Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/34352e3138362e3130382e302f32322d3232203d3e203237373239.roa
File:                     34352e3138362e3130382e302f32322d3232203d3e203237373239.roa (raw, json)
Hash identifier:          JJa0q/1HEnvKXUaIND7QIsSxkvU4FccdtPDhwwcDsOo=
Subject key identifier:   68:66:EF:83:B5:62:A4:85:09:0C:A3:87:8E:A0:81:CF:8F:53:98:C7
Certificate issuer:       /CN=B0F0C9DD73F6C1475F1456103DA6BB622464669F
Certificate serial:       0FB4DE445A4F5EBAB6A6CE9E3834965B9943C08C
Authority key identifier: B0:F0:C9:DD:73:F6:C1:47:5F:14:56:10:3D:A6:BB:62:24:64:66:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/34352e3138362e3130382e302f32322d3232203d3e203237373239.roa
Signing time:             Thu 06 Feb 2025 05:09:10 +0000
ROA not before:           Thu 06 Feb 2025 05:04:10 +0000
ROA not after:            Thu 05 Feb 2026 05:09:10 +0000
asID:                     27729
IP address blocks:        45.186.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 14:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b4:de:44:5a:4f:5e:ba:b6:a6:ce:9e:38:34:96:5b:99:43:c0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F0C9DD73F6C1475F1456103DA6BB622464669F
        Validity
            Not Before: Feb  6 05:04:10 2025 GMT
            Not After : Feb  5 05:09:10 2026 GMT
        Subject: CN=6866EF83B562A485090CA3878EA081CF8F5398C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c2:f3:44:fd:5f:14:43:8b:6b:a7:de:53:a9:
                    e4:54:c1:06:a3:ba:54:74:f9:7b:9e:1f:7f:b3:bc:
                    cc:84:8c:d5:c4:df:e8:03:aa:1e:cc:1f:08:7b:15:
                    6d:d3:29:76:9a:89:0e:92:49:f3:13:25:66:fd:0a:
                    13:e6:6b:db:c6:f0:d6:f1:7b:2c:fc:3d:af:08:27:
                    e1:09:66:2f:61:53:5d:41:08:9a:2d:a9:3e:03:02:
                    8e:d9:a9:c1:84:a5:b4:87:62:fa:df:fc:21:db:78:
                    25:d8:1f:94:3c:1c:4d:b8:c0:55:79:35:c6:be:cf:
                    8c:c2:54:9a:0b:09:f3:7f:aa:34:78:46:23:91:ae:
                    ee:c6:27:14:20:d8:5d:36:42:59:87:96:0b:26:03:
                    8c:fc:72:51:67:a4:f6:2d:d6:68:10:ff:64:68:12:
                    4c:e9:b2:14:d4:9a:d4:72:4f:21:54:ad:32:fd:71:
                    75:a7:d5:51:8d:16:36:89:87:e3:ac:b0:fa:c5:b4:
                    55:75:e7:92:a8:a5:b9:39:a1:83:35:5d:c3:c3:dd:
                    8b:4e:bc:1e:9c:48:15:05:a9:05:34:9b:37:f7:c6:
                    29:a7:a5:c9:15:ed:88:36:f5:da:da:b0:c8:c0:5c:
                    9b:95:7b:b0:03:27:bf:b7:34:5b:2e:a8:f6:a1:57:
                    c6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:66:EF:83:B5:62:A4:85:09:0C:A3:87:8E:A0:81:CF:8F:53:98:C7
            X509v3 Authority Key Identifier:
                keyid:B0:F0:C9:DD:73:F6:C1:47:5F:14:56:10:3D:A6:BB:62:24:64:66:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/34352e3138362e3130382e302f32322d3232203d3e203237373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:55:3a:ac:1f:81:2a:70:4e:0c:4c:ea:29:41:b5:a2:47:a9:
         bc:8d:7a:93:ad:f1:05:ef:e1:f3:30:31:68:06:63:98:9f:8f:
         9a:82:18:75:ba:74:bc:95:4e:4e:12:f6:0a:51:71:e0:04:1f:
         ee:9c:fc:d9:c0:47:bd:04:3e:d8:10:13:b7:e0:ab:4b:bc:0b:
         78:cb:1a:e0:68:34:c4:e1:82:ea:74:cd:ab:41:c5:f1:39:df:
         1d:2f:4c:ca:5b:b6:04:ad:86:89:d0:60:ae:84:c0:69:c7:ac:
         5a:f6:de:8f:28:94:55:c7:15:6b:f5:04:54:f7:25:ae:18:e1:
         bc:c1:62:dc:28:e0:e7:fb:94:22:2a:c5:ec:ae:7d:2a:2d:df:
         7c:d4:73:08:b7:b3:54:5f:f4:cc:33:ba:10:03:b6:33:a5:4f:
         0d:24:f4:f8:43:57:f7:27:a9:61:83:f2:3b:69:3d:dc:45:af:
         f7:af:cc:0c:7f:c6:19:fe:80:4f:68:5e:57:51:51:51:51:2b:
         0a:c4:a7:55:93:17:b9:2d:ea:29:1d:69:71:7b:10:b3:0b:15:
         dd:51:e4:99:04:f0:c8:53:ba:b2:f4:42:3e:46:c3:f6:b6:a3:
         50:5f:59:fa:56:1d:06:97:87:05:2f:91:a3:8a:b3:7d:5a:e5:
         f1:de:85:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:07 2025 by rpki-client