Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/34352e3233322e3230342e302f32322d3234203d3e20323636373630.roa
File:                     34352e3233322e3230342e302f32322d3234203d3e20323636373630.roa (raw, json)
Hash identifier:          vVopfgb+bFdFX+tYdubIiO+VLXMSxIJFOTADeYqoBjQ=
Subject key identifier:   71:2A:95:FB:37:F6:52:12:2E:F9:F6:90:B4:6C:C4:65:83:EC:2C:E8
Certificate issuer:       /CN=84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C
Certificate serial:       202FBC5183CEA688C81384F20FD906B2C0FDE441
Authority key identifier: 84:C3:A6:50:73:B9:C2:94:BE:FB:A2:99:A5:A4:D6:F6:2C:FF:FD:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/34352e3233322e3230342e302f32322d3234203d3e20323636373630.roa
Signing time:             Tue 04 Feb 2025 18:26:57 +0000
ROA not before:           Tue 04 Feb 2025 18:21:57 +0000
ROA not after:            Tue 03 Feb 2026 18:26:57 +0000
asID:                     266760
IP address blocks:        45.232.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2f:bc:51:83:ce:a6:88:c8:13:84:f2:0f:d9:06:b2:c0:fd:e4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C
        Validity
            Not Before: Feb  4 18:21:57 2025 GMT
            Not After : Feb  3 18:26:57 2026 GMT
        Subject: CN=712A95FB37F652122EF9F690B46CC46583EC2CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:32:e2:01:fc:3b:19:3b:44:96:de:32:04:81:
                    b1:cf:7a:26:ea:9a:ac:b3:3a:98:24:ff:75:5f:f1:
                    23:f0:24:d5:86:49:fd:6d:58:81:ab:c4:65:1b:a5:
                    ab:ee:29:f2:75:c2:57:83:52:ec:c0:f0:fc:7f:13:
                    32:17:e4:f0:70:3f:3e:97:6b:10:26:76:71:33:eb:
                    68:af:f5:ec:54:2d:eb:21:ad:54:be:84:0e:f1:de:
                    b5:01:56:e3:24:b0:01:57:70:d1:57:bd:d0:bb:b6:
                    49:4a:26:34:7c:c1:d8:f4:7b:a4:d3:70:5e:ee:d6:
                    f3:2a:b1:f9:48:02:f6:9d:84:16:c5:6a:cf:25:7c:
                    c7:f1:49:5a:a2:fb:23:6e:a4:73:9c:a0:97:60:2a:
                    d5:52:dc:c9:4a:f9:fe:bb:c5:80:9f:fd:ed:75:1b:
                    60:6c:5e:86:bd:4e:b5:4e:20:cc:a9:7d:c4:ec:90:
                    89:a4:4c:9a:5c:ce:51:4b:93:29:1d:3c:e3:1e:a7:
                    ee:90:4e:7b:62:7e:b3:cb:31:1c:23:c1:7d:51:39:
                    74:67:70:41:d2:16:9a:2e:09:8a:52:29:7f:94:14:
                    1a:17:90:75:7f:a6:da:8d:18:83:6f:44:70:70:e7:
                    91:88:c3:ea:ed:c8:99:25:28:ab:bd:af:38:6f:92:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2A:95:FB:37:F6:52:12:2E:F9:F6:90:B4:6C:C4:65:83:EC:2C:E8
            X509v3 Authority Key Identifier:
                keyid:84:C3:A6:50:73:B9:C2:94:BE:FB:A2:99:A5:A4:D6:F6:2C:FF:FD:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/34352e3233322e3230342e302f32322d3234203d3e20323636373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:55:18:63:b6:60:52:f7:8e:4b:f4:90:d4:11:14:db:a4:51:
         a7:71:d9:74:20:91:5d:66:0d:f6:81:85:d2:b5:d1:6d:c0:91:
         ea:f5:31:04:23:b6:3b:15:e7:85:1e:8a:06:cd:a5:14:95:11:
         4d:d6:6f:57:39:ec:5c:ea:ec:b6:ce:24:a8:6d:66:bc:61:d3:
         38:ae:6f:10:3c:fc:a4:8b:c4:db:89:4a:0c:c6:db:a3:a7:98:
         4f:c0:f7:4e:7a:2b:45:59:ff:9e:6f:f7:3b:fa:6a:b6:79:39:
         97:2f:b3:50:d0:25:58:d8:3a:08:32:77:21:55:ef:a1:0a:15:
         8c:4a:85:c1:75:5e:cf:fb:64:04:00:48:41:35:bf:c8:ab:ac:
         3b:29:72:55:94:48:9f:d9:33:0f:b2:41:75:b1:85:6a:ad:63:
         58:fa:2b:1b:69:56:78:cd:02:5e:e6:c9:32:34:c2:ab:e8:5e:
         6c:9f:df:5b:6f:16:15:2c:3d:43:75:0c:d3:71:87:8c:3a:78:
         62:1d:60:9d:07:b0:6d:c5:98:1c:5c:74:15:cd:70:f7:61:f1:
         0b:35:a5:ad:3c:02:33:c3:ed:f1:1e:b0:32:2e:bf:10:59:04:
         58:72:18:34:0e:fa:a6:4b:72:0b:04:3d:70:3c:9b:75:83:f2:
         d4:f1:7a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:44 2025 by rpki-client