Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/34352e3138362e3230302e302f32322d3234203d3e20323639383230.roa
File:                     34352e3138362e3230302e302f32322d3234203d3e20323639383230.roa (raw, json)
Hash identifier:          fBpt9d1/nmrlTLv4TuY7IVRp/nG1LJe4tRjO1TeH71Y=
Subject key identifier:   F8:E9:29:13:D9:4C:74:8F:82:23:E9:B6:E3:04:2A:4B:5E:59:88:73
Certificate issuer:       /CN=8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0
Certificate serial:       233533A77A0E219F0B8797EE713B5A071CFE5031
Authority key identifier: 8D:A6:D7:75:DB:31:F2:78:09:1A:DA:28:4A:3E:CD:5B:DE:A9:CC:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/34352e3138362e3230302e302f32322d3234203d3e20323639383230.roa
Signing time:             Tue 04 Feb 2025 18:54:21 +0000
ROA not before:           Tue 04 Feb 2025 18:49:21 +0000
ROA not after:            Tue 03 Feb 2026 18:54:21 +0000
asID:                     269820
IP address blocks:        45.186.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:35:33:a7:7a:0e:21:9f:0b:87:97:ee:71:3b:5a:07:1c:fe:50:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0
        Validity
            Not Before: Feb  4 18:49:21 2025 GMT
            Not After : Feb  3 18:54:21 2026 GMT
        Subject: CN=F8E92913D94C748F8223E9B6E3042A4B5E598873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b1:68:3a:4b:d4:7c:1e:80:6f:7d:40:fd:b3:
                    27:d3:ae:44:90:b8:43:1e:6f:a3:eb:2a:6f:f7:66:
                    bf:c9:29:0a:94:e4:97:d7:bb:4d:51:ec:a8:ad:5f:
                    2e:28:2e:d8:2f:e2:da:a5:34:a1:47:3f:4f:8b:ff:
                    13:f6:8b:6b:52:69:86:f7:08:1f:bb:96:66:24:19:
                    37:15:c4:3e:d8:4c:dc:f8:02:27:b8:c5:4b:51:50:
                    9e:c4:fa:2e:e5:58:40:83:20:29:63:2f:4a:cd:f0:
                    53:9f:61:d9:89:ee:eb:29:2e:7b:d4:ae:3f:36:64:
                    db:85:41:76:6f:9e:77:49:8f:fa:9f:29:36:10:e9:
                    10:16:8b:86:7b:bd:e8:f8:05:db:60:72:a6:c8:bb:
                    65:b1:2e:be:fd:08:93:8d:8a:f4:11:59:99:dc:77:
                    ce:a4:70:37:62:2f:7f:d8:38:e4:16:3c:c4:40:e5:
                    2e:e0:d0:ff:43:4d:2a:9c:c8:f7:da:e3:57:00:8c:
                    9e:28:f5:cb:ef:16:49:e9:fd:6b:51:16:f8:cb:37:
                    61:ba:bb:eb:ff:97:47:91:0c:3c:55:45:50:34:30:
                    62:05:29:f7:c6:0a:6d:df:1e:74:a6:d0:93:c9:1c:
                    e9:df:83:44:fa:99:35:b8:ed:e2:71:3c:e4:aa:5e:
                    46:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E9:29:13:D9:4C:74:8F:82:23:E9:B6:E3:04:2A:4B:5E:59:88:73
            X509v3 Authority Key Identifier:
                keyid:8D:A6:D7:75:DB:31:F2:78:09:1A:DA:28:4A:3E:CD:5B:DE:A9:CC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA6D775DB31F278091ADA284A3ECD5BDEA9CCC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EECBA86087A832B2E491E1337C3656C7201E0920D80872B942321AF5B443AB31/0/34352e3138362e3230302e302f32322d3234203d3e20323639383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:22:5b:61:f4:29:64:2d:f4:38:1d:30:7e:9b:a9:40:35:c2:
         20:f7:0c:ac:1c:ee:9e:95:a8:24:b2:17:24:bc:3e:3b:40:0a:
         9c:a8:d1:6d:44:c1:22:0d:9a:96:5e:a9:bc:ca:a2:3e:26:7b:
         df:84:d4:31:da:70:18:cd:37:f1:58:b3:59:e1:c4:7c:4a:c0:
         fc:35:f9:f5:03:97:d5:d4:b9:77:66:b5:db:3c:6a:79:65:46:
         88:1f:b3:7e:a7:8b:e3:cf:42:5f:cc:4b:05:f7:49:a4:e8:34:
         cc:dc:69:5f:81:91:ee:64:fa:2e:55:99:61:28:f2:98:90:20:
         73:02:33:4a:f7:91:93:07:12:1d:9a:74:54:11:1a:0f:dc:19:
         91:8f:f4:bf:23:0c:8a:28:c9:e6:f0:8b:69:0f:34:01:3f:14:
         8d:15:91:22:9a:f3:97:9f:84:ed:4a:a7:35:c4:04:80:33:de:
         60:54:b0:55:03:40:8f:86:34:34:c1:00:d9:86:6f:df:22:b6:
         4b:f5:97:16:29:2f:7f:64:94:0f:b2:2c:e6:91:ee:df:01:f7:
         f2:d9:77:68:be:eb:07:b1:1c:a1:bf:4d:db:3f:d0:fc:5c:35:
         2c:f8:da:ba:a5:38:5c:4a:ca:4d:f1:70:d2:7c:27:66:bc:1f:
         30:ca:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:54 2025 by rpki-client