Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/34352e3233362e3130342e302f32322d3234203d3e20323633323338.roa
File:                     34352e3233362e3130342e302f32322d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          L4N+sBi30NuCWvhLjQ/lOi2RG/i6gf+/l6fs8Mp0VZY=
Subject key identifier:   CF:AA:63:5D:04:37:D8:B0:0E:24:D8:69:2D:02:F7:47:56:B2:38:75
Certificate issuer:       /CN=AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3
Certificate serial:       774898EA652AAFCE624FD4699E422E9CC412B4A8
Authority key identifier: AA:AD:6C:B4:C2:34:07:78:75:F9:DC:AD:B1:FC:79:B4:34:7A:BD:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/34352e3233362e3130342e302f32322d3234203d3e20323633323338.roa
Signing time:             Tue 04 Feb 2025 18:12:29 +0000
ROA not before:           Tue 04 Feb 2025 18:07:29 +0000
ROA not after:            Tue 03 Feb 2026 18:12:29 +0000
asID:                     263238
IP address blocks:        45.236.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:48:98:ea:65:2a:af:ce:62:4f:d4:69:9e:42:2e:9c:c4:12:b4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3
        Validity
            Not Before: Feb  4 18:07:29 2025 GMT
            Not After : Feb  3 18:12:29 2026 GMT
        Subject: CN=CFAA635D0437D8B00E24D8692D02F74756B23875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:87:65:aa:9f:69:e9:cf:cc:ce:c0:4a:1c:
                    21:01:d1:0d:95:b1:f6:bf:a7:e0:ff:36:12:83:5a:
                    46:1c:96:ec:e2:dc:b0:f4:e8:a2:2f:63:d2:54:da:
                    68:62:e5:fb:d8:6a:8f:7b:6c:b0:77:f4:1c:e1:6d:
                    58:db:13:fb:a9:51:07:5d:93:da:56:fe:4e:ed:cc:
                    99:f3:d1:3c:36:25:70:65:4d:9d:de:d5:01:fa:e5:
                    44:8d:18:b9:62:a0:5b:ce:19:22:4e:11:4a:b3:57:
                    4c:76:d6:33:65:83:c7:55:eb:6d:b9:1d:19:c6:11:
                    ab:c4:55:8f:72:1c:4d:7d:be:f5:b0:0f:d3:f1:cf:
                    f6:3b:2a:d0:3d:4a:83:dd:62:4c:c2:43:b5:6b:22:
                    06:b9:81:e2:6e:9f:76:74:9f:2d:eb:46:d0:7f:82:
                    84:2a:20:76:ba:2d:92:92:04:3e:5c:2a:3f:e3:12:
                    e4:24:a3:21:e5:b8:74:92:6a:fe:4e:54:f4:f6:79:
                    09:c3:ee:9e:d5:8e:8c:15:03:d3:35:c4:51:25:3a:
                    c3:7e:63:f4:b8:14:f2:be:4a:e3:68:3b:6c:58:c7:
                    30:3d:54:22:61:fa:64:e8:2e:79:66:96:37:15:38:
                    87:a9:90:d3:40:c2:d0:02:50:54:59:0c:28:6f:d2:
                    70:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AA:63:5D:04:37:D8:B0:0E:24:D8:69:2D:02:F7:47:56:B2:38:75
            X509v3 Authority Key Identifier:
                keyid:AA:AD:6C:B4:C2:34:07:78:75:F9:DC:AD:B1:FC:79:B4:34:7A:BD:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAAD6CB4C234077875F9DCADB1FC79B4347ABDB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5ED04F1AD58695C690BD41C0D63AEAD51D15AEB5686D8CD162476FBBE3639C9/0/34352e3233362e3130342e302f32322d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:97:ec:53:fb:4b:8d:1c:6d:c9:69:5c:6a:c7:43:e1:97:ed:
         1a:fa:36:c3:3d:23:26:ed:cb:53:63:66:8d:4c:e8:c3:17:58:
         55:8b:b4:a9:22:0c:41:6d:49:d9:a4:85:2e:aa:f8:20:cb:33:
         14:59:c2:80:a2:1f:03:25:32:26:1a:07:ae:29:63:da:66:7a:
         56:80:96:c0:f7:e0:e7:cf:d6:85:bd:09:62:f1:ae:02:55:e7:
         e3:e0:20:21:54:df:14:cf:38:8b:1c:58:c4:a2:c1:cd:30:33:
         f5:62:29:ca:6b:a7:c2:b9:2f:96:34:06:db:16:d5:55:bc:25:
         1c:44:d6:1a:a1:4a:14:46:c2:5b:50:64:ad:0c:b3:23:80:34:
         53:cc:a2:21:93:ef:1e:65:5c:33:3c:99:18:a1:53:87:d3:b7:
         13:9a:48:be:65:33:e4:37:36:0a:42:c9:c8:c8:65:81:53:a0:
         ab:bb:d4:a0:98:ba:06:6a:3f:74:3d:f4:7e:47:14:da:25:fd:
         d9:9b:b8:6e:42:7f:4b:e8:a1:7c:7b:a1:f5:dc:3c:75:d5:81:
         4c:ea:f0:71:4c:44:96:c1:48:74:21:90:f3:af:a0:c0:88:df:
         e4:21:b1:33:d0:c0:ec:2c:c7:e2:2a:a5:ad:f7:a3:a1:aa:c6:
         5b:24:f9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:06 2025 by rpki-client