:5B:77:9A:A3
Certificate issuer:       /CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
Certificate serial:       16A7B519A16F8EF55A3377CCDF5596222D7ECF51
Authority key identifier: 16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32332e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 04 Feb 2025 18:30:54 +0000
ROA not before:           Tue 04 Feb 2025 18:25:54 +0000
ROA not after:            Tue 03 Feb 2026 18:30:54 +0000
asID:                     263725
IP address blocks:        45.182.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a7:b5:19:a1:6f:8e:f5:5a:33:77:cc:df:55:96:22:2d:7e:cf:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
        Validity
            Not Before: Feb  4 18:25:54 2025 GMT
            Not After : Feb  3 18:30:54 2026 GMT
        Subject: CN=23FA77ABD0BB23B871C192E82E9472C75B779AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1b:dd:0b:35:d8:0e:b5:04:1f:c7:31:68:89:
                    c0:f1:17:24:7d:02:84:65:e8:f2:83:d9:6b:18:c3:
                    60:e4:1b:7f:04:b6:0c:e4:82:6a:87:28:29:18:ce:
                    65:fe:a3:87:21:d9:73:bf:f7:87:d9:1e:92:19:1d:
                    4d:d1:ad:cc:04:28:f2:4a:50:04:d5:71:aa:79:02:
                    29:bc:ce:24:c1:50:8c:9a:ec:70:54:c1:7b:fb:12:
                    8c:67:35:9b:c8:c5:a2:14:29:a1:e6:8f:4c:11:54:
                    47:c5:e7:96:cc:5f:23:bf:91:73:ce:d2:a7:dc:9b:
                    af:aa:bc:c2:6c:78:9c:d2:ae:8d:04:69:a7:18:49:
                    e1:fb:3c:67:9c:93:80:c2:9d:55:cb:8c:76:3d:3f:
                    2e:88:90:06:3c:fb:8d:75:f3:bd:26:f3:17:54:5c:
                    e5:19:fa:83:18:11:ce:d2:4f:50:2b:ac:91:9c:f4:
                    da:fa:be:aa:47:12:66:60:ad:5d:af:42:08:04:b3:
                    92:4e:a9:8f:04:46:a3:8c:92:48:99:4a:f4:a0:2d:
                    17:65:5d:f7:11:fe:a8:06:b6:7f:a2:89:84:e1:56:
                    d2:9d:5a:e2:65:74:af:91:93:0c:7e:9d:0f:10:db:
                    6a:7b:f1:0b:42:0c:30:ef:d8:61:c1:0a:c9:91:59:
                    8b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FA:77:AB:D0:BB:23:B8:71:C1:92:E8:2E:94:72:C7:5B:77:9A:A3
            X509v3 Authority Key Identifier:
                keyid:16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32332e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:34:40:d2:3c:38:7f:bb:1b:25:a8:7c:39:dc:06:f2:1c:70:
         15:fc:27:66:94:ec:69:1c:9b:5f:d8:e2:e3:51:58:8c:46:10:
         5f:2c:d4:15:99:7e:44:e6:86:12:06:3e:eb:15:16:91:e9:8e:
         dd:71:5a:a0:40:5f:fa:17:f7:e2:13:26:71:47:4f:2d:fc:1f:
         4c:6a:60:e9:d1:4e:7a:56:fb:4a:4b:54:53:68:9d:4f:aa:bc:
         f7:de:86:b7:5e:3a:ea:6c:b7:fb:06:a0:83:71:99:2b:e9:23:
         19:9e:c1:41:ea:de:15:b1:bc:49:e0:79:0a:bb:ba:84:02:0f:
         db:e9:26:be:f2:95:e3:56:80:4a:e1:b0:22:a2:9f:12:68:c7:
         64:92:97:79:b2:64:ee:3e:e0:87:f7:78:16:ef:a4:3f:bc:4c:
         0d:f8:90:5e:87:45:14:e2:e3:7f:3f:06:af:9f:a7:1a:6a:52:
         6b:9c:26:c2:9b:d9:df:7d:8f:a6:a1:96:36:0c:6e:81:29:95:
         ed:73:3c:74:92:8a:c2:51:e6:c0:a3:07:5a:c5:b1:4f:64:fd:
         be:ef:e1:e9:e6:57:5d:c5:ec:52:a2:19:5e:8f:2b:b5:45:16:
         cf:e6:c5:d8:a4:a6:94:c5:1f:24:cd:fc:bb:5d:7e:e0:6f:7e:
         9e:58:50:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:58 2025 by rpki-client