Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS22010.roa
File:                     AS22010.roa (raw, json)
Hash identifier:          knKONMSrpHdabvSjmAdivVeOEvkU1RHIO8EdytdXuko=
Subject key identifier:   3B:8C:33:07:F2:3D:76:83:DB:E3:AF:D9:F9:BA:DE:B0:19:2E:FF:05
Certificate issuer:       /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial:       705F11E202DA9006A13F419CFF62262BD174ABF0
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS22010.roa
Signing time:             Tue 04 Feb 2025 18:02:40 +0000
ROA not before:           Tue 04 Feb 2025 17:57:40 +0000
ROA not after:            Tue 03 Feb 2026 18:02:40 +0000
asID:                     22010
IP address blocks:        200.46.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5f:11:e2:02:da:90:06:a1:3f:41:9c:ff:62:26:2b:d1:74:ab:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
        Validity
            Not Before: Feb  4 17:57:40 2025 GMT
            Not After : Feb  3 18:02:40 2026 GMT
        Subject: CN=3B8C3307F23D7683DBE3AFD9F9BADEB0192EFF05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:31:fc:5e:f2:e1:57:90:9e:de:5f:eb:4f:
                    7a:78:8c:a4:2e:c0:98:33:5f:af:cb:94:fa:a6:d7:
                    a0:9c:4c:2d:45:a8:19:5a:ff:ee:1c:b9:13:5d:88:
                    1b:88:a0:a3:45:da:ae:6f:50:18:98:65:2d:aa:6f:
                    8a:a6:6e:c7:75:d0:58:14:cd:f8:42:c0:e2:bd:d3:
                    e1:7d:d3:6d:46:6f:31:60:df:cb:4a:23:94:23:3d:
                    c5:ed:1c:7d:6b:ea:90:cd:42:45:c2:0b:23:ac:de:
                    be:6f:15:81:54:16:c8:67:36:e6:bd:ad:4f:bc:27:
                    bd:71:f9:99:58:a1:f3:78:7b:c6:44:1f:e6:76:02:
                    d0:e4:d5:38:b6:d9:62:e0:98:51:06:a9:f4:fc:93:
                    d7:bf:88:c1:60:b8:63:a2:98:f6:6d:2a:ab:b3:fb:
                    38:9e:c2:d0:f7:cd:a3:74:f1:39:f0:26:da:f3:81:
                    20:a4:8f:df:3e:f4:a2:38:5b:b5:fd:17:35:63:63:
                    d5:7f:f0:d5:e2:ce:3b:2c:82:70:e5:11:39:3e:b4:
                    37:a2:a8:0a:79:ef:15:50:5f:b6:18:bb:c1:97:94:
                    9e:9c:d2:d1:c2:8e:98:54:fb:47:16:b2:25:e5:cf:
                    cb:e3:e6:eb:ca:80:28:ca:4b:00:42:e0:1f:35:1f:
                    62:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8C:33:07:F2:3D:76:83:DB:E3:AF:D9:F9:BA:DE:B0:19:2E:FF:05
            X509v3 Authority Key Identifier:
                keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS22010.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:e0:3f:ae:fe:12:1c:8f:52:b1:eb:1d:79:56:a8:55:cf:71:
         f3:a2:9c:c5:4a:16:88:f8:ba:44:95:36:72:6b:ee:6b:63:3f:
         64:41:93:25:f2:c0:cf:49:cd:06:59:11:04:f3:ea:31:0f:e9:
         45:67:42:b8:7b:2f:78:ab:84:24:3a:30:f2:47:17:f0:d5:81:
         3a:62:8e:7c:8b:a3:c3:1e:57:7c:4f:85:1e:c3:d3:43:d6:71:
         d2:c7:dd:1a:85:a4:16:10:d0:af:e1:1d:1f:c7:2b:f4:57:c4:
         18:81:8a:70:8b:76:b2:6a:df:6e:53:47:67:9c:cf:ad:6a:5f:
         85:5e:d0:ec:d0:d0:38:cb:79:b5:42:9e:39:f0:ce:81:04:18:
         1a:47:1d:ab:e5:6b:01:de:b4:b3:c7:fe:d5:f6:aa:d9:3c:f0:
         0b:ce:06:fd:a9:fb:ed:b0:7a:36:46:d5:6d:fb:33:6f:ad:01:
         96:d5:5b:02:6c:ad:aa:16:b0:15:3c:ff:ae:bd:80:e0:d1:04:
         c1:d7:e4:0a:df:37:4b:6f:07:06:63:98:ac:78:39:47:fd:41:
         cf:e9:0d:29:74:4d:2a:5a:c4:4a:71:45:01:ec:5c:28:b1:06:
         60:7f:57:4b:a2:a1:b0:8b:a1:2e:c8:67:da:55:0e:0e:01:9d:
         cb:e5:1b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:33 2025 by rpki-client