Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/34352e3232342e3235322e302f32322d3232203d3e203533383536.roa
File:                     34352e3232342e3235322e302f32322d3232203d3e203533383536.roa (raw, json)
Hash identifier:          tbAKgQ4pmEt6b8B9iyM6YeJbxyh/Wm+Dnvw0E1+jZ8s=
Subject key identifier:   30:26:1A:1B:98:46:73:89:CB:3E:34:62:7A:58:33:9C:42:6B:5A:24
Certificate issuer:       /CN=6B513DA47D330ABD029046B0C0FB7A850D26C312
Certificate serial:       2D0A613CE380F4CCEB21D1E10F65211B1F982257
Authority key identifier: 6B:51:3D:A4:7D:33:0A:BD:02:90:46:B0:C0:FB:7A:85:0D:26:C3:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/34352e3232342e3235322e302f32322d3232203d3e203533383536.roa
Signing time:             Tue 04 Feb 2025 18:02:23 +0000
ROA not before:           Tue 04 Feb 2025 17:57:23 +0000
ROA not after:            Tue 03 Feb 2026 18:02:23 +0000
asID:                     53856
IP address blocks:        45.224.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0a:61:3c:e3:80:f4:cc:eb:21:d1:e1:0f:65:21:1b:1f:98:22:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B513DA47D330ABD029046B0C0FB7A850D26C312
        Validity
            Not Before: Feb  4 17:57:23 2025 GMT
            Not After : Feb  3 18:02:23 2026 GMT
        Subject: CN=30261A1B98467389CB3E34627A58339C426B5A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:8f:02:b3:cb:99:77:6c:5b:5c:f9:d5:a1:
                    63:93:75:81:af:c5:43:e0:e1:4c:fa:2c:23:87:85:
                    73:e3:3c:ef:6e:78:00:c9:ea:47:de:b5:5d:b3:36:
                    c9:94:38:0e:c0:01:a6:d5:e6:ea:f1:c3:ba:81:a7:
                    68:bc:b1:4f:8a:f8:2f:b2:07:3d:15:e5:bc:20:ea:
                    b4:55:02:9c:b8:3b:c8:a6:fe:0d:4e:6b:05:7a:e3:
                    1d:31:98:7d:d4:c3:1f:cc:3c:1b:23:d1:50:42:05:
                    0a:3b:e3:d0:b9:83:6d:2d:b5:37:3f:ed:1e:aa:6a:
                    76:b5:4f:7e:13:16:83:20:a7:c7:8a:2e:de:e4:c7:
                    18:8c:35:42:14:25:c9:d6:67:6c:ae:68:3e:78:53:
                    83:ed:d7:41:f5:05:98:70:c2:0b:60:b0:cb:5a:9c:
                    ff:3f:49:c8:36:35:90:e3:3d:35:0c:0b:e7:a2:32:
                    0c:ad:85:2b:c7:ec:58:8a:a2:20:d7:a9:d4:b2:04:
                    ba:1e:9e:1c:10:bf:e6:fb:42:e4:ce:9c:c8:85:bc:
                    00:2f:27:65:86:2b:cf:be:37:dd:06:ae:95:17:b5:
                    03:5c:9d:17:05:4e:09:27:58:6e:55:b2:0a:4d:58:
                    28:62:74:d1:40:38:c7:87:71:0d:1a:24:2d:7e:89:
                    10:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:26:1A:1B:98:46:73:89:CB:3E:34:62:7A:58:33:9C:42:6B:5A:24
            X509v3 Authority Key Identifier:
                keyid:6B:51:3D:A4:7D:33:0A:BD:02:90:46:B0:C0:FB:7A:85:0D:26:C3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/34352e3232342e3235322e302f32322d3232203d3e203533383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:c2:e0:b6:2a:17:4c:46:08:6e:d3:09:82:6c:f8:b5:d2:0f:
         f2:db:5a:c5:0d:35:81:21:df:57:a0:0e:20:e7:37:d2:36:59:
         75:76:e4:76:65:d9:d5:24:40:98:60:b3:78:bf:e0:0d:da:d9:
         16:3b:78:0d:26:37:b5:66:45:fb:51:6b:e7:94:de:39:2e:6e:
         33:76:ac:8e:4c:30:99:c5:d1:20:59:68:63:7b:20:e9:1c:2e:
         32:1b:f1:2c:ae:8c:70:50:37:9a:7c:0f:e8:38:e4:af:66:ca:
         36:7d:5a:7c:54:b1:46:5f:07:ec:3a:3c:d8:45:ee:d6:4e:6d:
         df:d0:8e:c4:d8:a6:07:07:f1:71:4d:7a:46:7c:d6:c9:b1:3a:
         07:81:dc:5f:0d:c0:86:2c:ba:f7:63:27:43:d3:62:cd:c3:22:
         7f:5b:92:d3:9a:d7:e6:25:5c:ef:36:95:45:c6:fd:17:15:bf:
         3b:37:5d:0d:73:00:5a:1b:54:45:2d:a5:25:39:02:b5:a4:8e:
         f7:e6:6a:91:33:f1:32:35:b3:09:dd:e9:2a:47:37:33:6b:4b:
         35:0a:fb:b4:22:f7:d4:2f:ba:8e:b5:5e:fe:1c:91:6d:19:39:
         c6:4e:26:47:61:ad:d1:ad:5d:2d:e3:6c:70:f9:e7:d8:ce:df:
         5c:93:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:49:22 2025 by rpki-client