Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/34352e3136322e3138342e302f32322d3232203d3e203136363239.roa
File:                     34352e3136322e3138342e302f32322d3232203d3e203136363239.roa (raw, json)
Hash identifier:          9FgIXboGkvN5Z+l9s4YtLYx0XHCq9Gvbt931vivKTQY=
Subject key identifier:   60:FF:D0:97:BD:40:90:F0:E2:B7:03:74:BC:44:A9:37:5C:FC:86:81
Certificate issuer:       /CN=E9BD71B0FDCC660140582C799E734F25C80A1196
Certificate serial:       35510B0CE2822AFFAEA2DBB9058E21D72B9CFBE7
Authority key identifier: E9:BD:71:B0:FD:CC:66:01:40:58:2C:79:9E:73:4F:25:C8:0A:11:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/34352e3136322e3138342e302f32322d3232203d3e203136363239.roa
Signing time:             Sat 14 Jun 2025 01:22:14 +0000
ROA not before:           Sat 14 Jun 2025 01:17:14 +0000
ROA not after:            Sat 13 Jun 2026 01:22:14 +0000
asID:                     16629
IP address blocks:        45.162.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:51:0b:0c:e2:82:2a:ff:ae:a2:db:b9:05:8e:21:d7:2b:9c:fb:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9BD71B0FDCC660140582C799E734F25C80A1196
        Validity
            Not Before: Jun 14 01:17:14 2025 GMT
            Not After : Jun 13 01:22:14 2026 GMT
        Subject: CN=60FFD097BD4090F0E2B70374BC44A9375CFC8681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:19:42:6d:bf:26:d1:20:5c:a9:ed:26:be:84:
                    fe:76:9f:39:31:bd:a9:b8:38:4e:40:ab:d9:81:4a:
                    9e:e5:63:a5:63:0a:04:f9:10:63:fb:ac:76:16:22:
                    1a:07:67:a4:e8:20:39:dd:1b:d3:66:7c:cb:56:3c:
                    e0:a1:db:0e:a2:cc:70:38:32:19:3c:f1:82:54:b0:
                    40:a8:01:aa:21:a4:37:8b:9b:85:57:08:b0:9e:48:
                    11:17:63:aa:bb:ae:bc:cb:2e:d1:7f:88:24:1c:f8:
                    ff:59:38:cd:78:93:80:33:42:a2:ed:9a:f1:29:69:
                    8d:42:9b:25:d0:a0:23:66:c2:b5:0e:35:89:d8:db:
                    fa:b0:f1:18:53:81:fa:a9:8c:07:95:00:32:29:9a:
                    2f:b4:58:0b:ef:3c:94:5d:ab:3d:c6:04:4c:e0:98:
                    b9:66:19:e5:c8:f7:55:55:da:a8:21:58:ee:a3:17:
                    e8:91:cf:5c:72:4e:7f:6e:f0:f4:78:46:7a:46:5d:
                    1f:05:3c:1b:41:c0:c0:50:65:08:cd:b0:e7:b6:a7:
                    0a:35:1c:f9:59:84:77:6d:ff:ab:95:88:53:5f:39:
                    97:f7:76:47:23:22:02:e3:7b:7c:f8:87:de:a9:4b:
                    59:a7:48:bd:f3:c5:d3:84:56:d6:7b:27:ac:83:9e:
                    94:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FF:D0:97:BD:40:90:F0:E2:B7:03:74:BC:44:A9:37:5C:FC:86:81
            X509v3 Authority Key Identifier:
                keyid:E9:BD:71:B0:FD:CC:66:01:40:58:2C:79:9E:73:4F:25:C8:0A:11:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/E9BD71B0FDCC660140582C799E734F25C80A1196.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9BD71B0FDCC660140582C799E734F25C80A1196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4050DA84FD89C784DFBC3874DD064A3BC42840D9CA79DF7F936DD8FA82C11FB1/0/34352e3136322e3138342e302f32322d3232203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:2e:fe:a4:f5:e3:16:7a:50:3d:30:5a:69:6c:8d:b4:c8:cb:
         e3:31:dd:a1:b3:55:7d:4d:2a:10:c0:ee:81:58:54:23:ab:46:
         f7:71:21:72:07:fc:f2:96:f3:16:dd:66:47:70:39:8e:ae:f1:
         4f:b3:97:61:2f:3b:d2:c3:e0:05:5d:79:09:a0:18:f9:27:aa:
         bc:57:b3:d9:91:cf:34:ca:0f:78:a6:ae:ac:05:ac:f6:44:55:
         5d:35:27:ce:30:17:88:79:ea:43:0a:9a:be:a8:11:d8:ae:ae:
         f0:68:ef:61:9c:1d:ee:fd:fc:98:d2:b6:d4:3e:af:61:7f:5c:
         00:e3:a6:ad:84:f0:5d:96:b7:e0:74:62:27:69:e7:a4:43:af:
         1f:36:21:91:e9:dd:6a:dd:57:64:97:f1:33:c1:02:fb:33:10:
         c8:00:02:b8:6a:bb:5d:0c:be:7a:27:14:b3:66:8b:57:11:87:
         0a:32:3d:e6:2a:af:16:9f:7e:5d:cb:07:43:67:52:de:e8:0c:
         97:dd:89:22:99:29:55:48:d4:dd:15:fa:ff:e5:c7:53:7e:28:
         51:3a:e3:1f:f0:f4:2f:35:c8:b2:4e:44:a6:30:03:e1:fa:0d:
         18:6c:2e:3a:91:ca:9e:78:7d:b0:a0:47:8d:8a:2d:dd:c0:47:
         b6:86:ba:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:04:17 2025 by rpki-client