Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/34352e3232352e34342e302f32322d3234203d3e203532343638.roa
File:                     34352e3232352e34342e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          L8NLrAmXxMax0wiNv6tQ3agNkrGbX6LC+NBNVU7K+y0=
Subject key identifier:   13:66:C9:9A:9A:5F:38:24:F3:C9:FD:DF:BD:D9:7D:E1:53:D6:88:5D
Certificate issuer:       /CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
Certificate serial:       0CAED68A1373AD54F73AF1B95C9F8190C535CF06
Authority key identifier: B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/34352e3232352e34342e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:54:33 +0000
ROA not before:           Tue 04 Feb 2025 18:49:33 +0000
ROA not after:            Tue 03 Feb 2026 18:54:33 +0000
asID:                     52468
IP address blocks:        45.225.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ae:d6:8a:13:73:ad:54:f7:3a:f1:b9:5c:9f:81:90:c5:35:cf:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
        Validity
            Not Before: Feb  4 18:49:33 2025 GMT
            Not After : Feb  3 18:54:33 2026 GMT
        Subject: CN=1366C99A9A5F3824F3C9FDDFBDD97DE153D6885D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:09:3a:65:b3:b6:45:1f:2f:22:83:3c:f8:
                    39:6c:6c:fd:aa:25:09:c2:0c:ba:a9:d8:0b:63:52:
                    bb:2f:33:7b:77:2a:dc:d7:b9:1e:fe:55:7b:c0:4a:
                    cc:3e:03:c2:1d:51:78:ed:21:67:66:db:fc:f7:68:
                    21:df:67:ca:05:23:8f:8d:6c:2c:c9:af:5c:dd:94:
                    07:e5:41:80:77:bd:24:25:e0:13:f1:2f:b8:c7:23:
                    81:b5:98:d8:0e:1f:63:27:b9:45:ab:38:60:13:9b:
                    f9:c5:18:8b:84:ef:8b:84:e0:e0:a2:79:5c:d7:75:
                    fa:d4:30:9b:07:90:5d:1e:ba:c9:6d:4d:73:44:1a:
                    26:1a:d7:2a:cd:97:9f:20:96:7b:b8:06:86:ee:39:
                    99:5a:f1:43:b4:ca:eb:91:c3:ed:c5:b1:c7:6b:6d:
                    62:e0:77:e8:37:c8:da:88:0c:de:03:ed:02:3c:1a:
                    f4:14:94:ad:05:10:18:21:39:4d:85:dd:ab:dc:bd:
                    92:89:07:68:a4:d0:33:a1:df:16:1d:e7:7f:3c:b7:
                    44:20:be:ff:8b:a0:00:ed:2a:74:6d:09:7c:88:da:
                    c7:cd:e1:e8:17:7e:b3:78:6c:70:ab:cf:25:ea:5a:
                    c6:0e:17:16:ea:78:4d:57:32:25:6f:aa:93:4a:1d:
                    23:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:66:C9:9A:9A:5F:38:24:F3:C9:FD:DF:BD:D9:7D:E1:53:D6:88:5D
            X509v3 Authority Key Identifier:
                keyid:B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/34352e3232352e34342e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:50:f8:82:e4:c0:cb:81:af:38:44:36:c1:46:fa:ee:b9:be:
         43:57:71:bf:f8:ab:31:c8:8c:3c:8b:70:db:8f:9a:5f:a1:93:
         d2:37:0d:e4:91:39:94:6b:84:23:bd:f8:73:55:6a:e8:3c:22:
         6a:7a:43:e4:13:c6:37:74:af:7a:f0:d4:ff:a5:57:89:cd:01:
         35:2e:7e:39:c8:71:7a:0d:4d:37:0a:e8:75:1c:58:8e:6a:c0:
         69:e7:b4:3c:4f:62:29:d6:d8:a4:cb:6d:99:2c:cf:84:8e:99:
         56:ad:44:7a:e8:96:26:24:08:58:dd:d7:bd:6a:65:d4:80:ce:
         c4:8e:73:29:18:f3:cd:5c:16:db:e2:01:37:40:b2:b6:c1:a1:
         31:84:13:17:35:6b:f0:bf:4a:4d:38:3c:75:68:e1:42:1c:1d:
         c6:4a:69:b5:1b:15:d8:d2:cf:47:f1:5b:28:2c:2a:7d:81:de:
         c7:40:c5:f5:8c:af:8e:69:d0:d1:b9:65:d1:d5:55:59:86:a0:
         fa:02:ad:71:dc:b3:7a:a1:ab:8c:29:7b:9a:b9:e9:60:06:87:
         a1:be:aa:be:c7:f9:af:31:fa:14:31:6c:47:4f:c5:bf:71:ae:
         06:11:eb:1d:ac:e4:49:fb:bf:77:e6:30:06:3c:4d:85:17:d6:
         7b:4a:91:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:31:30 2025 by rpki-client