Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/34352e3136362e3130382e302f32332d3234203d3e20333936333536.roa
File:                     34352e3136362e3130382e302f32332d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          wuvtuFTXPW6JI5dvLWtcO6CBL4dz3URHXoT6m34USFo=
Subject key identifier:   5C:CC:41:22:38:A7:AA:15:25:BC:CD:D2:13:CB:DA:1D:56:40:FA:B9
Certificate issuer:       /CN=2E53C3E1222D746A5EEABB43EDFC93BA4037CACD
Certificate serial:       51F8374F11E2C85B8DCE0BD4AE7D1BCF0FFE0ABA
Authority key identifier: 2E:53:C3:E1:22:2D:74:6A:5E:EA:BB:43:ED:FC:93:BA:40:37:CA:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/34352e3136362e3130382e302f32332d3234203d3e20333936333536.roa
Signing time:             Tue 04 Feb 2025 18:31:51 +0000
ROA not before:           Tue 04 Feb 2025 18:26:51 +0000
ROA not after:            Tue 03 Feb 2026 18:31:51 +0000
asID:                     396356
IP address blocks:        45.166.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f8:37:4f:11:e2:c8:5b:8d:ce:0b:d4:ae:7d:1b:cf:0f:fe:0a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E53C3E1222D746A5EEABB43EDFC93BA4037CACD
        Validity
            Not Before: Feb  4 18:26:51 2025 GMT
            Not After : Feb  3 18:31:51 2026 GMT
        Subject: CN=5CCC412238A7AA1525BCCDD213CBDA1D5640FAB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ed:38:50:57:ab:2d:ad:6e:85:65:f2:09:2b:
                    66:3a:13:a9:e9:bf:a5:aa:b8:ad:39:24:c0:c5:a2:
                    ab:93:4a:5e:7c:80:74:e2:cd:b0:5f:cb:69:85:d0:
                    3b:07:8c:ae:9a:4d:09:59:94:86:a8:ba:bb:82:02:
                    d3:a3:5a:fe:42:9c:7c:1d:3a:c3:10:30:6f:3a:c0:
                    9b:7e:cf:f1:9b:f1:e1:6f:34:49:47:e1:43:ba:69:
                    9a:fa:85:40:28:ba:c9:63:94:3f:0b:73:18:ec:91:
                    19:dc:51:ef:1e:fb:dc:2c:0c:7e:ec:5b:c1:eb:06:
                    a6:c1:07:81:cb:96:84:08:13:ed:52:38:09:cd:ff:
                    3e:62:c0:0f:35:e6:0d:85:ef:60:93:e6:ea:ea:46:
                    39:3b:3e:20:b0:ec:9e:c9:bb:73:18:96:9a:7d:91:
                    b3:bb:4a:13:5a:9b:1e:e0:a2:a8:95:e1:95:47:7d:
                    68:40:15:aa:43:54:24:c7:55:c2:fd:4f:bf:d9:c2:
                    4b:33:12:59:ab:96:1c:19:6f:ba:26:6b:c7:3b:f4:
                    ce:c0:fb:d9:ac:d1:32:38:86:39:e6:eb:ea:28:d0:
                    ed:d9:48:59:8a:94:db:11:7f:b5:6c:b6:a4:dc:19:
                    e8:22:91:52:f5:20:1d:f1:51:9f:fb:ee:84:ed:91:
                    82:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CC:41:22:38:A7:AA:15:25:BC:CD:D2:13:CB:DA:1D:56:40:FA:B9
            X509v3 Authority Key Identifier:
                keyid:2E:53:C3:E1:22:2D:74:6A:5E:EA:BB:43:ED:FC:93:BA:40:37:CA:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/34352e3136362e3130382e302f32332d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:0a:07:3f:0e:ae:89:34:41:c3:50:6d:03:32:57:f2:97:91:
         df:66:86:6e:6b:fd:4d:43:8f:14:c2:37:b5:cc:e9:ef:84:4b:
         1a:e3:9c:c6:e7:40:9e:42:e4:e1:0f:33:2d:f1:bc:d7:4d:3d:
         3c:c6:f3:3e:e9:be:af:23:25:93:28:b7:e8:f9:bb:4e:89:74:
         0d:13:06:fd:54:c1:cd:97:ee:e9:82:51:2c:01:14:14:95:1e:
         12:f3:bf:53:c1:6a:2c:ee:69:30:d7:71:fa:56:6d:51:31:d9:
         47:cd:af:61:0b:08:7d:94:cd:e8:f1:6a:aa:7e:67:1b:ac:47:
         70:df:33:3f:21:85:b5:be:6d:2e:64:2b:92:ad:0a:2e:5b:5f:
         b1:34:3e:b6:33:bd:6e:30:a4:f5:2e:43:6e:3f:18:a5:ff:2c:
         20:3c:5b:fb:12:7a:20:e8:0f:89:13:e4:d7:8c:90:1a:02:58:
         08:15:ab:d5:de:60:0f:0d:b4:0c:83:71:1c:19:48:75:92:85:
         11:55:ca:2c:d1:24:2e:a1:64:b4:24:58:35:45:b9:aa:5d:4d:
         6d:fe:1c:57:9c:fe:9b:44:5e:8d:d9:06:91:c0:8c:4f:4a:70:
         96:c4:05:48:df:0c:41:91:4f:41:aa:24:43:05:ae:b2:6b:61:
         a1:0d:63:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:24:32 2025 by rpki-client