Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/34352e3136382e3137342e302f32332d3233203d3e20323639383736.roa
File:                     34352e3136382e3137342e302f32332d3233203d3e20323639383736.roa (raw, json)
Hash identifier:          1dpN82cjn8j0A/8BH+JFJRiN/JeAD4LON3ljlachpyE=
Subject key identifier:   2A:D4:01:79:3A:33:D3:FD:BB:72:D6:01:0F:B0:6B:71:00:3A:72:58
Certificate issuer:       /CN=33765A5A53AB5641AF9C73A1929D99EAB1234478
Certificate serial:       12883865C0578016D2AA1F737437A86B936F2623
Authority key identifier: 33:76:5A:5A:53:AB:56:41:AF:9C:73:A1:92:9D:99:EA:B1:23:44:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/34352e3136382e3137342e302f32332d3233203d3e20323639383736.roa
Signing time:             Tue 04 Feb 2025 18:39:59 +0000
ROA not before:           Tue 04 Feb 2025 18:34:59 +0000
ROA not after:            Tue 03 Feb 2026 18:39:59 +0000
asID:                     269876
IP address blocks:        45.168.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:88:38:65:c0:57:80:16:d2:aa:1f:73:74:37:a8:6b:93:6f:26:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33765A5A53AB5641AF9C73A1929D99EAB1234478
        Validity
            Not Before: Feb  4 18:34:59 2025 GMT
            Not After : Feb  3 18:39:59 2026 GMT
        Subject: CN=2AD401793A33D3FDBB72D6010FB06B71003A7258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:b7:91:0d:37:e1:b5:b5:d3:d9:d5:a5:50:
                    f2:d3:0d:79:18:b5:8b:d7:98:b3:d0:43:94:91:6d:
                    02:c0:96:1a:09:3d:5b:d9:7a:ab:08:42:35:b8:31:
                    7c:53:a5:2a:93:26:88:3b:ab:ab:e2:f1:6d:31:5d:
                    8e:da:80:11:bd:20:b0:e5:eb:28:6c:4f:c6:aa:04:
                    55:16:0e:e6:96:4f:a6:6f:3e:43:df:a4:75:09:4f:
                    03:9c:ea:ae:80:5b:1d:8f:be:91:da:2e:1c:9f:00:
                    d3:43:6c:69:ad:ba:67:8e:1f:8d:81:66:5f:fe:2f:
                    e5:0e:42:8e:7b:ed:c5:b1:ea:c1:ba:5e:09:77:0f:
                    87:55:9f:8d:81:71:cb:0a:df:fb:1b:80:43:c3:5e:
                    f8:f0:00:a9:93:73:c3:bb:09:43:2a:e1:77:6f:78:
                    f8:dd:46:66:50:4f:85:4c:b1:fc:f3:10:cd:cc:92:
                    6d:ba:fb:48:be:80:af:09:f2:17:ae:5c:68:be:6d:
                    e9:36:a4:c8:71:d6:9f:17:84:39:7d:da:62:5e:9b:
                    4b:8a:1b:61:1e:b2:ca:d3:23:4b:4b:7d:3d:a9:94:
                    d7:8a:47:2d:89:95:90:4c:5c:51:66:82:58:f4:09:
                    ad:a4:eb:d8:b9:93:32:6b:db:1a:e2:0a:18:1b:8c:
                    f1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D4:01:79:3A:33:D3:FD:BB:72:D6:01:0F:B0:6B:71:00:3A:72:58
            X509v3 Authority Key Identifier:
                keyid:33:76:5A:5A:53:AB:56:41:AF:9C:73:A1:92:9D:99:EA:B1:23:44:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33765A5A53AB5641AF9C73A1929D99EAB1234478.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F44DC6830B20905E40EFF6D6630B7571AAE62A9298187D969A5F9A5EDEAC9105/0/34352e3136382e3137342e302f32332d3233203d3e20323639383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:82:9d:12:ac:36:c1:9e:61:bb:99:b6:e8:00:a8:24:96:9b:
         25:b4:db:c1:19:24:df:2a:b2:4c:b6:4c:0a:b9:22:63:2d:13:
         79:0c:b7:22:12:c6:99:37:37:f2:29:b8:ef:6a:3e:2a:18:0a:
         20:95:e4:00:80:5f:52:d5:66:f6:3f:d7:f5:59:3d:e4:cd:d9:
         fc:15:33:8d:f3:26:d9:73:b9:9c:83:8f:36:2b:63:e4:42:59:
         a6:2e:03:e9:00:e0:51:cb:0f:6c:7e:12:c3:79:41:20:13:ca:
         6f:ef:78:d3:6f:cf:03:ee:15:c6:dc:a2:f8:ae:90:74:0b:73:
         18:78:67:70:df:88:3b:24:eb:97:52:17:0a:39:80:60:a9:6d:
         23:e2:8d:a0:53:3c:47:62:8e:2e:ab:18:65:c3:e6:9a:d1:90:
         d4:68:61:e7:27:5b:7b:b0:7b:23:63:53:f7:9d:c4:59:c6:da:
         ff:29:31:a6:8e:95:88:2e:b9:b9:12:d4:26:8f:90:98:29:be:
         9b:9d:d4:d4:d0:27:eb:1b:02:13:60:41:46:9d:1e:6d:1c:dc:
         47:21:e3:3d:06:8f:f1:f9:74:3a:1a:71:d3:99:26:6b:29:98:
         73:c0:b0:ed:cf:59:fc:49:b1:1d:ad:bf:2e:94:e4:db:71:cb:
         7f:7c:a8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:39 2025 by rpki-client