Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/34352e3138362e3133362e302f32322d3235203d3e20323639383133.roa
File:                     34352e3138362e3133362e302f32322d3235203d3e20323639383133.roa (raw, json)
Hash identifier:          hHMeaV4VoAmXafduJSsONi6p4lOLcW08DiAmGPb9lWE=
Subject key identifier:   77:63:4E:BE:2A:FD:64:40:47:65:2E:39:FD:24:08:86:16:8B:BA:E7
Certificate issuer:       /CN=1543ECDEE164252425B06E8AA0858149FE72AFA3
Certificate serial:       706B3C4DC8D83800364975C58F530FEDADD4530F
Authority key identifier: 15:43:EC:DE:E1:64:25:24:25:B0:6E:8A:A0:85:81:49:FE:72:AF:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/34352e3138362e3133362e302f32322d3235203d3e20323639383133.roa
Signing time:             Thu 08 May 2025 18:18:06 +0000
ROA not before:           Thu 08 May 2025 18:13:06 +0000
ROA not after:            Thu 07 May 2026 18:18:06 +0000
asID:                     269813
IP address blocks:        45.186.136.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6b:3c:4d:c8:d8:38:00:36:49:75:c5:8f:53:0f:ed:ad:d4:53:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1543ECDEE164252425B06E8AA0858149FE72AFA3
        Validity
            Not Before: May  8 18:13:06 2025 GMT
            Not After : May  7 18:18:06 2026 GMT
        Subject: CN=77634EBE2AFD644047652E39FD240886168BBAE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cd:93:70:57:00:d0:fd:18:09:96:7e:20:97:
                    ee:45:f0:c5:04:c9:a4:fa:f5:a2:5e:c3:23:d2:56:
                    95:26:57:62:9a:30:a7:08:34:e6:68:96:96:a1:83:
                    13:c3:3b:e0:54:ca:80:be:3a:80:03:88:62:6e:bc:
                    63:4b:75:80:2c:b8:e9:e5:96:59:9f:00:2a:68:25:
                    6f:6a:50:8b:37:01:00:09:57:b9:54:17:53:13:b8:
                    e2:5f:c9:53:6d:df:13:93:3c:74:9e:94:77:3a:a7:
                    5d:23:1a:ac:6e:b3:c7:54:6e:fa:91:39:1a:f1:0f:
                    72:a2:c5:9c:81:07:4f:79:8c:56:fd:4d:b9:76:f7:
                    41:d3:8c:53:b5:6a:8d:25:2c:94:75:b8:43:c3:0c:
                    2c:bf:7d:f8:58:7d:86:73:cf:42:49:98:c7:da:3b:
                    85:74:f7:75:41:28:8c:07:79:c1:5f:1f:27:dd:f3:
                    15:05:7a:8f:93:04:d8:cf:c0:5c:b4:6e:f1:51:51:
                    86:ce:85:a6:91:90:c1:6a:b3:5a:08:fc:b7:5d:78:
                    7c:74:4b:15:06:cc:eb:a2:3c:1a:01:fd:06:c4:62:
                    fe:18:d1:ea:cc:73:f7:75:63:ca:8e:e3:cc:ae:6a:
                    b7:c7:ab:2f:cb:a0:27:8c:fe:07:84:db:fe:97:68:
                    b2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:63:4E:BE:2A:FD:64:40:47:65:2E:39:FD:24:08:86:16:8B:BA:E7
            X509v3 Authority Key Identifier:
                keyid:15:43:EC:DE:E1:64:25:24:25:B0:6E:8A:A0:85:81:49:FE:72:AF:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/34352e3138362e3133362e302f32322d3235203d3e20323639383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:6c:03:ad:7d:ec:57:02:e2:98:45:92:43:d8:10:fd:38:4d:
         23:24:14:a0:66:16:e0:39:b1:f5:de:c6:6e:05:ed:c8:84:88:
         b9:bc:00:c5:84:fd:39:ad:60:97:f2:9b:ff:db:26:4d:1d:65:
         82:6d:3f:80:89:60:5a:27:ac:2e:96:65:b0:34:13:1d:c2:63:
         65:b3:c7:27:08:f5:ff:70:0d:03:a6:db:56:39:a1:85:1d:9e:
         00:d4:1f:2d:6e:47:b5:70:ab:87:0b:5f:aa:92:38:ae:88:9e:
         20:b4:ab:43:71:73:59:63:f1:2e:02:ef:3d:b4:12:f0:2b:71:
         60:4a:58:c7:4b:7a:e7:93:39:df:7c:5a:84:ae:61:99:4a:57:
         9d:f8:f2:fc:39:0e:58:83:55:cc:bb:16:96:14:35:3c:34:69:
         6a:5c:de:a8:0e:d1:f3:24:85:21:ea:13:f2:c8:1e:c5:34:b6:
         ba:63:41:b4:12:c4:62:20:55:62:f1:24:c5:fb:af:8e:15:ce:
         5c:fd:d4:1d:cc:58:0a:e8:15:32:23:b7:23:0e:c0:0e:62:b1:
         de:4b:87:18:60:04:86:aa:35:de:fe:2e:cb:9a:79:0d:2c:bd:
         db:48:dd:53:1f:0d:c0:ce:64:c1:6c:54:39:66:c4:89:61:cd:
         67:ae:43:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 07:50:53 2025 by rpki-client