Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/34352e3233342e3131362e302f32322d3234203d3e20323636373732.roa
File:                     34352e3233342e3131362e302f32322d3234203d3e20323636373732.roa (raw, json)
Hash identifier:          5MsCt9tbExCFgCH7cMedJtRuY0gOxEHrQVkS3sB2deQ=
Subject key identifier:   9A:B2:DF:2B:58:D3:56:12:F0:1D:3F:85:DC:19:42:8C:3E:46:20:FB
Certificate issuer:       /CN=C59D456B5A7958D801EFD7AD79135F812D7051FD
Certificate serial:       24E1F539C3F36F6E7FB42E54312D44F1EEC5B947
Authority key identifier: C5:9D:45:6B:5A:79:58:D8:01:EF:D7:AD:79:13:5F:81:2D:70:51:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/34352e3233342e3131362e302f32322d3234203d3e20323636373732.roa
Signing time:             Tue 04 Feb 2025 18:23:22 +0000
ROA not before:           Tue 04 Feb 2025 18:18:22 +0000
ROA not after:            Tue 03 Feb 2026 18:23:22 +0000
asID:                     266772
IP address blocks:        45.234.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e1:f5:39:c3:f3:6f:6e:7f:b4:2e:54:31:2d:44:f1:ee:c5:b9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C59D456B5A7958D801EFD7AD79135F812D7051FD
        Validity
            Not Before: Feb  4 18:18:22 2025 GMT
            Not After : Feb  3 18:23:22 2026 GMT
        Subject: CN=9AB2DF2B58D35612F01D3F85DC19428C3E4620FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:88:21:68:7a:4f:de:2d:6d:99:b3:ae:70:
                    f6:9d:a2:4b:5c:2d:50:a7:f3:13:d9:54:90:74:c1:
                    48:c5:80:44:bc:96:0b:e8:4f:e5:88:21:e6:23:9e:
                    d4:6d:00:49:d9:30:80:cf:6f:96:ff:11:01:94:3a:
                    a9:de:ba:c0:b8:08:0a:f7:46:bb:71:47:51:0b:7c:
                    8a:ca:89:d5:16:d2:51:7e:f1:b0:b2:d7:1a:34:60:
                    2b:3c:18:e7:2a:cf:e4:7e:8b:43:73:f5:5d:fe:43:
                    8f:65:68:de:93:fa:14:08:9b:83:de:99:61:2e:f0:
                    de:83:f8:d4:0e:f0:e3:45:f1:c3:1f:5c:b6:0a:bf:
                    b5:8a:86:03:be:a6:a0:0d:e1:f6:04:81:75:35:e3:
                    57:00:b7:34:0a:6e:d2:ae:a8:7e:c3:28:8a:8d:1e:
                    ed:7e:3b:06:f3:da:b2:02:bc:62:c7:db:c1:93:36:
                    a8:3f:b3:1f:1b:06:b8:ca:cb:3a:09:5d:f8:32:96:
                    77:78:6b:34:67:1a:2e:98:3b:69:54:c8:e4:87:c2:
                    73:5f:f4:8f:9a:81:4a:db:0a:e7:b8:6e:6b:7a:94:
                    25:6a:f0:99:d0:ac:45:5b:3b:d7:dd:29:d1:6e:99:
                    f2:4e:56:de:da:b4:bd:e7:d9:ba:b0:e9:cc:81:4d:
                    78:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B2:DF:2B:58:D3:56:12:F0:1D:3F:85:DC:19:42:8C:3E:46:20:FB
            X509v3 Authority Key Identifier:
                keyid:C5:9D:45:6B:5A:79:58:D8:01:EF:D7:AD:79:13:5F:81:2D:70:51:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/34352e3233342e3131362e302f32322d3234203d3e20323636373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:1b:b0:c6:f0:3b:43:2b:0c:5c:12:f2:d9:73:58:90:2c:8e:
         f1:07:0c:21:72:6b:26:df:27:f2:16:75:aa:26:2d:77:7f:aa:
         87:37:16:e6:dd:9d:b1:93:c2:71:4c:a0:f5:c7:a4:bc:a7:e9:
         0d:e9:8a:07:84:17:89:ba:81:d4:59:c3:43:1d:2a:4e:9a:82:
         57:43:14:a9:56:1d:f2:86:79:fc:f1:1a:8d:90:23:ae:3d:41:
         a6:30:9f:04:7a:79:4d:58:f6:fd:ff:7e:d2:d3:90:70:1d:9a:
         d0:12:43:9b:c5:4c:f4:53:b0:9a:a9:13:65:89:4c:cf:8c:67:
         bd:7c:7d:36:9c:cb:db:fb:5a:e0:84:a9:f5:89:9a:aa:5b:47:
         61:e7:58:0d:ce:8f:5d:f6:91:90:e0:18:e0:b9:8f:63:5a:47:
         88:55:dd:3d:d0:5c:b5:28:bb:f4:c0:77:2f:17:94:fc:7f:b1:
         9f:37:74:2c:1f:8d:91:9b:fe:7e:cb:c9:98:a6:3b:cb:52:c0:
         54:c0:a2:cc:eb:58:6e:7a:4c:b6:6a:7d:bf:4f:93:8d:1a:e8:
         2d:9c:da:83:2e:44:ff:98:41:43:da:8e:1b:01:f0:b2:3e:db:
         6d:f6:44:cf:5a:e1:ca:6c:b4:e6:ed:00:29:08:67:53:7b:ed:
         0a:85:15:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:25:37 2025 by rpki-client