Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/34352e3136362e37362e302f32332d3233203d3e20323637373331.roa
File:                     34352e3136362e37362e302f32332d3233203d3e20323637373331.roa (raw, json)
Hash identifier:          xAgdO9iNkU1TxK/FYBB8h+ZUuo0CSSRJJxy2W7qCskg=
Subject key identifier:   9B:1C:AC:14:A6:09:66:B5:BB:6F:BB:79:59:AE:42:04:33:F2:6F:46
Certificate issuer:       /CN=1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB
Certificate serial:       125DA345BEBF46B4B4A9C4407A4377A5CCDFF896
Authority key identifier: 1F:5F:5C:11:C4:97:16:D8:46:EA:AF:C3:D8:25:E3:CE:A2:CF:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/34352e3136362e37362e302f32332d3233203d3e20323637373331.roa
Signing time:             Tue 04 Feb 2025 18:19:03 +0000
ROA not before:           Tue 04 Feb 2025 18:14:03 +0000
ROA not after:            Tue 03 Feb 2026 18:19:03 +0000
asID:                     267731
IP address blocks:        45.166.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5d:a3:45:be:bf:46:b4:b4:a9:c4:40:7a:43:77:a5:cc:df:f8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB
        Validity
            Not Before: Feb  4 18:14:03 2025 GMT
            Not After : Feb  3 18:19:03 2026 GMT
        Subject: CN=9B1CAC14A60966B5BB6FBB7959AE420433F26F46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:87:2f:e6:0c:95:84:d0:21:23:93:b4:46:43:
                    95:ab:70:a1:e3:c6:2f:78:dd:ae:85:fb:5c:b6:de:
                    c2:a6:0a:82:7b:43:f1:f6:4f:c4:fb:52:6e:ab:03:
                    44:69:a3:04:f3:c7:7a:10:87:54:ec:e6:c7:18:57:
                    ae:f0:a6:fb:de:8d:ee:26:63:2d:1a:01:c6:80:79:
                    98:cc:16:0c:17:2d:d8:b3:d6:51:73:dc:ef:2d:ad:
                    79:47:0b:36:66:45:ba:cb:51:b9:73:f8:e4:88:c8:
                    a2:21:7d:a3:c9:f0:43:d2:6e:2b:27:de:15:23:61:
                    d0:ed:dc:0a:17:ac:b5:c1:44:7c:93:85:2f:97:a4:
                    bf:f2:42:53:3c:95:b4:e6:f2:06:db:aa:3b:3d:c5:
                    c0:90:e3:46:46:46:ab:64:64:e3:fc:8a:48:01:98:
                    73:1c:65:f9:49:c2:b9:55:42:5a:bd:d7:bd:06:05:
                    e9:64:5c:7b:54:40:d6:ac:61:55:44:d1:89:25:6f:
                    99:75:60:ba:7f:be:d0:04:8b:19:00:ad:69:64:a7:
                    fb:58:63:cd:79:aa:7c:17:53:84:4d:05:8b:f0:de:
                    e7:5a:cc:c7:9f:c2:fb:63:26:02:c5:2c:8a:f5:b4:
                    65:9e:23:ff:03:66:67:c4:e0:11:1d:1b:48:72:08:
                    de:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1C:AC:14:A6:09:66:B5:BB:6F:BB:79:59:AE:42:04:33:F2:6F:46
            X509v3 Authority Key Identifier:
                keyid:1F:5F:5C:11:C4:97:16:D8:46:EA:AF:C3:D8:25:E3:CE:A2:CF:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/34352e3136362e37362e302f32332d3233203d3e20323637373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:80:a9:f0:63:4c:f4:48:84:5c:29:e0:85:e6:cb:56:24:29:
         de:ec:99:db:e8:39:b1:ce:6c:3e:64:82:f4:7c:78:2c:55:b9:
         96:3e:81:38:a9:86:0f:4b:62:76:fa:1e:97:22:41:4c:38:92:
         0c:8f:7f:cd:31:27:9e:6c:26:7f:01:67:47:10:f4:03:13:79:
         51:9d:8c:c3:db:61:27:fd:03:70:1f:15:dc:e7:8a:4a:71:18:
         f9:16:2b:a3:bc:d0:a7:f3:63:c8:fd:57:95:b6:aa:2a:61:b3:
         48:17:a6:9f:37:15:1b:85:85:ca:1c:66:c8:35:ca:a8:be:ff:
         b5:57:29:52:5b:c1:da:bb:7f:03:7f:ed:12:df:4d:ff:96:ec:
         0a:a7:39:00:40:29:32:29:2a:c4:c2:c1:b3:70:91:f1:00:83:
         3b:c7:01:b5:0c:94:aa:7c:60:01:c7:24:cf:b5:6e:d9:41:d7:
         a1:be:9e:ee:c8:96:0f:ca:a2:8d:bb:28:3b:b3:31:d4:8b:e6:
         30:98:bd:8e:f2:a1:61:ac:99:79:c6:a9:21:3c:11:7a:11:f4:
         53:d1:b6:a0:14:ad:53:4c:1a:dc:e6:1a:40:7b:c6:f3:bc:54:
         be:f4:49:b1:8d:d1:4e:b9:6c:cf:69:16:32:1d:53:c2:2d:61:
         9a:4f:23:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:54:21 2025 by rpki-client