Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/34352e3136312e3138302e302f32322d3234203d3e20323636383932.roa
File:                     34352e3136312e3138302e302f32322d3234203d3e20323636383932.roa (raw, json)
Hash identifier:          qiQHmUgaKHVJB+drgDZ06FMIaIuUzNB6r1EnWVGGOvU=
Subject key identifier:   98:C7:EA:0F:50:9D:A2:57:2E:F3:5C:88:4F:36:0A:5D:12:B2:C2:93
Certificate issuer:       /CN=C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C
Certificate serial:       36412B4B6C052FFF11F640BD58EDF39C4F7F3069
Authority key identifier: C9:44:0A:39:F8:5D:8D:C2:A9:9D:0C:5F:54:E2:AE:3A:21:34:7E:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/34352e3136312e3138302e302f32322d3234203d3e20323636383932.roa
Signing time:             Tue 04 Feb 2025 18:07:49 +0000
ROA not before:           Tue 04 Feb 2025 18:02:49 +0000
ROA not after:            Tue 03 Feb 2026 18:07:49 +0000
asID:                     266892
IP address blocks:        45.161.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:41:2b:4b:6c:05:2f:ff:11:f6:40:bd:58:ed:f3:9c:4f:7f:30:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C
        Validity
            Not Before: Feb  4 18:02:49 2025 GMT
            Not After : Feb  3 18:07:49 2026 GMT
        Subject: CN=98C7EA0F509DA2572EF35C884F360A5D12B2C293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:6a:e6:d8:90:0f:a3:e5:23:c5:f2:ac:01:
                    b8:df:de:9e:9e:da:7d:47:81:c9:16:24:4c:c5:10:
                    00:a3:39:f0:e8:da:bf:22:1b:d4:35:7c:a9:64:62:
                    b4:ed:c9:c6:b8:29:c6:fe:88:62:f4:55:86:27:9b:
                    20:ae:28:a4:19:30:e1:f1:6c:7a:47:b8:e9:64:83:
                    5a:a7:67:cc:1d:80:79:67:84:6d:eb:6d:f2:91:db:
                    4b:10:aa:2b:14:2f:c6:2e:63:31:ec:1a:23:36:66:
                    f8:3d:1f:fd:b6:7c:cd:62:53:63:dc:82:53:7f:4b:
                    70:ee:7c:ef:f8:21:80:1e:0c:a1:18:ef:a3:99:05:
                    aa:b7:a2:b4:d7:ab:10:00:61:38:52:8d:b3:26:ff:
                    90:fd:17:36:12:00:67:ac:90:bd:49:26:43:34:0d:
                    04:4f:73:fb:d1:c7:32:53:26:15:5f:1b:83:3d:43:
                    ac:c9:50:8c:b8:91:78:ee:7c:4e:9f:e0:96:4e:38:
                    bf:e1:a3:61:bf:2c:02:03:31:02:c9:b5:d5:33:84:
                    3d:5e:ac:90:16:44:a4:f0:7c:76:e0:ff:a1:f4:8d:
                    01:41:af:cf:39:41:72:4c:80:80:95:b8:6d:1c:f1:
                    af:89:2d:34:3d:aa:7d:12:ff:fb:63:79:cd:94:f8:
                    73:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C7:EA:0F:50:9D:A2:57:2E:F3:5C:88:4F:36:0A:5D:12:B2:C2:93
            X509v3 Authority Key Identifier:
                keyid:C9:44:0A:39:F8:5D:8D:C2:A9:9D:0C:5F:54:E2:AE:3A:21:34:7E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9440A39F85D8DC2A99D0C5F54E2AE3A21347E1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E78A3CCF571C59EEB66C6F44286771BE1EA6CF99F5B3E448CEA6205EB6BE03E4/0/34352e3136312e3138302e302f32322d3234203d3e20323636383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:66:fd:ea:30:43:1a:63:d6:d4:55:d0:d5:1d:f9:7a:b2:0f:
         16:fc:e4:45:67:e0:90:8a:bf:e9:17:ed:82:58:ac:53:bb:8a:
         6a:40:6a:b2:b5:78:3f:9f:4a:ae:f1:21:52:d6:aa:ab:9e:61:
         72:75:1f:54:25:b9:de:82:16:83:d1:37:8e:60:69:1b:20:0f:
         5b:ac:eb:4e:03:9e:94:7b:b9:7a:ea:7d:05:46:cc:50:1c:1e:
         9f:06:9d:cd:05:95:b4:ba:33:cb:6c:cb:d6:33:5b:16:66:cc:
         bc:85:e8:8a:06:fa:6d:2c:30:c1:96:5c:69:18:78:22:72:39:
         35:11:21:32:f4:c5:e0:5e:81:99:93:d6:e7:6d:df:d1:19:4b:
         1d:33:25:7a:e3:8c:ac:a8:35:eb:da:a2:55:6d:63:46:77:9f:
         15:d4:8a:94:35:7e:6d:fa:54:16:ad:65:15:30:a3:7f:68:47:
         a7:51:28:e2:19:a4:57:57:91:49:22:2a:59:e8:0c:93:8d:9c:
         13:33:c7:92:04:65:3f:6c:54:cb:0f:13:9b:16:87:2f:75:10:
         fe:e5:84:be:44:b1:45:fc:e8:c4:06:84:a6:c1:94:8d:39:81:
         cd:0c:ab:c2:8d:04:07:71:8c:7c:60:1a:b5:46:39:06:bd:11:
         c6:12:db:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:53:56 2025 by rpki-client