Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/34352e362e3231322e302f32332d3234203d3e20323635373039.roa
File:                     34352e362e3231322e302f32332d3234203d3e20323635373039.roa (raw, json)
Hash identifier:          EiaaC1I4JlxFvsmqXo1yOvftTvy1LNFCiibnQOO7N3U=
Subject key identifier:   C5:15:4F:FD:10:F7:08:DD:92:95:1A:7F:B6:71:D0:EF:AF:AD:61:3D
Certificate issuer:       /CN=F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3
Certificate serial:       5321489D13D4511B73D2C82E4096D64810693C63
Authority key identifier: F1:D8:BA:39:D3:C5:EC:C1:7D:CA:2A:6E:F5:4E:78:3C:5C:52:83:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/34352e362e3231322e302f32332d3234203d3e20323635373039.roa
Signing time:             Tue 04 Feb 2025 18:08:01 +0000
ROA not before:           Tue 04 Feb 2025 18:03:01 +0000
ROA not after:            Tue 03 Feb 2026 18:08:01 +0000
asID:                     265709
IP address blocks:        45.6.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 09:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:21:48:9d:13:d4:51:1b:73:d2:c8:2e:40:96:d6:48:10:69:3c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3
        Validity
            Not Before: Feb  4 18:03:01 2025 GMT
            Not After : Feb  3 18:08:01 2026 GMT
        Subject: CN=C5154FFD10F708DD92951A7FB671D0EFAFAD613D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:75:1e:7d:d8:d9:12:76:11:5f:a7:da:da:
                    83:c0:0c:18:af:05:a7:48:09:45:04:a6:5f:06:c4:
                    80:7d:15:f6:0a:3f:25:d6:65:ff:41:0c:a8:57:8b:
                    c4:1d:98:a0:dc:10:be:99:82:cc:37:a0:48:a7:7a:
                    8b:51:4c:4c:ab:b7:18:c4:13:69:81:e0:fe:0b:fa:
                    01:77:9d:9c:5a:1a:42:e9:98:7c:85:46:c7:69:7b:
                    a3:cb:7c:65:7e:ef:f1:5c:d3:06:b2:93:8d:15:f6:
                    64:b4:c3:ef:30:e2:28:2d:1c:3f:78:e0:99:1e:f3:
                    c5:55:c6:e5:0f:3b:99:2b:c8:e5:f2:d4:81:b1:21:
                    9d:80:e3:88:41:44:63:f8:23:29:bd:70:56:60:c1:
                    eb:cb:14:56:7a:21:05:43:4c:aa:33:8b:e4:82:a7:
                    1c:39:da:a3:71:6e:3f:cc:b7:70:2c:57:62:19:01:
                    72:22:56:b5:59:3a:81:d1:97:62:cb:88:f7:09:6a:
                    a3:e5:6b:22:96:0c:31:82:15:7e:fd:a6:36:0f:f4:
                    3d:4f:83:8d:7a:1d:59:4f:74:d5:04:2e:b6:c6:b9:
                    d7:e3:0c:68:50:73:6f:91:69:7f:86:ff:8f:7b:3f:
                    40:1f:81:ca:16:86:c0:9f:a6:07:b0:9d:77:94:65:
                    97:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:15:4F:FD:10:F7:08:DD:92:95:1A:7F:B6:71:D0:EF:AF:AD:61:3D
            X509v3 Authority Key Identifier:
                keyid:F1:D8:BA:39:D3:C5:EC:C1:7D:CA:2A:6E:F5:4E:78:3C:5C:52:83:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1D8BA39D3C5ECC17DCA2A6EF54E783C5C5283F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C037FD9A9C5E15E31B988E54EA091666451673B3ED11475FEABE787812D334E2/0/34352e362e3231322e302f32332d3234203d3e20323635373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:55:42:f6:7c:67:b8:1c:88:0f:a5:b8:68:37:cc:eb:fa:a6:
         0e:28:db:9b:bf:ef:05:7e:23:c5:3b:78:99:f1:1a:4e:e4:5f:
         2b:b9:87:cd:18:df:44:b7:2c:c4:6a:f1:26:72:4a:79:ec:0a:
         de:a8:fb:a2:c4:d2:09:1f:0d:09:18:ea:3b:c0:7c:7f:b2:5c:
         ea:dd:90:83:64:4b:8d:ab:4e:4d:57:be:df:f5:87:d9:f5:a1:
         59:0a:cd:70:73:80:89:d4:11:e0:60:ec:70:0f:0d:10:80:71:
         d5:14:d4:60:40:96:9f:6b:19:61:5e:b8:64:53:8f:5c:6c:5c:
         a1:1e:82:7b:ef:1e:d7:53:ab:8e:e8:6d:28:78:70:ee:bf:47:
         dc:3e:64:89:ff:ac:4f:01:27:15:4d:c2:a5:f9:a2:f7:79:97:
         10:63:7a:32:80:8d:73:57:72:df:66:e8:97:1c:6d:e1:a4:6f:
         ea:63:9d:4b:df:7b:ec:48:08:2f:d2:89:03:8c:18:50:e8:bb:
         38:a0:35:15:f0:32:a5:92:4d:95:1f:18:b8:d4:7e:b5:94:c2:
         42:bd:09:41:e9:42:ea:cd:f0:66:20:d6:86:74:35:2c:7c:1f:
         cd:0f:ff:c8:41:74:37:c7:19:55:1e:46:82:ff:66:87:d4:9e:
         36:31:5d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:06:25 2025 by rpki-client