Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/34352e3139302e31332e302f32342d3234203d3e20323639393334.roa
File:                     34352e3139302e31332e302f32342d3234203d3e20323639393334.roa (raw, json)
Hash identifier:          6DpoS2ub0Oe6jtzGJjfaNCWTx+fv8Cqw+0eeQNzkGT8=
Subject key identifier:   B4:37:CA:04:1D:6D:AE:99:F9:C3:A4:7C:90:F6:85:FF:35:86:8D:0F
Certificate issuer:       /CN=3D5D41606E30358D02DDFE121E52934DFD96EEFE
Certificate serial:       5F54E85C9DBA7D433E037CC738D59AA2C11456D3
Authority key identifier: 3D:5D:41:60:6E:30:35:8D:02:DD:FE:12:1E:52:93:4D:FD:96:EE:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/34352e3139302e31332e302f32342d3234203d3e20323639393334.roa
Signing time:             Tue 04 Feb 2025 19:58:10 +0000
ROA not before:           Tue 04 Feb 2025 19:53:10 +0000
ROA not after:            Tue 03 Feb 2026 19:58:10 +0000
asID:                     269934
IP address blocks:        45.190.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:54:e8:5c:9d:ba:7d:43:3e:03:7c:c7:38:d5:9a:a2:c1:14:56:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D5D41606E30358D02DDFE121E52934DFD96EEFE
        Validity
            Not Before: Feb  4 19:53:10 2025 GMT
            Not After : Feb  3 19:58:10 2026 GMT
        Subject: CN=B437CA041D6DAE99F9C3A47C90F685FF35868D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ca:3e:36:aa:43:74:36:1e:c0:95:db:1f:5a:
                    3d:04:23:f6:97:9f:a2:d7:c8:36:e5:8c:be:f8:56:
                    e4:32:8c:46:d6:91:bd:74:82:d0:34:10:1b:12:cb:
                    96:ff:fc:bd:b3:f8:11:35:6c:e0:a5:6e:09:62:d9:
                    f6:96:fb:03:c2:3d:6f:b8:a5:dd:5d:b5:11:7d:e5:
                    73:fe:c8:ab:a8:84:68:da:ad:29:32:c9:f7:04:b0:
                    e8:09:a9:7e:3b:dc:70:1a:29:54:91:47:64:9b:07:
                    b1:eb:b4:20:85:60:07:a4:bf:21:1e:ac:42:f0:b7:
                    14:47:27:34:a5:33:8b:6f:33:91:61:f9:59:f5:01:
                    3a:5f:74:92:22:41:e7:a5:b4:19:fe:9c:9e:cc:89:
                    cd:26:a4:3b:b1:0f:50:18:6b:9c:18:85:87:fb:79:
                    69:6e:1e:c5:05:4e:39:68:3c:8e:dd:c1:f2:54:6d:
                    1a:f7:ac:62:a8:96:06:37:3d:de:39:84:6a:90:46:
                    5d:1f:ee:12:6a:66:21:34:5c:bd:22:a0:ef:66:cc:
                    b4:58:d4:cc:1f:23:a6:c5:c3:02:4a:83:60:5c:63:
                    cf:a8:68:74:f6:40:a8:bf:7a:ce:27:87:e6:a4:da:
                    21:d3:77:48:14:13:4d:ed:da:a9:db:79:2b:3b:4f:
                    7f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:37:CA:04:1D:6D:AE:99:F9:C3:A4:7C:90:F6:85:FF:35:86:8D:0F
            X509v3 Authority Key Identifier:
                keyid:3D:5D:41:60:6E:30:35:8D:02:DD:FE:12:1E:52:93:4D:FD:96:EE:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D5D41606E30358D02DDFE121E52934DFD96EEFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2E116D17FCE0E5908FDF92F9FF8342A1A95B6E08606889D72AFC49B05E22386/0/34352e3139302e31332e302f32342d3234203d3e20323639393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:3e:c0:65:87:fd:91:ba:05:45:f3:a8:31:e9:17:8c:ae:fa:
         f1:ae:7c:c2:db:17:a0:79:ee:47:fe:5c:e7:c4:8a:1b:1a:92:
         98:26:82:78:d4:45:5b:86:48:d4:85:5d:e1:84:2d:5e:8c:d2:
         aa:be:23:1d:94:87:b5:3c:ab:9d:64:34:83:03:2a:bd:8d:3a:
         fa:ad:63:3e:50:5a:ff:5d:94:8f:5a:79:ba:88:13:e1:01:7e:
         d7:1f:87:37:57:5c:38:28:98:06:f3:0a:28:4d:c8:f9:03:26:
         de:d1:93:92:d6:31:a7:0d:a3:df:17:fd:5f:d3:55:78:0d:2f:
         ef:4a:e1:5f:f0:cc:6c:c0:79:b2:8d:82:52:dd:18:2f:c4:c8:
         3b:3c:72:ae:aa:03:c1:86:2d:43:b8:3c:1f:e5:2c:8b:65:5f:
         04:cf:c2:82:5f:e2:1e:36:4d:1a:31:a5:31:92:c7:46:8f:31:
         fd:93:51:47:af:ee:8a:2a:53:c6:85:b6:32:dc:c2:44:4a:09:
         46:1c:cd:7e:27:55:9f:e4:a1:d0:28:37:44:95:99:a3:06:8d:
         45:9d:cc:95:d5:84:7b:9d:aa:43:12:e9:32:0e:d9:66:2b:73:
         99:66:7b:11:73:b3:6f:ba:de:d9:cf:d1:67:52:d0:a9:df:bd:
         3e:04:a3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:33:05 2025 by rpki-client