Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31382e302f32332d3233203d3e20323637373938.roa
File:                     34352e3137332e31382e302f32332d3233203d3e20323637373938.roa (raw, json)
Hash identifier:          +n7KLjyvsMOzuMQwQG4fK/CnRp3XSMTKNLD1fznUVgQ=
Subject key identifier:   E0:F4:CD:49:C5:2B:4C:EE:1D:C7:D2:33:3F:8A:9E:CF:71:0B:D0:D7
Certificate issuer:       /CN=378C4A178BD1442C656AA12825B69BFF74217F32
Certificate serial:       1BDF907DF7A07DCCC28789B0474B7E224BDD1840
Authority key identifier: 37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31382e302f32332d3233203d3e20323637373938.roa
Signing time:             Fri 18 Apr 2025 17:15:16 +0000
ROA not before:           Fri 18 Apr 2025 17:10:16 +0000
ROA not after:            Fri 17 Apr 2026 17:15:16 +0000
asID:                     267798
IP address blocks:        45.173.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 07 May 2025 18:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:df:90:7d:f7:a0:7d:cc:c2:87:89:b0:47:4b:7e:22:4b:dd:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378C4A178BD1442C656AA12825B69BFF74217F32
        Validity
            Not Before: Apr 18 17:10:16 2025 GMT
            Not After : Apr 17 17:15:16 2026 GMT
        Subject: CN=E0F4CD49C52B4CEE1DC7D2333F8A9ECF710BD0D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7e:36:fe:95:0d:de:28:83:3a:6a:b3:4e:5a:
                    f2:d8:7f:c4:fb:46:94:80:35:8e:a0:4b:16:cb:25:
                    24:15:67:de:16:99:43:1d:8f:63:90:c8:f8:df:60:
                    60:09:1d:ed:0b:06:2e:1a:44:1c:29:a2:7d:f5:ae:
                    d6:4a:db:cd:ec:4b:58:28:5f:97:d9:72:83:f5:71:
                    cf:36:62:c9:f8:49:e3:f2:37:22:84:cb:84:19:7e:
                    b8:f8:53:d0:9e:ce:77:00:20:d1:34:f6:95:8c:d5:
                    87:3c:66:f5:eb:a4:63:ce:5a:34:29:fe:00:60:2d:
                    54:6a:3a:28:0c:59:10:07:03:67:fa:47:80:02:f3:
                    cb:3e:46:d3:99:af:89:4f:a2:fb:18:2e:1f:4f:f1:
                    f6:97:b8:1a:f0:c5:14:2a:02:7f:cb:ae:c3:de:ba:
                    ce:7a:96:c1:98:c7:3b:d0:0e:49:45:d6:a0:0d:4d:
                    16:c8:33:1a:d1:c7:7b:ec:2f:15:a0:37:ff:5a:f5:
                    5b:18:4f:18:e1:e3:92:a8:73:b6:ac:f8:ab:37:f2:
                    64:88:c1:e3:62:21:5f:33:05:3f:2a:73:84:d8:e2:
                    ab:51:80:56:36:9c:be:35:4e:bb:ce:d7:b5:50:0d:
                    c7:c2:a8:7e:fc:bf:24:fa:4d:0d:53:23:d8:5b:98:
                    d7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F4:CD:49:C5:2B:4C:EE:1D:C7:D2:33:3F:8A:9E:CF:71:0B:D0:D7
            X509v3 Authority Key Identifier:
                keyid:37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31382e302f32332d3233203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:3f:29:77:67:24:ca:c4:d3:90:d8:6c:ea:a7:ec:f4:9a:39:
         0e:90:04:5f:8b:28:83:51:e4:3c:61:4d:08:60:78:11:50:70:
         26:6f:5f:b7:c9:30:2b:ba:0a:b3:d6:d4:15:66:b5:c0:30:ec:
         5b:40:ce:b6:99:9a:0b:c4:8e:cf:7d:5a:ae:6c:cb:58:0b:25:
         4f:97:5b:2a:c4:a1:d0:66:03:38:10:af:81:b7:bd:9b:e1:4d:
         4e:52:7e:13:8d:c7:dd:8d:07:68:a2:83:5e:80:fd:82:0f:41:
         5a:b9:20:2b:c3:8d:c0:dc:cf:16:85:39:0a:f3:1a:a6:96:3e:
         38:6c:56:18:71:a6:8e:e3:f1:1d:ad:61:bc:50:68:6e:03:af:
         51:40:64:2a:9c:b0:59:7f:e8:59:55:bd:37:c1:b9:61:a0:9f:
         32:36:a0:f7:67:5f:48:f8:66:53:ec:7c:2c:3c:2c:a6:16:17:
         cc:88:47:64:6b:22:eb:83:66:fb:82:1f:c4:02:ea:be:96:60:
         ca:ec:7b:d1:a6:92:2e:85:86:8f:6e:97:e5:1c:f0:ac:6b:e3:
         6e:f7:65:54:bd:9a:19:96:42:8d:f9:bc:d8:b7:ab:27:2a:d4:
         9b:b5:07:4d:1b:2d:50:96:7f:14:b4:56:6b:d2:aa:15:6c:bb:
         56:7a:bf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 06:20:31 2025 by rpki-client