Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/34352e3136352e33362e302f32322d3234203d3e20323637373130.roa
File:                     34352e3136352e33362e302f32322d3234203d3e20323637373130.roa (raw, json)
Hash identifier:          YZAhBfob4tS6gKEbcWtLHUP96DO37vaG33VFbGPaelo=
Subject key identifier:   A3:68:13:70:B3:4B:93:63:9B:7C:93:7D:01:C4:84:BA:B1:28:62:B1
Certificate issuer:       /CN=2A71760D473705CDBB004AFB079B76EBD8CC5513
Certificate serial:       25ECA64C24F9447492574EAA85FD9E023EDF47CF
Authority key identifier: 2A:71:76:0D:47:37:05:CD:BB:00:4A:FB:07:9B:76:EB:D8:CC:55:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/34352e3136352e33362e302f32322d3234203d3e20323637373130.roa
Signing time:             Tue 04 Feb 2025 18:22:32 +0000
ROA not before:           Tue 04 Feb 2025 18:17:32 +0000
ROA not after:            Tue 03 Feb 2026 18:22:32 +0000
asID:                     267710
IP address blocks:        45.165.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ec:a6:4c:24:f9:44:74:92:57:4e:aa:85:fd:9e:02:3e:df:47:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A71760D473705CDBB004AFB079B76EBD8CC5513
        Validity
            Not Before: Feb  4 18:17:32 2025 GMT
            Not After : Feb  3 18:22:32 2026 GMT
        Subject: CN=A3681370B34B93639B7C937D01C484BAB12862B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:46:34:96:6a:10:ab:f7:d5:71:a0:13:7b:
                    2b:dd:73:95:2c:c0:f5:b7:1c:0a:3e:ac:6e:56:c8:
                    40:27:41:39:b9:1b:55:78:d0:b2:c6:55:e9:d7:18:
                    ca:8a:00:ab:21:e7:c3:15:33:9f:b6:9b:a8:e6:b8:
                    29:15:b2:b4:fb:fb:ca:46:d3:04:f9:f6:53:f0:33:
                    42:17:0f:2e:50:58:c5:75:e9:b1:f1:6f:d0:32:7e:
                    22:ce:c7:15:01:b2:ce:2d:4e:01:52:ce:d6:d9:3b:
                    33:e6:c2:14:3a:8f:fe:22:84:66:1d:13:d6:ef:87:
                    b5:de:61:2d:5b:87:6f:74:d7:5a:f7:d1:43:5f:8a:
                    60:8b:f4:be:da:13:4f:49:49:eb:99:4e:49:86:a1:
                    4b:d5:63:f3:ad:66:3e:41:a8:63:9b:26:56:2d:b5:
                    09:70:dc:dc:19:b0:b2:da:23:5c:9e:fc:e7:ee:24:
                    ba:e8:eb:f0:2e:4e:73:69:48:48:94:92:4c:0a:7d:
                    41:ec:19:ac:80:33:b3:fc:01:f3:25:dd:ac:b1:0c:
                    97:b2:b4:93:d7:1f:9f:60:a9:b8:79:e7:64:a2:6e:
                    02:bd:a5:a3:d8:d4:0e:db:45:fc:9e:d0:3d:88:91:
                    d2:1d:c3:a0:d1:f2:30:5f:af:03:d2:72:76:f8:6d:
                    f3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:68:13:70:B3:4B:93:63:9B:7C:93:7D:01:C4:84:BA:B1:28:62:B1
            X509v3 Authority Key Identifier:
                keyid:2A:71:76:0D:47:37:05:CD:BB:00:4A:FB:07:9B:76:EB:D8:CC:55:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/34352e3136352e33362e302f32322d3234203d3e20323637373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:cd:fa:eb:dc:58:db:31:36:40:72:d1:94:14:f0:58:40:2f:
         de:16:a3:7c:02:3f:27:6c:77:cb:a6:f1:60:72:72:6e:65:d7:
         6c:50:69:f4:04:c9:d0:af:80:04:f4:cf:72:d1:8a:df:85:df:
         fd:45:3f:61:cf:cf:fe:6a:ba:d3:51:94:f0:c5:07:e2:35:b0:
         d5:6e:95:a5:e8:e0:2a:d5:62:20:d1:22:8a:59:0e:12:65:38:
         3c:1f:1a:6e:b5:13:ed:5c:5a:5c:e3:59:3b:f8:0e:5b:81:be:
         1d:57:9b:dd:23:dc:b1:75:ff:18:8f:69:62:2e:ca:91:48:56:
         58:b5:c5:52:01:fa:43:eb:a8:ad:58:6e:ee:d2:6c:99:14:1c:
         d4:7f:5a:66:19:1a:67:47:a9:21:4b:ca:8f:5e:2a:72:3b:7b:
         f1:80:03:c6:38:24:ff:2b:fc:ae:e0:78:67:a4:74:8d:08:3b:
         56:0c:2f:82:38:a9:f1:aa:1e:ab:84:03:73:f8:1b:9c:2e:f2:
         04:f3:5d:fe:c4:31:5a:12:2f:95:41:a2:56:f8:97:1a:48:a1:
         f6:b7:59:91:d4:1a:11:60:85:2a:ea:2a:1a:f2:e7:cb:83:43:
         cc:9b:d0:27:e3:c7:63:90:43:45:47:ff:02:18:64:07:30:b1:
         ae:0a:d7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:15 2025 by rpki-client on console.sobornost.net