Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/34352e342e3231362e302f32322d3234203d3e203532333631.roa
File:                     34352e342e3231362e302f32322d3234203d3e203532333631.roa (raw, json)
Hash identifier:          suDhHyOCnAfaytgoksyE8aD/IPJ6NWyAot4KndhueVg=
Subject key identifier:   38:4C:A2:7E:75:B3:73:5D:B5:A2:D4:BE:FF:FC:85:7B:17:B9:26:5E
Certificate issuer:       /CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
Certificate serial:       73B077F4BDEF4BB83868409DB9F2C0D87E060B12
Authority key identifier: 60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/34352e342e3231362e302f32322d3234203d3e203532333631.roa
Signing time:             Tue 04 Feb 2025 18:19:29 +0000
ROA not before:           Tue 04 Feb 2025 18:14:29 +0000
ROA not after:            Tue 03 Feb 2026 18:19:29 +0000
asID:                     52361
IP address blocks:        45.4.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b0:77:f4:bd:ef:4b:b8:38:68:40:9d:b9:f2:c0:d8:7e:06:0b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
        Validity
            Not Before: Feb  4 18:14:29 2025 GMT
            Not After : Feb  3 18:19:29 2026 GMT
        Subject: CN=384CA27E75B3735DB5A2D4BEFFFC857B17B9265E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:34:6d:72:c3:51:fe:a1:28:97:fa:cc:67:19:
                    ef:e5:6a:cc:6d:e0:21:ea:c5:75:18:1c:fb:44:24:
                    03:0f:41:65:cf:cb:6d:c8:26:ac:28:a8:e9:0f:21:
                    d6:36:0d:2d:55:76:c9:df:62:c4:a4:83:ef:d1:b3:
                    a8:0c:d1:db:97:5d:13:2a:81:de:41:55:be:c0:81:
                    eb:61:b5:7e:38:b2:70:b7:1f:9c:13:d7:31:ba:fb:
                    f4:16:8e:1f:62:f2:da:5e:fc:f8:ac:95:07:d3:b1:
                    50:9c:f2:22:06:cc:93:18:4b:59:f8:07:d0:2d:52:
                    05:bf:f4:39:c6:98:77:82:e3:6d:c7:9c:01:03:0c:
                    9f:1f:e0:90:8d:d2:a9:de:89:b5:55:47:3f:2c:60:
                    b9:f7:a0:5d:3c:07:b2:ff:5b:c0:84:82:86:d4:2e:
                    ca:2c:58:b5:87:8e:19:88:55:f1:70:10:46:8a:86:
                    e0:fb:51:f5:c6:09:9c:ca:ab:9e:4e:47:64:dd:b2:
                    06:68:50:19:32:2d:ec:5a:a7:cf:c7:78:11:3f:97:
                    c3:36:ba:45:a0:2c:b4:65:ef:3a:09:11:24:05:7d:
                    e6:7d:26:1e:20:e8:cd:5c:f8:17:19:fa:2a:2e:c7:
                    9e:54:3e:ec:c0:ab:b4:8a:cd:d1:3c:90:b8:79:4d:
                    2b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4C:A2:7E:75:B3:73:5D:B5:A2:D4:BE:FF:FC:85:7B:17:B9:26:5E
            X509v3 Authority Key Identifier:
                keyid:60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/34352e342e3231362e302f32322d3234203d3e203532333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:28:39:cc:ff:c7:4e:5d:f1:3b:64:e4:32:79:ad:35:98:00:
         fc:d0:a4:65:94:3e:35:8e:9d:65:53:28:f4:70:66:14:24:36:
         cd:4a:6f:9e:da:97:03:37:c7:08:38:ea:8a:71:9b:d1:36:b5:
         5a:79:c5:76:76:76:31:75:15:1d:87:e0:0e:f1:30:10:dc:51:
         00:58:4c:d1:da:71:64:f9:2c:b7:86:cc:4e:0f:6f:75:b4:65:
         d4:91:43:24:a7:76:a3:9d:3a:1d:9e:45:16:1b:5f:40:9b:4e:
         39:af:86:db:6d:b5:27:08:72:58:d1:39:c4:be:fa:c5:2a:e9:
         15:3c:0c:8b:f2:40:59:a9:1d:67:88:68:7c:fc:5c:39:9f:b5:
         38:8d:5b:e2:69:d1:6d:1c:d4:fe:4b:11:91:73:6e:33:c2:1e:
         8b:e9:28:d2:8c:bf:1d:6f:49:5d:9a:a9:40:87:4a:6a:ce:2b:
         ff:2a:70:33:e9:d5:ae:f6:33:16:b6:33:94:9e:d4:8c:2d:0c:
         e4:ae:b7:74:82:cb:c2:49:bf:1e:54:08:ee:27:7f:f2:fe:c4:
         06:0a:fb:d6:e1:97:79:4f:7d:8f:4c:27:79:6f:64:68:cc:cc:
         79:1d:c5:4d:b7:25:a4:11:44:b0:e2:33:91:be:b2:5f:13:69:
         4d:1e:52:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:28:31 2025 by rpki-client