Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/34352e3137392e3136362e302f32332d3233203d3e20323639373330.roa
File:                     34352e3137392e3136362e302f32332d3233203d3e20323639373330.roa (raw, json)
Hash identifier:          hbuR8tuzrDG6kwToA0Fd6s2vooS0eJVN0RTt8rKhxO0=
Subject key identifier:   F5:F5:D0:22:45:F3:16:75:3D:B7:0F:54:B9:6B:B4:5A:3A:65:4C:42
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       A42BC45F3E4CEDFF2592863B385F61A5A21CE0
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/34352e3137392e3136362e302f32332d3233203d3e20323639373330.roa
Signing time:             Tue 03 Jun 2025 17:50:00 +0000
ROA not before:           Tue 03 Jun 2025 17:45:00 +0000
ROA not after:            Tue 02 Jun 2026 17:50:00 +0000
asID:                     269730
IP address blocks:        45.179.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 03:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a4:2b:c4:5f:3e:4c:ed:ff:25:92:86:3b:38:5f:61:a5:a2:1c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jun  3 17:45:00 2025 GMT
            Not After : Jun  2 17:50:00 2026 GMT
        Subject: CN=F5F5D02245F316753DB70F54B96BB45A3A654C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:71:67:fb:e9:5f:e9:56:cb:47:d7:ba:f0:0d:
                    1d:7f:5c:70:f0:d5:f7:5f:63:57:46:44:b5:f1:67:
                    52:78:89:8c:17:af:5a:99:98:fa:b8:bd:6a:b8:1a:
                    79:3f:63:fe:fb:37:c2:ad:45:d4:65:3e:95:2e:4a:
                    34:fd:52:d1:13:b1:db:77:aa:83:a4:61:50:31:03:
                    7b:c1:fb:c0:89:7b:d2:db:b5:4d:e1:76:44:f5:2b:
                    4b:95:ea:39:06:85:df:9d:9a:a4:a1:ef:c7:4a:84:
                    ef:96:5e:4f:fc:75:c7:2d:58:fa:15:cf:33:8e:7e:
                    9d:46:f1:f7:8e:fe:1b:c0:b2:67:92:2c:8f:0b:a5:
                    36:b7:26:5c:f6:6c:15:93:80:5c:22:7e:12:2b:39:
                    36:fe:66:98:26:a4:cc:33:b0:e6:4f:45:d6:d1:45:
                    0a:03:59:e3:b7:21:19:d2:50:be:6b:49:d6:56:fd:
                    d1:18:dc:72:12:da:41:5d:9a:ce:57:ef:c4:13:5e:
                    25:44:e3:34:12:f9:26:74:8e:54:9c:c0:2f:0c:8f:
                    29:ce:91:f3:3e:df:43:08:85:c0:0b:65:f6:30:0a:
                    90:81:5a:a6:fe:6f:15:1f:46:e8:d9:71:40:b8:59:
                    b4:23:e0:1e:cc:c3:f6:ed:b3:21:bd:69:d6:c1:09:
                    c0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F5:D0:22:45:F3:16:75:3D:B7:0F:54:B9:6B:B4:5A:3A:65:4C:42
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/34352e3137392e3136362e302f32332d3233203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:76:26:e4:04:6b:e2:17:7b:29:9b:c7:2d:65:fa:87:f8:53:
         39:25:99:2c:8b:14:f4:e3:bd:6d:18:6c:5c:5d:42:e4:ed:7c:
         5f:83:aa:89:fe:44:4f:eb:a2:e2:e9:2a:fa:54:83:28:c5:5e:
         ec:01:90:98:be:0e:f2:cf:61:1d:8e:c2:a0:c1:89:1d:27:58:
         f8:97:c2:c3:79:24:77:22:1a:9a:1c:da:49:a1:c1:00:8d:98:
         da:2f:d1:0f:ce:ee:5d:2e:72:58:45:6d:0f:d7:5e:02:9c:fe:
         c9:ff:c8:c3:e2:df:7d:61:db:cc:27:d5:d0:23:a3:a2:2e:9e:
         47:d3:9e:bb:80:0f:c8:34:da:55:9c:b3:a1:89:ee:7c:f3:b4:
         8e:b3:42:74:b5:cc:a4:72:28:3e:80:0d:d0:41:8e:47:4b:41:
         5e:41:f8:a2:80:5d:c5:2e:c8:66:f4:45:1e:cb:b7:e5:62:a2:
         e3:7e:71:c9:61:5a:73:15:c8:d1:54:ab:fe:33:1e:60:af:46:
         65:bb:1d:0f:45:bc:49:d6:60:f7:2a:6a:d1:d7:9c:fb:da:4c:
         4a:cc:dc:99:f6:10:3a:ff:63:1a:d6:7e:ec:2a:8b:c9:50:ed:
         47:c0:97:5c:30:31:fd:86:3f:35:51:23:2c:1e:d2:6d:f5:da:
         1b:4e:04:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 01:46:39 2025 by rpki-client