Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/34352e3233362e32382e302f32322d3234203d3e20323636383039.roa
File:                     34352e3233362e32382e302f32322d3234203d3e20323636383039.roa (raw, json)
Hash identifier:          dol81C9bzj45eRj+E755BzjPWOUlcw9Q1qcJfSr9JTs=
Subject key identifier:   34:84:39:25:DD:3B:8C:5A:EC:8F:20:F3:46:AF:90:99:69:A1:CB:A5
Certificate issuer:       /CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
Certificate serial:       3921821F25DCF028ADD550A43225B19989518112
Authority key identifier: 22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/34352e3233362e32382e302f32322d3234203d3e20323636383039.roa
Signing time:             Thu 01 May 2025 13:17:22 +0000
ROA not before:           Thu 01 May 2025 13:12:22 +0000
ROA not after:            Thu 30 Apr 2026 13:17:22 +0000
asID:                     266809
IP address blocks:        45.236.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 May 2025 01:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:21:82:1f:25:dc:f0:28:ad:d5:50:a4:32:25:b1:99:89:51:81:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
        Validity
            Not Before: May  1 13:12:22 2025 GMT
            Not After : Apr 30 13:17:22 2026 GMT
        Subject: CN=34843925DD3B8C5AEC8F20F346AF909969A1CBA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:73:52:93:2b:af:c5:8a:a1:ba:e9:9b:eb:10:
                    a6:88:5b:61:7a:ba:dc:26:18:d9:1b:72:13:a5:19:
                    94:e8:2e:77:af:79:7c:b4:91:75:98:45:44:b4:1d:
                    79:7a:38:a7:80:43:18:13:d3:c5:81:d6:5b:82:1d:
                    61:34:d4:2d:ed:ee:f5:b6:aa:da:68:2c:df:4e:85:
                    10:32:24:84:18:65:eb:b7:72:2d:98:31:c4:a2:55:
                    2a:a3:79:1f:0f:41:77:c1:05:88:63:61:dd:18:0a:
                    bb:f1:7c:61:47:60:ca:bf:15:ed:c0:85:07:79:73:
                    77:4e:ea:cf:da:1d:35:cb:b1:77:0e:97:f3:fd:b0:
                    f2:47:f5:a1:8c:2d:98:07:bb:54:55:7f:5c:48:28:
                    70:f6:2b:d9:27:28:fd:82:2f:42:d5:cf:db:c1:7e:
                    49:fc:86:82:0d:ce:0d:6a:40:2e:35:30:f2:b9:30:
                    fb:ec:0d:e9:1f:56:d7:c1:ce:bd:4d:7a:40:2b:0c:
                    52:9e:cd:63:2e:1b:af:4f:f0:fc:36:55:da:ed:e2:
                    60:cd:cf:34:1d:a6:38:56:ab:c4:17:26:76:00:29:
                    67:85:b7:9b:cf:d5:56:44:b4:67:d6:99:02:31:13:
                    d0:87:72:69:63:32:9c:c1:52:39:2b:68:63:19:91:
                    7f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:84:39:25:DD:3B:8C:5A:EC:8F:20:F3:46:AF:90:99:69:A1:CB:A5
            X509v3 Authority Key Identifier:
                keyid:22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/34352e3233362e32382e302f32322d3234203d3e20323636383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:24:47:35:ac:bd:af:31:d5:b1:87:3c:50:35:c1:9e:08:2b:
         f6:b4:b5:a9:a9:0d:e6:0f:c5:49:c6:a5:25:17:34:ef:f6:f0:
         de:c7:89:43:a5:69:24:99:d6:4b:e5:31:32:a3:2c:0a:5f:96:
         ed:e6:54:d3:47:21:4d:fa:7b:26:79:f5:45:b8:aa:d2:fa:95:
         46:cb:2b:77:6a:ce:84:36:b9:94:b0:32:de:bb:cd:79:ba:63:
         51:26:ee:76:68:b8:db:24:66:51:00:50:68:a6:60:1d:06:c8:
         57:7a:1c:79:e0:a8:a9:93:8b:17:6e:a2:86:1d:0a:05:95:c3:
         09:50:04:fd:9e:90:1d:2e:fe:72:91:c8:3e:7a:45:b8:4d:9a:
         12:bd:0c:e9:ab:4f:4e:25:c2:06:9f:79:62:77:68:88:be:4c:
         20:5d:ff:bd:0a:3f:9f:b6:b3:96:cd:e4:e9:f5:c5:da:9f:63:
         df:96:fe:58:a0:12:7b:58:5d:be:1b:f9:3f:cc:7c:82:2a:c8:
         0c:c9:db:f9:b4:03:af:cb:94:32:44:bc:71:28:30:57:9a:41:
         27:d5:58:2a:51:ea:09:a1:2b:f5:cb:97:95:f6:b4:f0:27:bd:
         3a:a9:1d:e2:9c:e4:45:47:0c:da:fc:1f:6b:ff:43:f4:46:87:
         31:0c:cc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:49:10 2025 by rpki-client