Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e302e302f32342d3234203d3e203139353531.roa
File:                     34352e3136322e302e302f32342d3234203d3e203139353531.roa (raw, json)
Hash identifier:          zs2axpL3F5zrPV1WTmuQNpLt6YlBAYzz6OwIvsd0OtM=
Subject key identifier:   39:5D:7B:65:92:D2:45:3C:34:68:A9:52:E5:74:E7:42:DC:91:D0:15
Certificate issuer:       /CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
Certificate serial:       6CAD800077B284CED07451A1F0FFD8DBB2093AD9
Authority key identifier: E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e302e302f32342d3234203d3e203139353531.roa
Signing time:             Wed 14 May 2025 22:18:58 +0000
ROA not before:           Wed 14 May 2025 22:13:58 +0000
ROA not after:            Wed 13 May 2026 22:18:58 +0000
asID:                     19551
IP address blocks:        45.162.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ad:80:00:77:b2:84:ce:d0:74:51:a1:f0:ff:d8:db:b2:09:3a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
        Validity
            Not Before: May 14 22:13:58 2025 GMT
            Not After : May 13 22:18:58 2026 GMT
        Subject: CN=395D7B6592D2453C3468A952E574E742DC91D015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:28:f3:3c:3b:70:43:7a:09:12:7e:2c:e1:
                    36:d9:75:37:24:72:30:58:f8:dc:0f:cb:ac:c0:32:
                    d2:a7:f1:c0:b2:dc:05:ce:11:be:45:ce:ec:3c:8e:
                    c8:46:7e:96:c7:89:6f:a3:80:16:0c:da:3e:5b:03:
                    f0:0f:bc:c6:66:d5:72:0f:3c:95:e9:47:ae:09:8b:
                    f4:f8:2e:a3:8c:84:b3:a6:5d:6f:2e:11:d0:78:fa:
                    2e:7b:40:d9:39:ad:ad:1d:dd:44:d0:0f:97:df:29:
                    e3:5f:b9:11:c2:63:6d:c5:c0:96:5f:4d:6a:68:91:
                    98:11:b3:3f:f7:63:e3:46:f5:e3:1f:8a:48:09:c6:
                    a4:1b:84:62:84:8a:65:55:93:bf:20:d0:e6:29:18:
                    1e:cc:2b:36:6c:2d:ea:4b:ef:18:5c:59:18:64:63:
                    84:2c:77:d9:6f:3a:1f:39:07:33:50:a7:63:fe:06:
                    e3:f6:06:e8:f0:cd:91:9f:bb:de:79:e9:b3:8a:74:
                    96:b5:05:28:81:15:27:68:76:e0:fb:95:bb:1e:bc:
                    06:40:fa:3f:94:2c:3c:f6:7c:e2:09:04:8f:ad:b8:
                    b1:5b:f3:72:11:e9:28:c2:87:8f:14:ee:ed:7b:e6:
                    df:f8:a1:9a:ed:c3:cd:3e:2d:65:02:d2:40:ed:89:
                    82:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5D:7B:65:92:D2:45:3C:34:68:A9:52:E5:74:E7:42:DC:91:D0:15
            X509v3 Authority Key Identifier:
                keyid:E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e302e302f32342d3234203d3e203139353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ce:e5:b3:e4:2f:40:ee:d5:40:4c:08:f8:e9:ed:fe:da:13:
         de:84:c2:56:53:88:d6:e9:f8:c9:e8:b0:a7:89:a4:ef:f4:aa:
         04:a0:1e:43:76:e2:da:a1:c1:71:6f:09:ba:e0:98:9c:bb:f4:
         48:fd:f6:0c:18:6e:a9:9e:3a:8b:6a:93:d1:46:ed:cf:ea:4e:
         1d:17:f2:4f:77:76:09:63:42:9a:68:12:cd:97:d8:6a:3c:6e:
         6e:14:79:6e:0b:3a:99:69:6f:2f:d0:d7:7b:ce:0f:a2:6c:0e:
         04:fe:13:ae:58:e7:91:6f:56:4f:b7:ce:67:98:fc:e8:ae:ad:
         07:8d:c7:8c:16:3a:09:be:1f:01:22:f0:31:1d:94:54:4a:28:
         38:2d:20:69:ef:51:78:a0:ba:59:92:6c:53:a0:d4:33:a2:3b:
         c9:17:c5:71:fd:e7:27:a3:c1:8c:09:84:1d:3d:7e:35:b2:89:
         22:0f:a1:b4:18:ba:60:8b:cd:89:7d:cf:4e:8d:b0:c7:3d:ea:
         94:2e:67:45:5f:21:d9:e5:41:f9:4b:91:fc:44:a4:67:09:9d:
         04:a1:3c:32:2d:ee:c2:c9:b3:f2:a8:ec:12:ee:db:b1:b6:ac:
         e6:8e:00:23:71:54:f6:51:12:7c:09:ef:bf:02:ec:3e:74:23:
         2f:49:a0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:08:35 2025 by rpki-client