Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135322e302f32322d3232203d3e20323636383434.roa
File:                     34352e3233382e3135322e302f32322d3232203d3e20323636383434.roa (raw, json)
Hash identifier:          OL3ODep5Y7fiUOEEp1/S6T1apx/uzK8cfaHC4pBSM8g=
Subject key identifier:   11:B8:A7:B0:B2:0E:98:78:BC:B8:3E:E6:F7:68:52:B3:52:49:3D:36
Certificate issuer:       /CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
Certificate serial:       524E8BDC577E221249F70B33B0B5203308FF85BD
Authority key identifier: A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135322e302f32322d3232203d3e20323636383434.roa
Signing time:             Tue 04 Feb 2025 18:51:53 +0000
ROA not before:           Tue 04 Feb 2025 18:46:53 +0000
ROA not after:            Tue 03 Feb 2026 18:51:53 +0000
asID:                     266844
IP address blocks:        45.238.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4e:8b:dc:57:7e:22:12:49:f7:0b:33:b0:b5:20:33:08:ff:85:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A070374834B30E4E1EAC2F337D7138EE06F6AB7A
        Validity
            Not Before: Feb  4 18:46:53 2025 GMT
            Not After : Feb  3 18:51:53 2026 GMT
        Subject: CN=11B8A7B0B20E9878BCB83EE6F76852B352493D36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:94:2f:69:c3:0c:f8:10:9c:fa:69:fe:60:42:
                    34:5f:52:9d:81:84:2f:1e:6a:b3:02:71:b3:b3:90:
                    3e:0e:c4:73:48:0f:b5:29:79:68:8f:99:df:55:36:
                    b6:70:ea:10:a7:83:74:66:b9:c4:e6:86:f9:f0:b9:
                    ac:cf:f0:12:82:43:13:69:82:f9:46:7d:c7:e1:05:
                    0e:22:7c:09:45:db:b1:b5:95:8f:13:7a:ab:de:ab:
                    a4:55:fb:82:53:2a:dc:13:2a:f1:6f:31:89:af:b0:
                    d4:2c:26:5f:c2:fa:6f:97:0e:83:84:7f:9a:44:3f:
                    69:7b:8a:72:dd:b1:21:7d:01:4c:2d:c0:42:fd:dd:
                    bf:e3:bf:cb:ec:7c:42:fd:af:26:2e:a3:3d:68:3d:
                    a7:38:e6:48:80:60:bc:da:f4:ae:5a:a9:2b:1e:ec:
                    e8:fa:94:62:70:7d:0f:c7:d0:18:4a:b9:c0:db:94:
                    75:fd:f3:3b:20:8f:13:51:e4:92:19:45:4b:fd:53:
                    55:d9:e2:ec:71:61:0d:a9:4f:18:25:e6:f0:45:c1:
                    37:a3:a0:ed:b5:67:28:7c:d1:0e:dc:23:08:be:a3:
                    31:33:cf:97:a8:78:7f:fa:db:5f:5e:a5:5b:fb:36:
                    78:7d:68:00:c2:fd:3f:38:25:9e:dd:72:ae:07:73:
                    85:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B8:A7:B0:B2:0E:98:78:BC:B8:3E:E6:F7:68:52:B3:52:49:3D:36
            X509v3 Authority Key Identifier:
                keyid:A0:70:37:48:34:B3:0E:4E:1E:AC:2F:33:7D:71:38:EE:06:F6:AB:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A070374834B30E4E1EAC2F337D7138EE06F6AB7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D395E3DEE53AE48F967BF9936904795047474139F7E7D4149BFE2597CAE3D718/0/34352e3233382e3135322e302f32322d3232203d3e20323636383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:d7:58:a7:ac:2f:60:f8:8e:be:d9:50:de:6d:a4:64:86:04:
         9a:d9:b1:58:09:35:32:f8:b5:17:7f:37:f5:85:47:f6:ba:d4:
         9d:13:55:b0:b8:2b:b1:1b:0e:26:40:64:87:0c:a8:92:49:1e:
         e3:24:fb:9d:1d:e3:09:06:4a:f7:13:ca:57:09:08:3e:ee:d1:
         bb:aa:7e:43:a3:e8:08:ce:ab:45:5b:72:f5:fb:a4:e6:d2:e5:
         0d:38:85:0a:c5:a2:91:23:12:b4:3b:df:24:8f:18:1c:6d:19:
         f8:fa:9a:5c:6a:6f:67:48:ee:99:0f:60:6e:6f:46:9b:69:d4:
         91:2b:5f:b5:a6:b4:0a:9c:ff:16:34:4b:3d:a0:7b:e2:67:8c:
         3b:b5:2f:b8:4a:3b:f0:b8:2f:0d:3c:8d:8c:84:22:ee:38:dd:
         a7:55:ba:5c:ec:37:ab:ce:5d:5a:76:91:5d:05:51:25:da:e8:
         a6:57:73:48:9a:a0:b2:bd:60:b2:28:2e:3c:69:ff:ef:55:09:
         99:39:fc:e2:6b:bd:14:8c:2a:3a:f4:37:e0:97:c8:42:78:e3:
         8b:36:5c:0a:05:d9:fd:b7:7a:18:a3:7a:7a:f2:66:10:0b:14:
         36:42:e0:ec:06:29:f4:05:97:a6:df:33:1d:05:b4:39:e8:a1:
         17:2a:ab:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:43 2025 by rpki-client