Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/34352e3233312e3231362e302f32322d3235203d3e20323732383033.roa
File:                     34352e3233312e3231362e302f32322d3235203d3e20323732383033.roa (raw, json)
Hash identifier:          FQThkI8qBiU4rgLQ32lGh//xKAgGjH5RG+6SB+ZKeyg=
Subject key identifier:   22:EC:2C:E6:8C:71:D1:B4:64:3B:58:03:B4:46:A7:43:87:4D:10:E1
Certificate issuer:       /CN=F3EBCEE3E497417787B358CE65ADA6D9F5C0116D
Certificate serial:       0F2638EED761266F58336998BCF12BFADD69B9A0
Authority key identifier: F3:EB:CE:E3:E4:97:41:77:87:B3:58:CE:65:AD:A6:D9:F5:C0:11:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/34352e3233312e3231362e302f32322d3235203d3e20323732383033.roa
Signing time:             Tue 04 Feb 2025 18:49:51 +0000
ROA not before:           Tue 04 Feb 2025 18:44:51 +0000
ROA not after:            Tue 03 Feb 2026 18:49:51 +0000
asID:                     272803
IP address blocks:        45.231.216.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 13:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:26:38:ee:d7:61:26:6f:58:33:69:98:bc:f1:2b:fa:dd:69:b9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3EBCEE3E497417787B358CE65ADA6D9F5C0116D
        Validity
            Not Before: Feb  4 18:44:51 2025 GMT
            Not After : Feb  3 18:49:51 2026 GMT
        Subject: CN=22EC2CE68C71D1B4643B5803B446A743874D10E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4a:c3:c8:83:cb:53:c9:cd:cf:4e:a5:6d:4a:
                    fe:41:f3:b7:70:ea:be:08:45:4b:96:a6:89:7c:64:
                    32:bc:86:c7:1c:32:3a:f1:62:3c:8f:a2:77:f3:eb:
                    48:57:18:87:6a:82:93:61:29:26:83:dc:15:a4:94:
                    e6:58:0c:5d:d3:77:c9:46:f1:4b:70:55:46:ae:fc:
                    a7:48:66:7d:99:ba:41:f0:2d:fd:9a:38:cb:c5:e7:
                    b3:f1:a2:a6:51:15:7c:99:55:90:12:8d:6e:2f:4e:
                    13:db:50:bf:3f:88:18:1b:47:57:55:14:b9:8b:ee:
                    16:a6:a4:6a:f2:69:72:09:68:c5:b4:44:00:2f:57:
                    b2:ab:e8:c2:84:21:8f:3c:e4:5d:f1:1e:2f:84:d3:
                    fd:68:0f:26:cd:c1:cc:06:15:68:a7:a3:a4:33:79:
                    09:70:2a:f2:88:3c:b7:00:29:ea:79:d7:6a:3d:b3:
                    64:1f:77:5e:9f:dc:b1:04:48:ed:de:00:d8:e1:28:
                    15:02:01:7d:18:ce:1e:2a:a7:ac:8f:d9:d6:ef:82:
                    99:04:14:96:c5:b7:a7:5f:10:54:2d:13:a9:14:15:
                    9f:a8:4f:f1:36:b3:94:da:69:0a:1f:a8:99:28:11:
                    4e:6e:b4:88:0b:16:7c:d1:82:d5:8c:c7:7f:48:f4:
                    7b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EC:2C:E6:8C:71:D1:B4:64:3B:58:03:B4:46:A7:43:87:4D:10:E1
            X509v3 Authority Key Identifier:
                keyid:F3:EB:CE:E3:E4:97:41:77:87:B3:58:CE:65:AD:A6:D9:F5:C0:11:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3EBCEE3E497417787B358CE65ADA6D9F5C0116D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C6B7941B8B869D45335608E8A9F6E95847B80D91A2FD65CA275C831CF4983298/0/34352e3233312e3231362e302f32322d3235203d3e20323732383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:4b:a9:53:78:c2:3f:66:ca:c5:42:8a:7f:43:74:1d:26:c5:
         fa:0e:6c:fe:c0:94:fc:66:dc:d7:b1:49:1a:67:ae:d3:58:2b:
         5c:07:d4:15:ec:7e:f2:0f:f7:77:77:db:79:be:85:c8:e1:5b:
         df:85:20:d0:a9:56:8e:7a:70:2d:cf:06:ff:ad:6a:49:3c:f5:
         52:e4:44:59:b4:78:20:67:6d:98:c8:cf:33:3f:46:3a:86:62:
         fa:d3:e1:58:d2:21:bb:a3:52:95:aa:44:56:b1:61:24:81:d6:
         84:67:97:71:73:2f:71:df:06:a6:09:ec:f4:aa:51:d0:59:d3:
         4b:88:ea:23:7f:25:85:79:67:98:8a:d5:4c:a3:5c:80:8f:fd:
         47:4f:b3:7a:12:e6:6e:eb:6e:db:fa:be:94:af:ab:b9:06:12:
         f6:11:a8:c4:1b:ff:25:61:4d:13:2f:b7:13:b5:f1:54:f2:b3:
         83:71:3f:6f:ad:1b:25:5d:d3:86:76:96:1a:39:4b:b8:06:e6:
         6d:46:9a:27:de:f1:06:41:88:a3:2a:25:98:10:ed:c6:47:98:
         9b:de:90:72:f4:81:c0:a5:22:83:70:14:b9:e8:b5:fe:fa:a8:
         50:f0:8f:d6:2b:d4:04:2b:88:bc:a5:a8:ea:51:13:3d:7a:c0:
         9c:70:b5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:34:42 2025 by rpki-client