Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/34352e3139302e3136342e302f32322d3232203d3e20323639383831.roa
File:                     34352e3139302e3136342e302f32322d3232203d3e20323639383831.roa (raw, json)
Hash identifier:          OKV6w/UJ8LaXLCOU6xPyRcDFhsVwDTMob3n5katRCRs=
Subject key identifier:   A2:63:59:14:AD:88:04:5C:49:13:7E:CA:46:E4:E7:CB:1B:C3:A5:8B
Certificate issuer:       /CN=C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659
Certificate serial:       443573BD3F2CA9A80C79F688FCC02BB74F9AF1CD
Authority key identifier: C1:B7:5D:01:0A:CA:4B:0B:A2:08:6A:26:4F:1A:E1:FD:0F:0C:C6:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/34352e3139302e3136342e302f32322d3232203d3e20323639383831.roa
Signing time:             Wed 19 Mar 2025 14:12:27 +0000
ROA not before:           Wed 19 Mar 2025 14:07:27 +0000
ROA not after:            Wed 18 Mar 2026 14:12:27 +0000
asID:                     269881
IP address blocks:        45.190.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:35:73:bd:3f:2c:a9:a8:0c:79:f6:88:fc:c0:2b:b7:4f:9a:f1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659
        Validity
            Not Before: Mar 19 14:07:27 2025 GMT
            Not After : Mar 18 14:12:27 2026 GMT
        Subject: CN=A2635914AD88045C49137ECA46E4E7CB1BC3A58B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a8:fc:87:74:b6:ed:77:4c:0c:d5:29:b0:dd:
                    62:3b:d7:d6:e8:50:43:01:2c:ac:8e:88:18:c9:10:
                    ab:52:bb:20:c2:82:8c:4b:97:f5:f8:a0:5c:b5:b4:
                    94:d4:af:12:7a:ae:27:e9:58:b9:04:7e:32:c2:a5:
                    23:34:5d:4c:30:ac:25:7d:62:90:b7:d4:c7:20:b9:
                    a0:68:2a:e7:02:96:a6:92:5e:1c:b7:24:a5:19:8d:
                    6c:e8:43:13:8c:6b:48:fd:02:26:c6:da:62:70:63:
                    5c:99:4f:14:3f:22:2f:c6:36:f4:00:02:60:f9:0d:
                    37:86:90:e7:6c:46:dc:9a:d7:75:6e:1c:e0:c9:bc:
                    11:98:d6:e2:5a:89:2d:71:b6:50:d7:10:66:f8:28:
                    79:40:01:1f:a7:28:8b:fc:15:c4:c7:95:0e:e3:f5:
                    15:63:13:28:b1:2c:5a:9a:04:94:35:37:60:1d:41:
                    68:c9:9e:a4:1d:27:62:1a:3e:46:72:36:77:a1:0d:
                    d2:41:c0:f6:9f:7e:6f:6e:d7:62:1a:6f:a6:2f:19:
                    50:99:d0:d8:6f:19:c4:1f:cf:8c:88:b4:0a:48:9b:
                    f2:70:44:be:af:ea:ac:09:c6:eb:9a:e7:15:85:d7:
                    10:5d:d1:b6:74:ca:7d:17:36:f1:a7:97:29:83:d1:
                    1f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:63:59:14:AD:88:04:5C:49:13:7E:CA:46:E4:E7:CB:1B:C3:A5:8B
            X509v3 Authority Key Identifier:
                keyid:C1:B7:5D:01:0A:CA:4B:0B:A2:08:6A:26:4F:1A:E1:FD:0F:0C:C6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/34352e3139302e3136342e302f32322d3232203d3e20323639383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:11:11:e3:96:9c:cf:5f:84:21:ae:68:25:cd:0e:93:3f:ae:
         bf:c7:de:11:5b:08:2f:ee:ba:6b:bb:f8:e2:1e:9c:f3:e1:bf:
         fb:d9:b4:2f:ce:4e:03:3e:b0:37:ea:22:02:40:7e:30:9b:2f:
         cf:79:93:b0:ad:a3:00:cd:4b:45:bf:a5:55:02:d5:b2:00:33:
         98:66:41:5a:a3:eb:61:16:62:b7:65:bd:fa:15:a6:e4:5f:d3:
         8e:9f:5c:1c:14:86:96:9a:92:fa:a3:b6:62:b3:dc:e9:f5:de:
         2c:f4:f5:92:de:05:ce:c0:84:c5:54:41:c7:04:ef:a7:3d:49:
         ff:a3:05:a4:7a:8d:6c:02:f4:98:9c:e5:c9:83:8c:c7:db:7a:
         81:db:bc:b7:b4:82:04:a1:66:9e:46:87:6d:1c:3f:f6:05:cc:
         62:d1:81:b6:e1:1a:6d:6b:d4:36:83:1f:3a:bb:c8:57:53:86:
         25:4b:23:7a:5c:9c:97:8b:df:92:39:79:36:e3:94:91:93:b3:
         c4:43:9e:83:60:db:23:6e:ca:cd:98:57:02:20:d7:26:2d:56:
         2a:fb:28:5e:1e:3b:d1:3a:9d:cb:98:c8:dc:51:3a:00:ed:36:
         13:b9:05:5c:48:f0:01:56:1a:ae:70:5b:a7:e4:e2:b7:4c:74:
         50:d2:fc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:58:01 2025 by rpki-client