Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/34352e3233312e34302e302f32322d3234203d3e20323635353234.roa
File:                     34352e3233312e34302e302f32322d3234203d3e20323635353234.roa (raw, json)
Hash identifier:          +n955Hbe0J6qRXAiiOnADPZxqvt08N1Fo3E9Yv50gw0=
Subject key identifier:   07:56:58:19:23:A9:C4:C6:9A:3F:B8:0C:2D:11:2B:7A:62:F1:1C:30
Certificate issuer:       /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial:       57381020E0F6D48CD452A7D39E1931E7129AC7D6
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/34352e3233312e34302e302f32322d3234203d3e20323635353234.roa
Signing time:             Wed 05 Feb 2025 07:09:02 +0000
ROA not before:           Wed 05 Feb 2025 07:04:02 +0000
ROA not after:            Wed 04 Feb 2026 07:09:02 +0000
asID:                     265524
IP address blocks:        45.231.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:38:10:20:e0:f6:d4:8c:d4:52:a7:d3:9e:19:31:e7:12:9a:c7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
        Validity
            Not Before: Feb  5 07:04:02 2025 GMT
            Not After : Feb  4 07:09:02 2026 GMT
        Subject: CN=0756581923A9C4C69A3FB80C2D112B7A62F11C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:77:fa:ba:99:be:bb:8d:5f:6e:2f:51:d3:6f:
                    58:a7:3d:ef:05:0f:be:af:f0:a6:d5:6d:ea:b2:0b:
                    2a:99:07:e2:b2:bd:70:11:c1:b1:cf:c0:f0:ef:16:
                    ae:ae:25:ae:8f:91:c8:2a:b3:83:a5:4d:f5:24:f9:
                    36:fb:79:d5:a9:96:6e:45:5c:1c:b1:84:81:5b:bb:
                    0c:30:ce:fe:2d:1d:ef:3c:e8:9d:44:ba:21:bd:1e:
                    56:1b:09:c2:fb:63:6f:8c:39:0e:f7:26:6b:02:b3:
                    ff:4c:48:5e:0d:24:da:e1:83:15:17:d7:4f:03:46:
                    b0:4c:11:d3:1e:91:20:0f:ef:44:12:f3:55:a9:0a:
                    d3:bb:18:c1:9f:df:5b:e3:04:d6:61:c5:85:5a:95:
                    1a:39:70:2f:21:1b:e9:64:34:3e:57:d5:66:b3:b8:
                    ec:f0:df:cf:a5:d5:1c:ba:3e:83:b3:a9:44:b5:27:
                    b2:b1:8d:4e:67:b1:16:ff:3b:78:ea:87:69:ff:3f:
                    78:34:e5:a0:fb:94:65:32:35:06:c9:df:8a:b2:03:
                    f6:a2:74:1c:da:c9:2b:f7:7d:c6:e7:d4:44:9c:7b:
                    3e:84:6b:ab:a7:e5:f0:79:c4:53:ff:ce:73:fd:3a:
                    c1:41:92:55:b1:2c:57:77:72:3c:ed:78:1c:39:f4:
                    aa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:56:58:19:23:A9:C4:C6:9A:3F:B8:0C:2D:11:2B:7A:62:F1:1C:30
            X509v3 Authority Key Identifier:
                keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/34352e3233312e34302e302f32322d3234203d3e20323635353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:06:36:86:25:a2:dd:f0:2b:20:cc:5a:2c:6f:90:1e:5d:33:
         2c:dc:96:9f:96:63:cb:4f:20:03:31:6c:f5:1b:4f:98:9e:08:
         1e:cd:c8:4a:cb:8d:5b:c5:aa:4c:89:81:c1:54:9f:ab:ed:8c:
         4b:97:0d:e5:d4:85:c0:be:e9:8f:cb:a3:79:cc:9d:65:57:2e:
         47:08:3d:85:18:31:78:cc:c1:eb:3d:07:7a:03:c8:60:37:a1:
         f1:75:3b:08:d9:de:d9:3e:08:43:e0:cb:f8:12:01:c3:4d:d1:
         25:92:43:6b:6d:0a:6c:e1:82:48:2b:bc:f4:6b:0e:75:b4:02:
         9d:31:26:e8:7c:f6:6f:d2:32:75:91:d5:f2:c4:f2:06:c5:d3:
         8d:d5:1a:8f:7a:b6:ad:32:c6:61:31:00:73:59:39:1c:9e:94:
         7f:73:ef:6b:04:50:ce:5b:e5:03:30:ff:f3:82:49:59:82:df:
         e2:b4:5a:3a:7c:8b:7f:02:2b:a2:7a:f2:45:48:d0:11:08:a2:
         d5:c0:0a:68:13:73:d1:c4:f0:a0:d7:f9:50:72:ea:2c:58:54:
         47:d4:ce:b9:a5:49:d7:88:35:49:3d:34:30:c9:a6:86:61:b9:
         d7:96:e7:ea:41:e6:dd:d8:26:68:15:0c:b5:b2:d3:62:4f:20:
         c5:4d:08:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:52:32 2025 by rpki-client