Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2C9C83C9F607DEDF611C31EFAF96B4A456A2F7FA841B65D805F9FA43E9455B6/0/34352e352e39322e302f32322d3234203d3e203238343139.roa
File:                     34352e352e39322e302f32322d3234203d3e203238343139.roa (raw, json)
Hash identifier:          9QBni4RVsXayL+J0lRHrOHsTDA2ieiQzNK7jXqGRiLg=
Subject key identifier:   97:C3:A5:8B:DF:BA:EC:A3:7F:F4:E0:6A:A7:E1:DD:74:B8:E3:90:6D
Certificate issuer:       /CN=171B26221A897DECC8BEAC70E403D28E12F3ACD9
Certificate serial:       065BDBA120579219A3D72EEB074D6580BB7A5FE4
Authority key identifier: 17:1B:26:22:1A:89:7D:EC:C8:BE:AC:70:E4:03:D2:8E:12:F3:AC:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171B26221A897DECC8BEAC70E403D28E12F3ACD9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2C9C83C9F607DEDF611C31EFAF96B4A456A2F7FA841B65D805F9FA43E9455B6/0/34352e352e39322e302f32322d3234203d3e203238343139.roa
Signing time:             Wed 07 May 2025 13:30:00 +0000
ROA not before:           Wed 07 May 2025 13:25:00 +0000
ROA not after:            Wed 06 May 2026 13:30:00 +0000
asID:                     28419
IP address blocks:        45.5.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2C9C83C9F607DEDF611C31EFAF96B4A456A2F7FA841B65D805F9FA43E9455B6/0/171B26221A897DECC8BEAC70E403D28E12F3ACD9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2C9C83C9F607DEDF611C31EFAF96B4A456A2F7FA841B65D805F9FA43E9455B6/0/171B26221A897DECC8BEAC70E403D28E12F3ACD9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171B26221A897DECC8BEAC70E403D28E12F3ACD9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 May 2025 08:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5b:db:a1:20:57:92:19:a3:d7:2e:eb:07:4d:65:80:bb:7a:5f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171B26221A897DECC8BEAC70E403D28E12F3ACD9
        Validity
            Not Before: May  7 13:25:00 2025 GMT
            Not After : May  6 13:30:00 2026 GMT
        Subject: CN=97C3A58BDFBAECA37FF4E06AA7E1DD74B8E3906D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bd:ad:c3:b6:54:d1:0b:2c:11:59:c7:92:6c:
                    c8:0a:8f:d0:09:7e:69:59:4a:0b:b0:11:0d:2b:cb:
                    7b:a9:56:42:a2:cf:c3:e7:54:8a:61:71:b2:1c:57:
                    90:13:cd:ea:d6:b9:51:e6:33:27:3a:3f:0a:34:e2:
                    b5:74:a8:d6:0d:d1:6c:a7:a5:0a:98:78:94:1f:fe:
                    d1:a2:dc:b7:4b:b5:79:1e:a0:18:9b:ab:52:67:74:
                    70:a5:4c:fa:8a:1a:37:da:93:3f:d5:d6:81:42:5c:
                    20:f8:1c:3c:e0:de:32:4a:3c:51:d5:90:5f:71:04:
                    16:bd:0c:73:aa:33:5b:8c:0c:02:51:e5:7a:8a:1f:
                    98:67:fb:a4:cb:97:bc:54:bf:c6:66:c2:76:92:37:
                    c4:d5:66:4c:74:9e:ed:60:a6:09:09:32:3e:84:53:
                    a3:96:fa:04:2c:75:2c:5a:0a:8b:3c:ad:a1:e7:e4:
                    68:c4:47:57:f2:cb:4d:51:94:9a:4f:f8:58:d1:74:
                    52:40:61:54:c9:db:fd:a2:88:71:72:81:04:24:60:
                    34:5c:55:d9:ce:c1:e3:53:7a:a8:17:87:05:85:b6:
                    da:e4:36:c0:f2:19:41:20:38:1d:0c:0b:ef:6e:60:
                    67:16:7d:6b:43:e8:5d:4d:80:5d:fd:e1:1a:46:8e:
                    9c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C3:A5:8B:DF:BA:EC:A3:7F:F4:E0:6A:A7:E1:DD:74:B8:E3:90:6D
            X509v3 Authority Key Identifier:
                keyid:17:1B:26:22:1A:89:7D:EC:C8:BE:AC:70:E4:03:D2:8E:12:F3:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2C9C83C9F607DEDF611C31EFAF96B4A456A2F7FA841B65D805F9FA43E9455B6/0/171B26221A897DECC8BEAC70E403D28E12F3ACD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171B26221A897DECC8BEAC70E403D28E12F3ACD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2C9C83C9F607DEDF611C31EFAF96B4A456A2F7FA841B65D805F9FA43E9455B6/0/34352e352e39322e302f32322d3234203d3e203238343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:49:28:cb:7d:0b:60:08:91:17:f6:2f:a0:09:67:77:ef:29:
         91:ad:f8:1c:65:24:59:41:2e:25:e1:fa:74:1e:80:fa:15:45:
         5a:10:e2:8d:e5:67:b0:b6:0d:61:d3:f7:fb:ff:ec:58:03:7f:
         d1:b3:8b:1c:30:b5:40:4c:8d:9a:3c:f6:f9:fa:bd:31:6c:73:
         f4:d1:7f:4b:78:8e:47:3a:fc:1d:8f:4c:dc:b8:6c:bb:90:12:
         b4:26:51:23:ec:ed:14:df:5c:88:a6:a4:8b:0d:0b:94:64:d8:
         49:78:39:25:be:8c:48:b3:26:ee:7c:56:d6:27:88:70:5f:3d:
         c2:ca:8a:f2:72:f6:c4:44:3a:ef:6c:49:f7:e3:8d:79:5e:cc:
         06:29:32:aa:db:3c:5f:7a:d8:0e:95:7e:bc:c8:68:7c:ad:b4:
         b2:88:d5:d1:4c:51:ae:3d:e5:b2:84:7a:cc:40:21:6e:2f:9d:
         ef:83:54:bb:67:98:4c:20:49:87:c2:bd:a3:7a:54:75:e0:a7:
         05:a1:a5:21:d3:9f:6e:2d:a1:bb:71:8b:87:5a:fb:41:6d:45:
         34:84:cd:16:b2:6f:fa:44:1d:42:7a:d3:6f:ef:b4:de:f8:79:
         30:93:25:45:a0:25:59:17:e0:46:2d:8d:c0:25:5d:dd:53:25:
         4c:f3:51:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 06:10:34 2025 by rpki-client