Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F6741FA5AF932CE10F438DF64702FB468A683A37FE95A743719A1A54BF2CFF90/0/34352e3137392e3136302e302f32322d3234203d3e20323639373433.roa
File:                     34352e3137392e3136302e302f32322d3234203d3e20323639373433.roa (raw, json)
Hash identifier:          jY6JFJEpLFn/FtOFNq2rKBeC/w2/Y8QnWSnbq4GcZOc=
Subject key identifier:   08:A1:45:D1:6F:B9:EC:E6:D7:C7:48:D5:30:D0:E0:8B:67:05:DF:81
Certificate issuer:       /CN=72C43F60F48CC54011B2E3012C2003E376AC4C05
Certificate serial:       54BCEDEB1EB2CF0E108B678BF987C6FF9B3F0C74
Authority key identifier: 72:C4:3F:60:F4:8C:C5:40:11:B2:E3:01:2C:20:03:E3:76:AC:4C:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72C43F60F48CC54011B2E3012C2003E376AC4C05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F6741FA5AF932CE10F438DF64702FB468A683A37FE95A743719A1A54BF2CFF90/0/34352e3137392e3136302e302f32322d3234203d3e20323639373433.roa
Signing time:             Mon 10 Feb 2025 22:25:00 +0000
ROA not before:           Mon 10 Feb 2025 22:20:00 +0000
ROA not after:            Mon 09 Feb 2026 22:25:00 +0000
asID:                     269743
IP address blocks:        45.179.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F6741FA5AF932CE10F438DF64702FB468A683A37FE95A743719A1A54BF2CFF90/0/72C43F60F48CC54011B2E3012C2003E376AC4C05.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F6741FA5AF932CE10F438DF64702FB468A683A37FE95A743719A1A54BF2CFF90/0/72C43F60F48CC54011B2E3012C2003E376AC4C05.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72C43F60F48CC54011B2E3012C2003E376AC4C05.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:bc:ed:eb:1e:b2:cf:0e:10:8b:67:8b:f9:87:c6:ff:9b:3f:0c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72C43F60F48CC54011B2E3012C2003E376AC4C05
        Validity
            Not Before: Feb 10 22:20:00 2025 GMT
            Not After : Feb  9 22:25:00 2026 GMT
        Subject: CN=08A145D16FB9ECE6D7C748D530D0E08B6705DF81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:36:5a:7b:55:bb:73:17:41:ba:b9:08:74:84:
                    17:50:92:14:a2:d1:38:e9:20:61:39:7d:e0:60:1d:
                    3a:94:da:df:57:d7:23:64:22:db:93:ef:51:be:75:
                    a8:58:8a:f8:a7:c9:56:81:f9:74:59:7d:d7:fb:89:
                    89:c5:5a:3b:21:06:47:b4:4c:56:3b:eb:80:db:93:
                    ad:9f:69:4e:11:93:7a:0e:de:3e:81:3a:8e:4d:ba:
                    77:e2:52:bc:f5:cf:ce:b3:12:d5:84:2c:4b:21:e3:
                    15:90:3c:0c:66:e2:73:38:09:a7:00:b2:15:cc:93:
                    cf:e5:e3:c2:b4:0d:b5:53:61:3c:71:fd:aa:2c:eb:
                    1c:03:69:09:88:96:17:d5:03:e8:66:59:e0:06:b6:
                    22:8b:ba:65:73:62:54:e4:86:b2:36:44:15:f8:f3:
                    06:51:10:f0:a4:d8:2f:f6:94:a3:f0:b0:f9:d9:86:
                    08:a8:13:29:99:cf:72:82:dd:a2:cc:2f:1e:08:17:
                    3a:d6:3b:16:40:7f:70:35:88:7e:e4:89:6a:7c:5e:
                    96:ae:37:03:e9:8d:e4:91:e9:06:53:7e:9d:c5:08:
                    5e:df:09:5c:3d:6d:6b:72:6d:62:45:d4:95:f5:49:
                    36:ac:00:22:1d:0f:6d:74:c1:23:98:d1:35:a0:bd:
                    a7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A1:45:D1:6F:B9:EC:E6:D7:C7:48:D5:30:D0:E0:8B:67:05:DF:81
            X509v3 Authority Key Identifier:
                keyid:72:C4:3F:60:F4:8C:C5:40:11:B2:E3:01:2C:20:03:E3:76:AC:4C:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F6741FA5AF932CE10F438DF64702FB468A683A37FE95A743719A1A54BF2CFF90/0/72C43F60F48CC54011B2E3012C2003E376AC4C05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72C43F60F48CC54011B2E3012C2003E376AC4C05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F6741FA5AF932CE10F438DF64702FB468A683A37FE95A743719A1A54BF2CFF90/0/34352e3137392e3136302e302f32322d3234203d3e20323639373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:c3:2d:63:ed:58:42:79:a0:0b:9a:6c:00:31:c5:f7:be:dd:
         7a:e1:cf:8d:18:53:50:1c:d7:63:90:62:ef:a4:0c:34:3f:1d:
         41:ec:79:0d:78:2b:d1:c9:0b:cc:4f:45:71:15:49:c5:1b:c2:
         ee:c5:b7:07:0b:10:6f:bb:51:ac:10:6a:2b:e6:5d:90:b0:8b:
         a8:2a:33:f4:cb:46:83:87:86:e5:52:bf:b2:5d:32:09:fa:3d:
         82:dc:1b:e6:b3:46:97:e9:2e:ad:ab:13:a6:f6:e9:e4:18:00:
         11:85:b3:3f:70:27:c6:28:7d:64:01:68:bf:22:9f:45:66:15:
         ac:79:cc:00:b4:ed:95:fb:78:89:a5:cb:14:56:eb:c1:e9:78:
         2a:23:ed:62:dd:44:03:11:d4:eb:a1:71:94:00:6c:9c:e5:d9:
         17:0e:9f:bc:7d:0f:f7:22:ae:ca:95:21:a4:00:c8:64:de:ea:
         7a:7b:7a:f1:00:e7:ea:07:08:70:7f:16:1d:f7:b9:1d:cb:6c:
         22:97:af:64:6e:e0:28:f4:64:ec:e4:b3:27:a2:9b:8e:ed:6f:
         68:4d:96:86:3b:68:b3:73:ed:05:f2:5e:06:9d:d3:aa:d6:95:
         a2:68:83:41:ea:d3:c9:0e:bb:84:a2:dd:60:b8:87:f7:56:6a:
         d7:72:ed:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:52:33 2025 by rpki-client