Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33362e302f32322d3232203d3e20323637363830.roa
File:                     34352e3136332e33362e302f32322d3232203d3e20323637363830.roa (raw, json)
Hash identifier:          mYLeR814mRwYvAEbb+Y+7Y1Q+oZ47ciYXKINWZfiSB8=
Subject key identifier:   9F:1D:90:CD:71:5E:42:73:71:6C:37:8A:75:33:24:84:52:02:6F:8D
Certificate issuer:       /CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
Certificate serial:       76F87DF1D2FC271E68854977DE618232A54A959F
Authority key identifier: A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33362e302f32322d3232203d3e20323637363830.roa
Signing time:             Tue 04 Feb 2025 18:29:31 +0000
ROA not before:           Tue 04 Feb 2025 18:24:31 +0000
ROA not after:            Tue 03 Feb 2026 18:29:31 +0000
asID:                     267680
IP address blocks:        45.163.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f8:7d:f1:d2:fc:27:1e:68:85:49:77:de:61:82:32:a5:4a:95:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
        Validity
            Not Before: Feb  4 18:24:31 2025 GMT
            Not After : Feb  3 18:29:31 2026 GMT
        Subject: CN=9F1D90CD715E4273716C378A7533248452026F8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:97:23:af:31:53:5f:59:7a:7a:17:be:25:2f:
                    46:72:46:39:2d:09:cc:ac:32:61:6a:1c:67:fc:82:
                    35:e9:2b:2f:fc:22:3a:37:44:69:9d:ca:8d:ab:6e:
                    ef:c7:17:46:ab:c1:67:b8:c5:5f:ce:81:8d:8b:ee:
                    c4:b4:34:5d:f3:b0:12:0c:a4:4f:59:d8:db:b4:5b:
                    2c:48:68:f1:54:70:5f:ed:94:11:26:c4:ac:59:e9:
                    f3:68:a7:bb:ea:07:4b:ad:42:30:34:a8:0b:15:43:
                    75:e8:d3:31:88:63:e6:75:e1:85:42:c2:1a:82:b6:
                    c4:ac:85:f8:75:6a:ee:98:25:75:f4:92:f3:d8:2b:
                    21:c8:99:d5:1f:05:8d:40:1c:48:7c:c8:a3:b1:76:
                    82:06:12:da:32:24:ec:b0:fa:56:d0:bc:45:f0:b4:
                    54:25:28:8f:7c:44:88:09:04:63:8e:5d:ee:58:b1:
                    c9:7a:7a:0b:a9:96:bb:cf:30:22:96:4b:6a:3d:a4:
                    b9:6e:d9:bb:3a:ac:fb:b5:90:b2:82:c3:d5:05:ba:
                    37:56:11:65:62:68:f5:d1:43:fb:18:9c:83:49:2f:
                    bd:c8:32:07:ff:49:97:2b:4e:93:d5:2a:44:c6:c1:
                    c6:f2:b7:09:69:f4:e8:f5:c8:3e:47:7c:96:66:80:
                    19:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1D:90:CD:71:5E:42:73:71:6C:37:8A:75:33:24:84:52:02:6F:8D
            X509v3 Authority Key Identifier:
                keyid:A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33362e302f32322d3232203d3e20323637363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:20:8c:53:18:d7:df:72:70:0e:13:08:95:bb:0d:9b:86:8e:
         d1:a3:21:e9:d4:14:79:4e:fe:f6:a2:43:27:6b:3b:de:6c:07:
         95:ab:b8:76:5c:0c:d5:64:cd:40:7d:9f:89:1e:85:6f:0a:96:
         73:0e:96:34:81:e4:16:1d:d3:2c:3a:fa:54:bb:19:3e:14:13:
         2f:51:6e:05:a5:98:04:85:1e:91:b4:cf:48:3e:68:f5:ff:7a:
         42:a3:c5:c0:52:dc:a6:9d:6b:97:60:db:ad:a0:0c:ca:28:ed:
         e2:8f:b8:eb:15:a5:c2:09:79:4f:85:de:91:b3:5c:d7:ee:f7:
         36:9b:d5:76:ff:0b:5f:9d:af:38:cc:68:68:e2:1c:f5:c4:67:
         93:ef:26:ae:b7:a7:13:87:f0:15:a2:78:26:81:7a:b1:69:e9:
         65:7e:7e:ac:ca:51:bf:3d:39:93:fc:ac:73:be:ed:7f:e9:1e:
         ff:fb:df:6a:49:69:19:6d:bd:75:4c:2e:5c:d9:66:75:ad:23:
         92:df:13:6b:1f:81:53:83:8e:68:10:9b:d0:3b:4f:4d:69:37:
         ce:b3:f1:6a:33:04:46:56:8c:58:cb:26:2d:24:b7:2e:27:a1:
         9d:10:1d:b0:79:de:c8:a1:16:47:fc:c0:0f:63:df:d4:29:e8:
         0c:06:03:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:02:38 2025 by rpki-client