Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E2D080F34ADE6572DB718BA77FAD60199000622DABBA805DD91B07AF79D53B66/0/34352e3137342e3130342e302f32322d3234203d3e203230343733.roa
File:                     34352e3137342e3130342e302f32322d3234203d3e203230343733.roa (raw, json)
Hash identifier:          D2WpvqYdPXVIalJxtXOoiPqWbH3hwYK5KOHsfs1C55E=
Subject key identifier:   B0:48:A1:76:90:21:9B:A7:70:81:FB:77:EC:03:C0:89:19:B6:75:FD
Certificate issuer:       /CN=F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6
Certificate serial:       0216677FAAC5F80F20E49F48397012F13C0DDFFC
Authority key identifier: F2:A9:A9:DA:87:D3:2B:11:C2:7F:39:0E:0A:9B:E1:BA:A0:B9:9C:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E2D080F34ADE6572DB718BA77FAD60199000622DABBA805DD91B07AF79D53B66/0/34352e3137342e3130342e302f32322d3234203d3e203230343733.roa
Signing time:             Tue 04 Feb 2025 18:43:59 +0000
ROA not before:           Tue 04 Feb 2025 18:38:59 +0000
ROA not after:            Tue 03 Feb 2026 18:43:59 +0000
asID:                     20473
IP address blocks:        45.174.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E2D080F34ADE6572DB718BA77FAD60199000622DABBA805DD91B07AF79D53B66/0/F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E2D080F34ADE6572DB718BA77FAD60199000622DABBA805DD91B07AF79D53B66/0/F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 07:28:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:16:67:7f:aa:c5:f8:0f:20:e4:9f:48:39:70:12:f1:3c:0d:df:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6
        Validity
            Not Before: Feb  4 18:38:59 2025 GMT
            Not After : Feb  3 18:43:59 2026 GMT
        Subject: CN=B048A17690219BA77081FB77EC03C08919B675FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f0:63:13:72:8e:47:c0:68:7d:8f:91:6b:18:
                    82:81:4b:0a:06:3b:9f:e7:e3:b3:25:50:61:96:fb:
                    89:ae:48:b4:ac:0e:7f:77:d2:37:c6:a4:c5:d1:93:
                    38:b8:4d:d8:2d:d5:68:f6:2f:93:32:0e:0b:a8:24:
                    c7:12:2b:e3:68:ab:b5:b4:f3:bc:a0:d2:f7:54:91:
                    41:33:3e:54:eb:fb:1b:59:19:bd:89:b2:58:c0:1b:
                    da:d2:78:f3:52:a4:dd:51:0e:62:0a:71:bc:be:07:
                    80:f4:d6:bc:c7:65:ce:6a:6b:4b:21:a8:92:f7:4c:
                    69:17:47:37:f3:7c:f7:96:2e:6e:8f:7a:7e:23:eb:
                    c3:37:0a:1c:09:34:79:c3:3d:5a:8e:83:4c:ae:55:
                    d3:f1:f7:4a:15:01:52:40:f1:af:13:4d:86:ab:b1:
                    41:1e:1d:d8:1c:f8:ac:a1:35:b0:61:31:90:c1:72:
                    72:d7:03:83:6c:26:3b:a0:9f:e2:f8:e4:5b:b9:a1:
                    d2:25:b7:a5:ed:89:f2:5a:df:bd:55:3e:cd:64:da:
                    67:15:20:ec:78:3a:c3:72:58:9d:92:c4:f6:b8:f5:
                    51:da:7a:36:0b:97:4a:b0:54:42:d6:51:09:44:a3:
                    68:b6:c2:dc:5d:13:3f:0e:23:c1:a1:77:c6:62:ce:
                    9d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:48:A1:76:90:21:9B:A7:70:81:FB:77:EC:03:C0:89:19:B6:75:FD
            X509v3 Authority Key Identifier:
                keyid:F2:A9:A9:DA:87:D3:2B:11:C2:7F:39:0E:0A:9B:E1:BA:A0:B9:9C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E2D080F34ADE6572DB718BA77FAD60199000622DABBA805DD91B07AF79D53B66/0/F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E2D080F34ADE6572DB718BA77FAD60199000622DABBA805DD91B07AF79D53B66/0/34352e3137342e3130342e302f32322d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:97:e1:8b:50:c3:41:ef:a0:61:0c:ea:8f:9c:eb:81:82:3d:
         d2:8e:60:f8:cb:3c:f3:e3:d5:54:f0:1f:ca:61:86:dd:65:e5:
         0b:4f:be:dc:d8:e7:b7:28:96:ba:01:6c:e3:ed:00:17:45:4c:
         bc:e3:9f:d4:2f:13:c8:d3:5c:1f:d3:68:01:6f:85:2f:70:d7:
         f7:24:74:da:22:0b:5b:32:84:58:3a:d4:ab:bc:9e:86:35:09:
         98:20:d5:31:4c:49:ff:f5:85:cc:4b:ce:e7:91:33:f9:9a:ab:
         d0:4a:d9:1d:55:4a:3f:70:9c:35:b6:f3:e8:5f:1a:9d:f3:87:
         75:6a:95:6d:81:db:fb:dd:1c:6d:8d:19:bb:d6:f3:0f:38:57:
         dc:35:80:97:74:6b:48:52:36:b7:18:ac:34:48:db:bd:5c:5c:
         ed:00:22:35:cb:15:f5:0c:39:e4:5b:b4:e0:95:84:84:04:bf:
         59:36:9b:b6:ad:92:e5:a6:23:d1:82:c5:fd:38:ed:c9:ab:1c:
         a0:bb:e8:0c:e3:34:7e:72:fb:4e:24:7b:1c:e9:1d:5d:67:31:
         45:22:a0:b6:06:94:61:19:66:2a:c9:ce:b1:c0:0d:fc:b6:4d:
         b5:7c:7f:a6:97:93:35:34:5a:c1:b4:74:62:e4:35:28:a3:59:
         3a:9a:2c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:17 2025 by rpki-client