Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/34352e3233332e342e302f32322d3234203d3e20323731373830.roa
File:                     34352e3233332e342e302f32322d3234203d3e20323731373830.roa (raw, json)
Hash identifier:          +Ehqe5AsijtKZOHSCGOIJa3pckbUIwcG5kJITFHRXM0=
Subject key identifier:   E5:B1:EC:D8:25:FD:54:57:94:E7:1A:B2:29:D4:B2:EB:B8:E4:30:DF
Certificate issuer:       /CN=CD721CE88C796E837A067F6BF32EA1016FA71013
Certificate serial:       3B234B472EB911619C44494C77B003DB2A0FCA4C
Authority key identifier: CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/34352e3233332e342e302f32322d3234203d3e20323731373830.roa
Signing time:             Tue 04 Feb 2025 20:05:31 +0000
ROA not before:           Tue 04 Feb 2025 20:00:31 +0000
ROA not after:            Tue 03 Feb 2026 20:05:31 +0000
asID:                     271780
IP address blocks:        45.233.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:23:4b:47:2e:b9:11:61:9c:44:49:4c:77:b0:03:db:2a:0f:ca:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD721CE88C796E837A067F6BF32EA1016FA71013
        Validity
            Not Before: Feb  4 20:00:31 2025 GMT
            Not After : Feb  3 20:05:31 2026 GMT
        Subject: CN=E5B1ECD825FD545794E71AB229D4B2EBB8E430DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7f:f9:79:4c:91:37:0d:32:d1:61:f8:48:b4:
                    ac:fa:c8:e3:cc:1e:83:9e:8e:df:e0:24:56:ca:8c:
                    14:ed:a8:cb:ff:64:9d:93:a1:5e:e1:c5:ba:68:cc:
                    fa:d5:e0:44:4c:66:09:91:92:06:29:2e:5e:f6:8f:
                    de:64:66:83:be:d0:88:75:2e:ef:74:7e:68:e4:d1:
                    b5:2e:09:1f:98:61:a1:e9:2d:1c:92:aa:15:9d:d1:
                    66:72:4b:fa:52:4a:4f:b4:50:c1:f6:2e:d1:82:39:
                    26:50:f1:e7:ed:d5:68:cd:2b:4f:62:c8:91:e5:f7:
                    e6:d9:44:f9:a9:60:66:14:4f:89:47:dc:3a:a0:b0:
                    e5:cc:54:04:4c:20:4c:9c:bb:90:dc:94:2d:c7:52:
                    0f:41:1c:95:ed:ea:15:c9:1e:3e:c8:c7:7d:bf:08:
                    d9:93:6e:ff:e0:7b:b5:17:31:b5:c6:44:e7:3a:9f:
                    c5:f8:76:13:96:26:57:49:09:ce:bd:65:67:37:47:
                    91:43:7f:00:8a:cb:93:2e:13:51:91:57:8e:50:01:
                    36:09:b3:58:a1:c6:76:68:68:ef:77:f0:43:88:97:
                    2d:c7:5f:90:01:bf:d6:a6:81:33:95:ae:02:8d:8b:
                    95:da:32:15:9d:20:15:d8:59:1e:41:a6:f1:d3:82:
                    ec:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B1:EC:D8:25:FD:54:57:94:E7:1A:B2:29:D4:B2:EB:B8:E4:30:DF
            X509v3 Authority Key Identifier:
                keyid:CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/34352e3233332e342e302f32322d3234203d3e20323731373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:e3:35:1a:d0:f5:bd:ac:0c:5f:33:b9:c5:82:8b:88:37:70:
         f7:4a:08:95:60:3a:8c:01:37:67:9c:cc:0a:41:a7:1e:f2:da:
         3b:bd:3c:9f:68:47:42:ba:11:2e:ad:8a:63:13:87:19:05:df:
         7a:c1:73:ea:43:05:cb:ba:01:8a:8e:9a:ec:a1:83:7b:80:56:
         10:57:c7:b2:ac:1f:9b:10:cf:e5:e3:c3:bb:2b:87:94:2d:8d:
         e1:2b:6b:97:1e:43:37:52:dc:23:10:ac:44:24:b0:ac:07:2b:
         c7:48:7c:38:2c:37:f5:d1:0f:e5:33:57:97:95:95:36:35:e4:
         2f:24:fc:e5:2f:55:86:aa:4b:1c:a6:c0:5a:04:b9:40:85:46:
         79:f0:3a:e7:03:3c:70:9b:b2:6c:de:bd:13:de:ef:38:70:16:
         d7:bc:f3:5d:03:33:1a:3d:cf:b7:45:92:b6:bd:dd:a9:86:c8:
         a0:e1:4c:cc:33:5a:d5:c7:4e:45:a5:3f:30:52:ee:ba:43:55:
         b0:a5:d1:c1:6c:65:19:e3:84:e0:98:4b:df:93:7e:58:7a:88:
         0a:42:1a:da:03:d1:98:f8:7c:96:64:d2:0a:ea:50:38:94:ad:
         26:3e:7b:7d:97:93:e7:9d:08:ce:64:f3:a5:66:b5:6e:9e:53:
         7e:2d:a2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:21:06 2025 by rpki-client