Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/34352e342e3136342e302f32322d3234203d3e20323636373439.roa
File:                     34352e342e3136342e302f32322d3234203d3e20323636373439.roa (raw, json)
Hash identifier:          nIStHOsm7CjdS1w/hUItLu4vdTSzg/feUUJqyxMSzV0=
Subject key identifier:   6A:9E:56:D2:07:8D:C6:41:3C:06:F8:98:B4:40:CE:A6:64:33:15:65
Certificate issuer:       /CN=F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50
Certificate serial:       4F81A56383221C29FE143720BA8D9602ECF1F6D4
Authority key identifier: F6:EA:46:D0:0B:DF:AF:1D:0E:67:F0:FB:53:FA:A2:DD:CB:FC:DF:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/34352e342e3136342e302f32322d3234203d3e20323636373439.roa
Signing time:             Tue 04 Feb 2025 18:41:59 +0000
ROA not before:           Tue 04 Feb 2025 18:36:59 +0000
ROA not after:            Tue 03 Feb 2026 18:41:59 +0000
asID:                     266749
IP address blocks:        45.4.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:81:a5:63:83:22:1c:29:fe:14:37:20:ba:8d:96:02:ec:f1:f6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50
        Validity
            Not Before: Feb  4 18:36:59 2025 GMT
            Not After : Feb  3 18:41:59 2026 GMT
        Subject: CN=6A9E56D2078DC6413C06F898B440CEA664331565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2c:53:d7:2f:66:11:4e:61:5c:a2:df:a1:ec:
                    75:f9:6f:29:9a:12:4a:43:7e:6d:9a:cf:4d:e2:cd:
                    b0:13:c4:91:16:68:68:b1:2e:0d:92:51:fd:34:ac:
                    c6:68:f9:f1:84:ca:d6:46:75:b1:35:15:94:37:fd:
                    76:a8:dc:5f:70:a4:44:61:a8:96:0e:20:34:40:b9:
                    14:34:9e:71:2a:6a:06:14:d4:22:dd:78:3c:7b:8a:
                    d6:43:75:89:97:3c:d4:cd:bd:ab:ae:fd:4c:d6:62:
                    b0:c0:d2:de:81:36:9d:72:af:de:47:c0:4e:38:db:
                    3a:4c:df:6d:72:f1:db:ce:72:6d:08:0f:32:d1:02:
                    b6:16:47:f7:62:e6:15:43:03:c6:c5:b8:5e:75:8a:
                    4d:81:86:e3:39:21:47:dc:e5:93:83:41:e3:a6:6e:
                    4c:a7:fc:a8:8c:83:01:c7:c9:df:75:8c:e4:21:f3:
                    e3:a0:6e:02:f2:33:18:22:e7:e6:b0:e3:13:96:3c:
                    27:da:32:3e:d6:2b:f5:27:36:94:a5:13:75:91:f0:
                    c4:1b:83:f1:5b:a3:d9:33:82:01:60:64:90:5f:f1:
                    f4:ae:9d:04:d8:76:f1:cd:65:f4:6e:6c:09:50:2b:
                    bf:47:27:ba:61:2e:ea:91:7f:48:24:c5:60:e3:48:
                    45:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9E:56:D2:07:8D:C6:41:3C:06:F8:98:B4:40:CE:A6:64:33:15:65
            X509v3 Authority Key Identifier:
                keyid:F6:EA:46:D0:0B:DF:AF:1D:0E:67:F0:FB:53:FA:A2:DD:CB:FC:DF:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/34352e342e3136342e302f32322d3234203d3e20323636373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:09:a0:f2:11:73:ad:37:ce:0f:06:35:65:ac:2e:de:2b:b1:
         76:f0:64:83:8b:90:02:16:40:b1:23:85:43:cd:c1:93:f7:10:
         b9:e7:19:81:75:c1:9d:32:e5:ea:83:8a:db:55:1a:a3:46:59:
         84:56:32:ee:3d:e2:f7:ed:b7:98:c1:54:32:28:3b:74:3d:5e:
         cd:2b:44:1a:01:bf:b3:ce:ce:c0:83:75:08:b2:4d:9e:d1:8b:
         f1:ad:ff:6f:45:59:47:06:3d:0d:c6:33:8a:30:22:78:fa:aa:
         28:6c:b6:9c:e5:21:66:95:e6:02:5a:d4:12:7a:16:17:c9:47:
         b1:52:2d:84:62:60:a2:dd:11:c0:95:b8:08:c5:a4:06:60:69:
         fb:12:2b:de:34:b3:13:17:1a:a7:84:94:2a:e7:b2:a0:03:22:
         81:2f:30:e2:a5:0b:f3:93:01:63:dc:27:65:5f:fe:d3:0e:16:
         35:4b:f9:88:dc:e6:9b:ed:d0:fc:13:87:f5:5a:eb:87:47:b2:
         e4:e1:db:c0:98:6e:fd:95:b6:02:cd:86:b4:c6:bd:e9:b0:f2:
         9f:ef:dd:2c:93:7d:8c:00:3f:3e:5a:50:68:97:48:98:93:bc:
         30:76:d8:63:4f:4c:ac:61:f2:af:46:c4:8d:08:d0:48:df:bf:
         56:b7:53:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:03 2025 by rpki-client