Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/34352e3232382e3135322e302f32322d3234203d3e20323636363636.roa
File:                     34352e3232382e3135322e302f32322d3234203d3e20323636363636.roa (raw, json)
Hash identifier:          VAJMDD2gzKGTxy0lVmUaZyyxmJbvCtzkZIiZPOKk/Q8=
Subject key identifier:   0C:D0:EA:E4:85:27:30:5C:5E:BE:55:52:41:35:EA:77:DB:C4:7B:C0
Certificate issuer:       /CN=C7109B5FA9AA24BBF70E62A4318E4348C69F700A
Certificate serial:       154192F510CFD50F508E9AA938ABD137084EECF9
Authority key identifier: C7:10:9B:5F:A9:AA:24:BB:F7:0E:62:A4:31:8E:43:48:C6:9F:70:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/34352e3232382e3135322e302f32322d3234203d3e20323636363636.roa
Signing time:             Tue 04 Feb 2025 18:36:29 +0000
ROA not before:           Tue 04 Feb 2025 18:31:29 +0000
ROA not after:            Tue 03 Feb 2026 18:36:29 +0000
asID:                     266666
IP address blocks:        45.228.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:41:92:f5:10:cf:d5:0f:50:8e:9a:a9:38:ab:d1:37:08:4e:ec:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7109B5FA9AA24BBF70E62A4318E4348C69F700A
        Validity
            Not Before: Feb  4 18:31:29 2025 GMT
            Not After : Feb  3 18:36:29 2026 GMT
        Subject: CN=0CD0EAE48527305C5EBE55524135EA77DBC47BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:67:65:89:29:73:5c:0b:d2:22:c4:a2:2b:e7:
                    86:dd:07:87:30:01:27:40:59:7b:e3:5c:bb:83:22:
                    eb:d9:07:7c:8d:da:83:c2:60:c7:e4:b8:95:a1:46:
                    44:c6:8d:f5:1b:2c:1d:61:b4:33:b3:84:35:fb:79:
                    4f:59:5e:5e:0c:bd:40:82:b0:bc:e6:fc:28:9f:89:
                    e8:f9:2b:b8:f0:e2:36:23:ed:8d:b7:58:f8:ba:56:
                    8a:07:ff:dd:80:a2:aa:6a:b2:42:35:cb:50:42:ea:
                    ca:08:2b:a5:d5:93:8d:42:10:b2:ca:fa:13:2f:43:
                    a6:9e:9e:17:ea:49:e2:4a:cc:2d:1d:ab:6f:80:1b:
                    3a:18:fe:2b:c3:0a:d7:16:8f:1a:3f:e5:0f:2c:5b:
                    50:a7:25:fc:5e:e6:20:65:0f:04:81:75:09:18:cf:
                    ed:f5:34:d9:ed:a4:55:22:ae:bd:fb:6a:85:3e:d8:
                    de:0c:fb:25:21:da:3e:10:27:e8:bb:0b:ce:57:d4:
                    1f:1c:15:e8:17:ad:5c:94:dc:86:fc:22:33:75:69:
                    e5:fb:5c:a7:5f:99:ad:f9:71:53:98:d7:27:81:71:
                    8e:b4:b5:2c:e2:00:43:a9:ba:0b:cf:a0:d7:80:4e:
                    d8:04:83:50:86:96:f3:bf:1a:33:75:0d:ef:47:64:
                    c8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D0:EA:E4:85:27:30:5C:5E:BE:55:52:41:35:EA:77:DB:C4:7B:C0
            X509v3 Authority Key Identifier:
                keyid:C7:10:9B:5F:A9:AA:24:BB:F7:0E:62:A4:31:8E:43:48:C6:9F:70:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/34352e3232382e3135322e302f32322d3234203d3e20323636363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:2f:68:68:5c:8b:2a:50:2a:48:63:2e:26:24:a3:32:55:ab:
         29:75:80:3f:2b:2f:fd:27:4d:4d:93:2e:98:a5:10:f7:34:3c:
         6b:da:30:51:04:58:ed:c8:29:b6:82:db:b9:51:cf:2b:a8:e2:
         2f:d8:ec:1a:c7:7a:2d:4c:89:c7:38:bf:a2:3a:7b:20:e4:eb:
         22:b6:bf:6b:06:3e:27:88:e4:c6:af:c4:33:4f:fa:37:92:d5:
         83:0b:73:b5:78:ee:f0:5f:15:05:d7:2b:3c:b4:62:e5:78:34:
         ef:1d:74:c8:c6:25:df:52:28:52:e7:d5:1c:f5:bf:9b:a3:cc:
         a9:b5:f8:e3:65:5e:db:fd:5e:3e:64:7f:6c:90:21:5c:da:03:
         eb:e0:af:f2:72:e2:7a:fb:fe:0d:93:06:f0:5b:95:ef:c4:a6:
         7a:37:9c:87:82:2a:b7:32:63:0c:cf:83:87:43:50:93:bf:00:
         e5:e3:ef:e0:ab:d1:3d:71:68:2d:d6:12:07:93:b3:9c:3f:48:
         c2:2a:45:c5:0f:75:32:69:5d:e4:14:a7:13:c8:cb:66:52:7a:
         44:d7:f1:5c:64:37:8b:51:97:25:18:7a:46:5d:a4:fd:ca:6a:
         e6:c1:bc:40:b1:e0:a3:aa:61:69:de:35:f6:70:9e:89:0f:98:
         93:8f:b0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:51 2025 by rpki-client