Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3137302e302f32342d3234203d3e20323636363934.roa
File:                     34352e3232392e3137302e302f32342d3234203d3e20323636363934.roa (raw, json)
Hash identifier:          4NCRG5DX4l85s4WeOugAdiGc5BKn+3uVpE92fn0Snxg=
Subject key identifier:   E1:02:65:84:B8:B3:C1:12:C4:05:63:35:E3:9B:A3:2D:E7:08:48:29
Certificate issuer:       /CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
Certificate serial:       4B1118D60C25F35483F53C0B03F772BD7903F4C4
Authority key identifier: F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3137302e302f32342d3234203d3e20323636363934.roa
Signing time:             Tue 29 Apr 2025 18:17:09 +0000
ROA not before:           Tue 29 Apr 2025 18:12:09 +0000
ROA not after:            Tue 28 Apr 2026 18:17:09 +0000
asID:                     266694
IP address blocks:        45.229.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 13:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:11:18:d6:0c:25:f3:54:83:f5:3c:0b:03:f7:72:bd:79:03:f4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
        Validity
            Not Before: Apr 29 18:12:09 2025 GMT
            Not After : Apr 28 18:17:09 2026 GMT
        Subject: CN=E1026584B8B3C112C4056335E39BA32DE7084829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c7:5f:5b:46:79:96:a1:7a:99:36:2b:73:77:
                    66:69:b5:a2:98:af:a9:77:97:5b:f2:93:15:a5:20:
                    e8:a0:21:c1:f4:c7:b0:10:d6:1e:58:a1:bc:de:1d:
                    f2:03:0b:72:e7:ad:b3:f3:20:96:28:20:f1:3c:3d:
                    1a:31:14:a3:09:85:be:94:cb:07:63:b2:45:d2:69:
                    2c:12:7c:6c:43:6d:24:fa:b3:70:80:c1:2f:0a:bd:
                    a6:78:ea:72:cf:36:66:e3:37:ae:86:5c:ce:08:87:
                    a9:27:d1:49:45:4d:3c:53:35:6e:cf:a9:85:f0:08:
                    33:e8:da:f8:1c:7c:32:bf:03:14:c9:b8:44:a9:b1:
                    83:56:9f:43:8b:79:40:ce:2a:c2:df:a2:96:4b:20:
                    b8:a4:a3:32:ce:72:7a:e4:f0:38:cd:ed:48:51:07:
                    ea:5d:22:ef:e6:c4:6a:0a:2a:c0:a8:e7:c7:73:a4:
                    4b:aa:22:3b:c0:40:c2:ae:10:c7:f2:ce:71:6a:c9:
                    5b:60:a8:1b:15:39:c5:6a:ff:d0:3b:ea:c4:d0:4a:
                    bf:7b:2c:ec:35:ab:96:7e:87:7e:e6:f5:05:12:fd:
                    83:ee:13:1f:93:c0:b6:3a:ea:f6:67:23:c6:24:e1:
                    c6:20:df:7a:ad:d4:df:23:e1:cd:59:3f:3f:85:74:
                    71:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:02:65:84:B8:B3:C1:12:C4:05:63:35:E3:9B:A3:2D:E7:08:48:29
            X509v3 Authority Key Identifier:
                keyid:F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3137302e302f32342d3234203d3e20323636363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:9c:f4:fa:2e:18:b4:59:c6:9e:2f:ae:dc:27:03:64:f3:bb:
         06:4c:c6:d6:6a:cb:a9:49:35:d0:f4:63:11:d7:2f:1c:b1:60:
         50:d2:d5:ac:4a:51:71:e4:7c:f9:78:74:06:2c:c6:0c:dd:a8:
         53:b1:76:9e:eb:69:70:c4:ae:03:e2:08:c8:2b:c9:1c:04:e6:
         c6:4d:c9:98:18:cb:00:04:d5:c2:1e:5b:cc:41:21:f5:f2:82:
         6c:b3:e4:fe:fd:a5:35:2a:c6:f9:1f:c6:59:1d:c7:a8:d9:d0:
         28:e9:57:49:dc:f4:83:25:3b:38:00:88:f3:1a:d1:c4:8a:b4:
         2a:68:f2:c1:39:55:ab:8a:cc:a6:0a:ec:b5:29:ca:98:b4:8a:
         8d:fc:9a:5f:52:28:56:0d:12:e2:dc:bb:4e:09:02:06:8f:99:
         68:7e:7a:70:a2:93:1b:c9:e0:d3:fc:4d:0c:9f:11:78:d4:29:
         ae:ab:81:39:48:12:1e:0e:8f:1a:dc:5f:ab:53:bc:2a:c9:51:
         2c:1d:bd:92:f3:c6:04:87:77:4a:cf:d5:8a:09:8b:67:28:b1:
         1f:6e:23:05:19:2a:29:71:9e:ec:c0:d7:62:3b:f0:65:dd:0a:
         a8:db:5e:90:90:a6:69:cc:05:a9:52:9a:25:61:57:c5:0e:c8:
         8b:2c:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:06:23 2025 by rpki-client