Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/34352e3232382e36302e302f32322d3232203d3e20323636363737.roa
File:                     34352e3232382e36302e302f32322d3232203d3e20323636363737.roa (raw, json)
Hash identifier:          r0hGlZXBUymCy1K28MeDZE4GVrXiIBJu45BWGRxhLeo=
Subject key identifier:   95:53:C3:67:C4:ED:DF:C7:51:DD:18:BB:44:8D:DC:B7:3D:71:4B:AC
Certificate issuer:       /CN=3ADE8F28C8077395C8518736031DE38C090CDF1B
Certificate serial:       1D193E2F1E48A34D699842A4AC55DFEB3F3C1298
Authority key identifier: 3A:DE:8F:28:C8:07:73:95:C8:51:87:36:03:1D:E3:8C:09:0C:DF:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/34352e3232382e36302e302f32322d3232203d3e20323636363737.roa
Signing time:             Thu 29 May 2025 21:20:34 +0000
ROA not before:           Thu 29 May 2025 21:15:34 +0000
ROA not after:            Thu 28 May 2026 21:20:34 +0000
asID:                     266677
IP address blocks:        45.228.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:19:3e:2f:1e:48:a3:4d:69:98:42:a4:ac:55:df:eb:3f:3c:12:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ADE8F28C8077395C8518736031DE38C090CDF1B
        Validity
            Not Before: May 29 21:15:34 2025 GMT
            Not After : May 28 21:20:34 2026 GMT
        Subject: CN=9553C367C4EDDFC751DD18BB448DDCB73D714BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:92:5d:1e:45:92:c5:20:67:43:c0:a6:8b:
                    aa:e3:0a:49:e9:7e:71:fc:d7:49:86:51:04:b0:f3:
                    c3:24:cb:b8:be:3d:d0:de:1c:d1:3f:2e:71:4d:12:
                    43:d0:3c:46:07:62:bd:29:1a:bf:04:ae:2e:72:95:
                    76:47:10:66:e5:15:77:c8:27:27:83:79:fd:b4:44:
                    1e:ab:4b:d8:83:bc:53:ec:e8:80:3b:ac:ca:ad:3f:
                    f6:f6:12:66:80:8d:41:ac:60:c6:8e:0e:47:a1:34:
                    7d:42:e2:c6:3a:01:51:23:76:90:59:ab:e0:01:d4:
                    b2:6c:95:76:ec:a0:ec:0e:e0:d2:3d:5f:e0:04:01:
                    03:d4:80:18:7a:93:f2:80:a4:9e:2a:60:99:41:34:
                    b2:3f:2a:76:63:f1:13:41:38:ac:fc:49:73:b8:9d:
                    7e:1f:ea:a7:4b:2f:11:cf:75:2e:8f:b5:1e:64:db:
                    e7:57:78:33:82:2d:8b:92:34:85:24:c6:03:66:8c:
                    f1:3e:1c:d0:f8:5c:fa:ce:dc:2f:29:64:eb:94:21:
                    39:ed:e9:dd:14:83:44:a8:d7:1c:6d:35:36:b3:1f:
                    1a:66:3c:81:03:f3:3a:c7:20:18:ef:1d:14:ad:70:
                    e7:46:78:b5:82:60:36:a8:85:e3:bb:42:41:1b:cf:
                    1f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:53:C3:67:C4:ED:DF:C7:51:DD:18:BB:44:8D:DC:B7:3D:71:4B:AC
            X509v3 Authority Key Identifier:
                keyid:3A:DE:8F:28:C8:07:73:95:C8:51:87:36:03:1D:E3:8C:09:0C:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/34352e3232382e36302e302f32322d3232203d3e20323636363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:78:fe:de:f5:5c:18:26:e0:fd:32:e8:01:ad:c3:46:9b:02:
         7c:19:22:3f:d2:9d:f2:fe:89:01:90:70:ca:ef:c2:93:1d:e4:
         4d:b2:02:88:52:d3:d7:5d:65:8c:f1:db:66:2b:78:f7:da:48:
         0b:49:e9:72:99:c6:0a:d1:c6:b2:2e:37:3d:4b:62:2e:cb:4a:
         ef:bf:8b:27:06:79:49:15:35:b1:e6:b2:6f:56:f1:a1:50:13:
         57:47:cb:39:38:af:69:77:cc:7f:d2:5a:2e:80:db:15:6d:c2:
         43:45:2c:03:98:e7:d3:16:a7:64:51:da:5a:01:f1:7f:f3:f9:
         3d:22:43:a3:d3:ee:d9:62:cc:d0:b3:3f:aa:98:87:38:c3:88:
         20:55:27:52:97:c1:ad:1b:87:41:a0:75:ed:d4:a5:e2:e5:95:
         94:f8:a4:42:9b:65:e1:6b:ad:89:80:c5:31:01:2c:58:0a:5f:
         76:dc:71:18:3a:ef:39:46:dc:dc:33:e0:e4:86:72:01:7d:72:
         f4:78:e2:3a:cd:e5:fc:b6:44:4f:a1:ba:f8:d0:51:8a:4e:16:
         58:b7:c0:dc:d0:36:31:78:f0:74:c4:32:ed:94:78:11:2c:20:
         ca:58:98:1c:77:30:8d:8d:e1:af:15:98:d6:63:c6:f7:d0:c7:
         17:99:0e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:50:10 2025 by rpki-client