Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32322d3232203d3e20323636373235.roa
File:                     34352e36352e3232342e302f32322d3232203d3e20323636373235.roa (raw, json)
Hash identifier:          og+VaSmblYvq7DYE2qhmDWQ9SV0j79wP8pEIWgMD7pw=
Subject key identifier:   1B:1B:64:23:B5:05:41:7B:BE:E4:D3:43:8E:5F:44:35:0C:3E:F4:43
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       06ADF576466DAB12348D1876C21836E3E59A2B50
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32322d3232203d3e20323636373235.roa
Signing time:             Tue 04 Feb 2025 18:28:12 +0000
ROA not before:           Tue 04 Feb 2025 18:23:12 +0000
ROA not after:            Tue 03 Feb 2026 18:28:12 +0000
asID:                     266725
IP address blocks:        45.65.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 01:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ad:f5:76:46:6d:ab:12:34:8d:18:76:c2:18:36:e3:e5:9a:2b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Feb  4 18:23:12 2025 GMT
            Not After : Feb  3 18:28:12 2026 GMT
        Subject: CN=1B1B6423B505417BBEE4D3438E5F44350C3EF443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:68:a4:21:9b:58:39:b2:c5:5d:61:c5:6f:a7:
                    57:11:e4:ce:2e:fb:c2:d8:f9:08:59:e5:05:e7:41:
                    74:54:44:d3:50:5e:f7:c9:63:78:07:fe:90:aa:09:
                    1f:b2:91:48:a0:2d:b0:ef:b8:5e:5a:18:ac:1e:c4:
                    c0:e3:89:86:d3:c7:e3:97:a6:3c:22:22:e8:49:5c:
                    d7:9e:f2:1e:43:5e:cb:80:25:1e:6a:d8:af:c9:7f:
                    52:8a:3e:a2:25:cb:e7:6d:04:43:8b:04:74:78:7d:
                    00:3e:39:63:78:65:27:82:0b:f3:f4:45:4c:c1:b1:
                    d8:0b:7e:ca:5e:dc:17:d3:1e:96:98:be:55:30:21:
                    bc:68:4f:96:dd:34:c3:40:b3:9f:ba:fb:1c:10:7d:
                    5b:27:7c:86:53:98:b1:ca:f5:9b:5a:fa:8b:d1:bc:
                    af:5c:31:55:4c:4a:fd:18:46:fb:de:92:6c:35:7b:
                    75:e5:d4:fe:ec:26:37:b2:60:1a:55:20:eb:98:44:
                    e5:c9:87:e2:e8:ea:f7:32:83:e2:b1:06:60:8f:72:
                    18:d2:4f:8e:01:7a:4f:4f:64:53:22:1a:96:a9:4a:
                    25:3a:74:8d:0e:0e:1f:d3:a7:db:8f:f1:41:9a:f6:
                    89:1b:92:86:1e:09:c8:13:29:f4:b8:59:bf:4b:d5:
                    d0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1B:64:23:B5:05:41:7B:BE:E4:D3:43:8E:5F:44:35:0C:3E:F4:43
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32322d3232203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d6:2b:9b:69:02:db:bf:e4:54:be:94:92:a9:c3:6f:dd:01:f1:
         38:f9:d8:7d:a1:7d:8c:d3:a2:dd:77:a5:08:6f:08:86:1b:da:
         f9:90:13:88:2d:01:30:1d:9e:c7:27:2d:c3:ac:47:55:0e:ba:
         21:dc:40:04:13:8d:56:de:e7:cd:f0:f3:b2:0b:b6:47:e9:e8:
         21:e5:3f:37:10:4b:ba:33:8c:06:a8:ab:7c:ea:c8:f6:99:6e:
         62:56:52:c2:a3:54:16:98:1b:d7:13:f1:8c:78:7f:09:a5:74:
         35:ff:41:35:89:48:ad:19:7f:c1:af:f3:d1:8d:f5:70:c5:94:
         bd:67:56:77:6f:e3:ce:0c:32:c4:78:f5:6a:15:f3:76:45:c9:
         9a:93:8b:f4:96:e5:84:9c:d8:c4:c4:2c:66:43:ca:2c:f9:41:
         94:ed:27:08:75:08:57:10:4b:81:94:84:74:27:e6:cf:35:e7:
         95:67:72:5e:92:4a:a3:41:7b:33:e8:fb:f8:0d:28:d5:71:43:
         49:c1:e9:28:66:26:f1:8d:5b:41:20:c1:73:d1:d3:cb:b5:23:
         20:5e:53:5e:fb:1d:74:d6:8c:4a:b7:eb:23:c9:a6:6a:84:9e:
         99:82:db:4a:3e:02:94:4d:3c:42:b6:a5:0b:2c:be:e0:5a:e7:
         0d:c9:fc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:18:05 2025 by rpki-client