Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/34352e3136342e3133362e302f32332d3233203d3e20323635353536.roa
File:                     34352e3136342e3133362e302f32332d3233203d3e20323635353536.roa (raw, json)
Hash identifier:          Geoz43FH3G0KObZ+Q8JC16GEeZbW4v5B53g+jiuxEac=
Subject key identifier:   21:CA:98:3E:81:33:67:66:CB:E7:C5:79:FA:28:17:4F:31:F5:3C:DF
Certificate issuer:       /CN=2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3
Certificate serial:       407B49666BCF72D89A13AEA0F5F1E051224987B9
Authority key identifier: 21:55:D8:99:F5:71:21:56:D0:B4:E8:7A:3F:DF:C6:A0:E1:A3:FA:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/34352e3136342e3133362e302f32332d3233203d3e20323635353536.roa
Signing time:             Tue 04 Feb 2025 18:01:40 +0000
ROA not before:           Tue 04 Feb 2025 17:56:40 +0000
ROA not after:            Tue 03 Feb 2026 18:01:40 +0000
asID:                     265556
IP address blocks:        45.164.136.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7b:49:66:6b:cf:72:d8:9a:13:ae:a0:f5:f1:e0:51:22:49:87:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3
        Validity
            Not Before: Feb  4 17:56:40 2025 GMT
            Not After : Feb  3 18:01:40 2026 GMT
        Subject: CN=21CA983E81336766CBE7C579FA28174F31F53CDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:73:29:65:91:f9:dc:5d:5c:2c:de:73:24:10:
                    0e:cc:eb:f5:86:96:23:72:2d:13:f6:cf:b6:a0:32:
                    77:e7:09:6a:38:2a:90:5d:d8:79:90:d2:c9:74:82:
                    f9:8f:47:c4:6c:b0:86:b0:8f:6f:63:22:33:20:e7:
                    23:51:21:57:42:98:7d:4b:8f:c5:c6:4b:16:3c:15:
                    5d:7b:c5:fc:e9:86:50:cb:e3:d5:13:7b:36:32:d5:
                    03:d7:ee:5b:7b:04:1a:4d:2e:25:74:63:73:af:e8:
                    33:a3:f1:d3:b2:4a:8b:f0:ae:f0:dc:70:3a:9c:a6:
                    e2:bf:82:df:4d:42:23:b3:7c:10:49:79:76:25:39:
                    ab:b0:69:18:13:98:28:73:15:da:fc:ef:ab:a1:3a:
                    2a:02:c6:9f:a3:b0:ed:35:31:8d:34:80:06:90:8f:
                    6d:73:d8:8e:59:43:a6:19:e0:e3:df:f4:6d:f4:d9:
                    d4:0a:89:49:1a:bf:d7:52:7c:58:45:dd:3e:4c:04:
                    8e:3f:6f:23:a7:1d:49:12:82:b8:84:2e:ca:3b:e5:
                    44:aa:e2:35:33:9a:97:72:00:0e:7e:18:b8:e7:6a:
                    4e:05:56:2a:de:ff:e6:7c:b1:d8:68:b9:d8:fc:80:
                    36:53:2a:48:2e:2a:8f:61:74:71:b0:d6:5c:a9:5f:
                    6d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CA:98:3E:81:33:67:66:CB:E7:C5:79:FA:28:17:4F:31:F5:3C:DF
            X509v3 Authority Key Identifier:
                keyid:21:55:D8:99:F5:71:21:56:D0:B4:E8:7A:3F:DF:C6:A0:E1:A3:FA:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/34352e3136342e3133362e302f32332d3233203d3e20323635353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:c9:80:29:6a:8d:65:ef:18:e8:f1:cd:bb:bf:1f:05:7c:17:
         fc:6a:79:63:ca:e3:61:a6:c9:c3:83:96:56:6d:72:f5:ab:89:
         31:fd:29:37:6d:51:55:da:46:ea:58:d3:44:c2:cc:0b:16:4a:
         70:a5:ee:00:a6:6d:92:61:a3:7b:0e:89:1e:a7:02:24:ae:50:
         b4:4b:4a:00:b0:f1:ac:c2:ee:a7:3e:30:be:78:db:a4:e0:88:
         88:ce:97:d3:61:e6:0d:b4:94:a5:65:25:73:18:b2:90:c6:8f:
         c9:a9:d8:f1:ad:7d:9c:ee:7b:7b:b8:81:64:86:1d:81:10:27:
         8f:80:e5:5c:53:7c:e9:3c:b8:9d:d6:09:52:eb:32:5c:80:7e:
         08:1f:94:34:45:6f:14:85:47:0b:32:5a:c1:ab:ea:d6:cf:ec:
         e0:89:8b:bf:1e:69:cf:22:8b:fb:31:5b:45:da:2e:d4:0b:e3:
         0f:dd:52:5f:72:e7:58:95:14:bc:8e:d4:33:1c:91:0e:0a:92:
         ce:a8:26:ca:ec:c4:e6:38:cc:af:76:ba:b4:ad:85:5a:80:8d:
         9f:9c:89:13:42:f9:04:aa:f8:e7:03:05:a9:d8:cb:21:6b:29:
         86:5d:1b:7d:42:81:3f:2d:c1:eb:6c:c5:bb:ed:f7:17:87:15:
         09:14:eb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:47 2025 by rpki-client on console.sobornost.net