Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/34352e3232352e3130342e302f32322d3234203d3e203532343638.roa
File:                     34352e3232352e3130342e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          Hgva4pyH/dpss1w8CDD+TwczKVkkwZ5qIWcRrDLwCCo=
Subject key identifier:   DD:86:9A:E4:34:C0:FA:7D:5C:01:2C:0A:A0:05:11:2C:55:72:5D:3F
Certificate issuer:       /CN=179432928797F12F1478B33FBCA3D63294DDAFC3
Certificate serial:       3E79122791AECEDA1EF2AA94C829E3A9D5CF9947
Authority key identifier: 17:94:32:92:87:97:F1:2F:14:78:B3:3F:BC:A3:D6:32:94:DD:AF:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/179432928797F12F1478B33FBCA3D63294DDAFC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/34352e3232352e3130342e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:11:08 +0000
ROA not before:           Tue 04 Feb 2025 18:06:08 +0000
ROA not after:            Tue 03 Feb 2026 18:11:08 +0000
asID:                     52468
IP address blocks:        45.225.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/179432928797F12F1478B33FBCA3D63294DDAFC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/179432928797F12F1478B33FBCA3D63294DDAFC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/179432928797F12F1478B33FBCA3D63294DDAFC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:79:12:27:91:ae:ce:da:1e:f2:aa:94:c8:29:e3:a9:d5:cf:99:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179432928797F12F1478B33FBCA3D63294DDAFC3
        Validity
            Not Before: Feb  4 18:06:08 2025 GMT
            Not After : Feb  3 18:11:08 2026 GMT
        Subject: CN=DD869AE434C0FA7D5C012C0AA005112C55725D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:b7:27:42:4b:85:61:60:7f:b9:81:59:be:
                    6f:7e:18:b1:81:fd:ad:03:71:7e:f4:b8:d6:88:bd:
                    1b:45:38:b6:7e:4a:b1:0b:88:a7:dd:9e:65:00:aa:
                    4f:c9:bf:00:cf:a2:59:70:0d:42:ca:34:70:9f:a2:
                    08:50:12:35:ed:ab:22:00:3c:11:26:c0:1e:c4:58:
                    f3:43:85:21:72:5c:ac:a5:f6:02:a7:6c:da:da:a6:
                    a9:4b:da:89:7e:0c:b5:67:fa:c6:14:56:8b:53:c3:
                    50:b3:04:aa:a3:85:42:8e:1b:09:7e:30:24:50:c0:
                    d5:44:e6:16:e2:f2:8d:95:67:b0:c9:4e:08:12:a8:
                    7d:78:9f:ff:43:09:58:f4:4a:5c:82:4b:f9:6d:73:
                    18:3f:48:80:bf:58:4d:94:82:ba:df:1c:8b:bf:3a:
                    ad:0a:9b:0f:14:98:b7:2c:52:f4:4a:3c:65:a7:73:
                    bd:5b:7e:32:15:c3:07:ff:ab:f6:b4:db:dd:8f:fd:
                    d2:a4:bc:37:6c:e7:06:fd:1e:7b:fe:4f:80:14:17:
                    dc:35:30:ef:13:54:54:a2:5a:a7:a9:05:ac:04:b4:
                    c0:84:c7:18:57:90:22:49:c1:59:aa:c8:ac:74:40:
                    31:5b:48:ea:98:d1:bf:f3:e7:fe:91:00:f8:00:cf:
                    48:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:86:9A:E4:34:C0:FA:7D:5C:01:2C:0A:A0:05:11:2C:55:72:5D:3F
            X509v3 Authority Key Identifier:
                keyid:17:94:32:92:87:97:F1:2F:14:78:B3:3F:BC:A3:D6:32:94:DD:AF:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/179432928797F12F1478B33FBCA3D63294DDAFC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/179432928797F12F1478B33FBCA3D63294DDAFC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/34352e3232352e3130342e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:03:fd:a4:22:6b:e9:c5:3b:3b:b0:49:73:4e:4d:70:5b:f2:
         0b:e9:72:11:1d:15:7c:89:36:14:11:e4:bc:de:65:ec:77:ba:
         23:07:3a:e8:ec:fd:01:0d:20:64:37:d9:fe:e6:36:5b:bf:fb:
         3f:f9:32:91:84:fb:98:7d:16:ca:39:8f:49:99:c1:45:42:05:
         64:10:71:96:cb:12:2d:12:02:6d:b3:ad:a4:51:b1:18:dd:dc:
         74:41:ce:30:90:ed:5e:4a:b1:0a:d6:1f:e1:0a:5f:00:02:fb:
         2e:44:5a:58:31:aa:3d:6e:6a:6d:74:c9:06:7a:be:9f:9b:6f:
         61:ba:c6:ef:ca:e6:1a:78:32:97:90:ec:6b:24:d9:f3:73:ef:
         7c:ac:d4:d6:a9:a9:49:66:b0:21:15:60:9a:c3:e3:ad:18:9d:
         36:6d:28:f0:fa:4f:44:a3:7a:5b:30:e4:e0:40:e7:d4:eb:62:
         d3:d0:20:d2:85:45:8a:e1:8c:8b:a3:72:02:38:da:b1:64:92:
         1a:67:36:a3:7a:8b:ce:09:5b:b0:b8:25:39:1c:d5:dd:6d:bc:
         50:91:7b:44:43:32:ff:89:0b:91:df:73:ae:b6:27:44:90:f9:
         0f:b8:a3:9f:2d:a6:0d:74:c7:75:67:a9:c3:ca:68:3a:87:4c:
         36:d8:3d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:04 2025 by rpki-client