Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/34352e3139312e34342e302f32342d3234203d3e2033383136.roa
File:                     34352e3139312e34342e302f32342d3234203d3e2033383136.roa (raw, json)
Hash identifier:          1Gx1d1EEBDy9yYXzHmYyHBmW5DSvKIDJHRl5aCb7PxE=
Subject key identifier:   4B:58:A8:04:F7:F9:7A:E7:CB:84:7B:53:9B:E5:6C:24:70:B4:9D:67
Certificate issuer:       /CN=C88E06CCAFF9CD22AA83801DCA00A03F91548D6E
Certificate serial:       705755BB4AA8FDDB6CB3EA6CDD9AACC9979B3C09
Authority key identifier: C8:8E:06:CC:AF:F9:CD:22:AA:83:80:1D:CA:00:A0:3F:91:54:8D:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/34352e3139312e34342e302f32342d3234203d3e2033383136.roa
Signing time:             Tue 17 Jun 2025 23:25:00 +0000
ROA not before:           Tue 17 Jun 2025 23:20:00 +0000
ROA not after:            Tue 16 Jun 2026 23:25:00 +0000
asID:                     3816
IP address blocks:        45.191.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 11:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:57:55:bb:4a:a8:fd:db:6c:b3:ea:6c:dd:9a:ac:c9:97:9b:3c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C88E06CCAFF9CD22AA83801DCA00A03F91548D6E
        Validity
            Not Before: Jun 17 23:20:00 2025 GMT
            Not After : Jun 16 23:25:00 2026 GMT
        Subject: CN=4B58A804F7F97AE7CB847B539BE56C2470B49D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:ce:2a:fd:a7:d0:01:79:00:09:79:53:bc:
                    2e:9c:d4:81:d7:61:7c:b9:df:15:05:7d:0d:38:aa:
                    be:63:0b:d9:1d:07:67:75:78:4b:9e:fe:64:e5:0b:
                    64:34:6a:26:e5:c2:6a:d6:be:52:00:a0:e3:94:60:
                    38:2e:33:bf:df:52:9a:4d:5b:aa:69:93:ef:d4:41:
                    b0:5b:13:c0:1f:a9:eb:2a:b8:3d:ae:3c:07:20:d9:
                    1d:82:9b:f1:18:01:d3:8a:e6:09:8a:5a:c0:dd:ed:
                    8f:c5:02:39:95:09:b4:ec:f1:10:90:44:a4:94:ac:
                    ab:98:75:4c:af:9f:02:55:bb:f2:47:c7:51:ae:78:
                    d7:7c:45:35:ed:a5:b9:5f:ce:e1:ab:0a:70:22:2a:
                    5b:6a:1d:09:35:38:c5:27:25:fa:f1:e5:6e:68:24:
                    ce:6e:b3:0f:dc:eb:66:d7:ec:c1:b4:40:4b:fa:94:
                    9e:b2:e3:a7:e1:a8:8e:20:9b:84:73:69:a5:ff:a2:
                    02:c8:c0:d9:ff:04:0a:81:e7:2b:c9:09:1a:57:af:
                    0d:c2:32:5e:1a:a2:34:96:7e:cd:91:5d:86:6e:c8:
                    06:d8:0c:be:48:b3:62:69:00:2d:0a:c1:45:b1:0c:
                    4e:d7:c8:2a:e8:78:02:b6:93:b0:fc:05:d8:5a:e5:
                    6b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:58:A8:04:F7:F9:7A:E7:CB:84:7B:53:9B:E5:6C:24:70:B4:9D:67
            X509v3 Authority Key Identifier:
                keyid:C8:8E:06:CC:AF:F9:CD:22:AA:83:80:1D:CA:00:A0:3F:91:54:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/34352e3139312e34342e302f32342d3234203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:e5:b2:02:78:36:66:36:88:b9:2c:3b:39:23:dc:9a:37:f1:
         91:5a:bc:e9:7b:c9:3c:75:84:96:36:fe:3e:f6:fa:26:e3:47:
         c3:ab:de:61:6b:4d:36:af:49:39:b7:ce:cc:5a:df:e0:4b:db:
         6f:70:c8:24:79:31:8e:7f:dc:4d:fb:b3:b4:76:83:36:59:85:
         e8:bb:2a:98:c7:75:23:e4:25:07:20:cc:49:8c:5b:25:46:cd:
         d8:e9:64:03:9b:9a:20:c7:38:7e:64:5e:1d:83:b0:58:14:71:
         64:94:9d:da:f5:30:e7:da:0e:6b:fb:88:a0:1f:50:3d:ac:da:
         af:5a:99:c2:67:19:b9:e6:94:56:b5:19:8d:9d:45:f6:cc:a4:
         0d:fd:6e:ff:3b:10:c9:3a:71:66:4c:89:38:af:37:f3:00:8e:
         51:5d:e1:5a:dc:97:ce:fe:8e:21:bf:d0:32:dc:a0:14:ba:57:
         71:99:1f:70:65:a7:a8:10:94:58:58:6f:ab:25:95:24:f1:e3:
         90:91:86:f0:f0:8a:20:c7:71:ee:10:72:f6:6e:08:20:6b:4f:
         92:55:18:8c:f9:ba:fa:af:fa:5e:fa:8c:8e:c5:a2:88:38:a0:
         cc:b8:22:bd:0e:34:1f:27:a1:47:86:6e:06:ba:4f:ca:da:20:
         26:73:84:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 02:26:12 2025 by rpki-client