Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/34352e3233372e3137312e302f32342d3234203d3e2032393134.roa
File:                     34352e3233372e3137312e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier:          9AjJudTSjMGqqKcKKmgz8rAwBOs+rqLcSUhbyRB5riw=
Subject key identifier:   3B:4F:BF:F5:DE:42:9C:23:05:79:81:F5:E4:34:46:E6:30:82:1B:28
Certificate issuer:       /CN=79791EF384555781F9129D52AFAD809B3BE307E0
Certificate serial:       196EB08EEE3CA8C4D53E9F367E76C3ED4BC991E7
Authority key identifier: 79:79:1E:F3:84:55:57:81:F9:12:9D:52:AF:AD:80:9B:3B:E3:07:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79791EF384555781F9129D52AFAD809B3BE307E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/34352e3233372e3137312e302f32342d3234203d3e2032393134.roa
Signing time:             Thu 24 Apr 2025 16:10:00 +0000
ROA not before:           Thu 24 Apr 2025 16:05:00 +0000
ROA not after:            Thu 23 Apr 2026 16:10:00 +0000
asID:                     2914
IP address blocks:        45.237.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/79791EF384555781F9129D52AFAD809B3BE307E0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/79791EF384555781F9129D52AFAD809B3BE307E0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79791EF384555781F9129D52AFAD809B3BE307E0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6e:b0:8e:ee:3c:a8:c4:d5:3e:9f:36:7e:76:c3:ed:4b:c9:91:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79791EF384555781F9129D52AFAD809B3BE307E0
        Validity
            Not Before: Apr 24 16:05:00 2025 GMT
            Not After : Apr 23 16:10:00 2026 GMT
        Subject: CN=3B4FBFF5DE429C23057981F5E43446E630821B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e8:93:14:66:d8:32:41:e1:fa:7c:fa:7d:2f:
                    20:e4:c3:a0:51:b2:9b:94:37:b5:da:c4:e0:30:68:
                    fd:d9:55:67:c3:30:63:fa:93:b8:4d:c2:c1:e2:43:
                    09:c1:20:49:ca:56:83:ce:5b:74:91:ff:5d:6c:98:
                    8f:34:09:57:32:8b:38:47:c3:1a:a1:e9:da:cf:85:
                    c6:5f:bf:3c:b2:01:1e:94:a9:b8:ce:fc:24:d1:b2:
                    60:5c:fe:0a:db:8f:0c:43:ac:87:c7:0e:cb:95:0e:
                    1a:b7:44:d3:c0:08:27:d5:c2:35:94:17:f3:be:6c:
                    e0:31:f9:06:ec:19:5d:10:24:b5:69:4e:4e:5d:78:
                    79:0c:5c:4d:9a:03:4e:bf:92:42:4f:c4:cc:21:78:
                    ca:90:2c:bc:8d:0f:4f:0b:96:b0:68:c5:36:b1:5f:
                    d8:f3:61:7b:4e:55:bc:07:d6:fd:73:39:83:b2:d3:
                    c6:93:04:c5:1a:e1:87:b9:94:bf:6d:e1:be:9b:0b:
                    80:7a:e8:3b:46:5e:00:b3:56:ad:00:33:df:b2:32:
                    43:bd:cd:ee:7e:f0:34:ea:bc:49:25:c7:60:5c:79:
                    2f:a9:2c:e2:68:ed:78:18:03:0c:39:e0:78:ab:74:
                    26:2b:a2:47:69:7e:34:07:50:9d:39:f7:60:ef:30:
                    29:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4F:BF:F5:DE:42:9C:23:05:79:81:F5:E4:34:46:E6:30:82:1B:28
            X509v3 Authority Key Identifier:
                keyid:79:79:1E:F3:84:55:57:81:F9:12:9D:52:AF:AD:80:9B:3B:E3:07:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/79791EF384555781F9129D52AFAD809B3BE307E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79791EF384555781F9129D52AFAD809B3BE307E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/34352e3233372e3137312e302f32342d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:e5:ab:04:54:8f:31:28:f1:ac:7b:4d:95:55:51:5b:f7:9b:
         0e:4c:20:23:8a:46:7a:95:31:5e:9f:0c:04:eb:e8:6c:18:64:
         34:77:66:60:40:17:b2:57:14:8f:70:8c:c9:a6:47:84:df:ed:
         d9:1a:0c:3e:6d:69:2b:df:81:40:d1:87:96:69:9f:51:6d:62:
         95:6a:f4:5f:8b:e9:bb:64:ac:96:40:4e:ea:b6:e7:12:88:68:
         5c:62:78:78:62:90:9a:74:9c:57:d3:fe:cd:82:b8:02:67:5f:
         0f:13:f9:ce:a3:9f:40:f2:33:3f:43:bc:5f:b9:83:6b:51:1a:
         7f:2b:11:e6:f0:33:17:83:c3:43:ff:a6:a2:4e:4e:81:9d:ff:
         69:db:72:6e:03:c4:9e:d9:84:2a:56:00:bd:e1:07:bd:6b:0e:
         35:86:e7:ed:67:c3:1b:7c:b1:17:0c:9d:72:76:e5:01:85:fe:
         35:1d:8d:a8:ce:a5:9e:0c:c9:e7:89:96:f7:7b:d3:6f:15:4f:
         ad:f6:1d:e4:40:36:6c:24:99:f5:c7:1f:6e:26:02:7a:ce:94:
         9b:05:8e:0c:52:65:cf:45:34:c7:93:7a:65:06:3b:bf:7b:8b:
         92:8b:24:92:b0:2d:1a:19:c7:85:d1:c3:b9:aa:33:f7:d4:ab:
         85:f0:75:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:25:30 2025 by rpki-client