Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e20323633373137.roa
File:                     34352e3233392e34342e302f32322d3234203d3e20323633373137.roa (raw, json)
Hash identifier:          delOFgSRNeHIObr57AoKhUMDVOIzwRzEkeje0U8nQRE=
Subject key identifier:   7F:8B:5B:53:C3:8F:F5:74:25:32:7A:3D:C1:0D:BB:D6:D0:C4:B2:A2
Certificate issuer:       /CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Certificate serial:       7D67CDD7A603652060F134258D0A26EC3D2E42B1
Authority key identifier: 8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e20323633373137.roa
Signing time:             Thu 03 Apr 2025 16:50:00 +0000
ROA not before:           Thu 03 Apr 2025 16:45:00 +0000
ROA not after:            Thu 02 Apr 2026 16:50:00 +0000
asID:                     263717
IP address blocks:        45.239.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:67:cd:d7:a6:03:65:20:60:f1:34:25:8d:0a:26:ec:3d:2e:42:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
        Validity
            Not Before: Apr  3 16:45:00 2025 GMT
            Not After : Apr  2 16:50:00 2026 GMT
        Subject: CN=7F8B5B53C38FF57425327A3DC10DBBD6D0C4B2A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:12:0b:ce:a9:14:a8:61:8f:fd:16:87:67:
                    8c:ba:ee:63:38:07:87:d7:d5:9e:f7:86:52:b7:a1:
                    66:04:db:8b:e7:0b:a4:80:54:ab:84:4f:99:9a:25:
                    96:53:0a:a2:6a:12:89:ae:1c:6c:9e:bc:bb:da:65:
                    e3:7d:9b:dd:72:30:6a:b3:67:96:ca:7d:06:11:2a:
                    1f:62:6e:07:0b:87:01:ee:51:a7:48:2e:38:3b:4b:
                    4e:e0:7b:ad:9a:82:9b:f9:22:81:90:a4:90:8c:06:
                    f0:da:00:46:50:a0:7f:0a:62:e9:7c:b5:e9:92:0b:
                    7e:d9:b0:4b:d3:62:c1:9c:9d:07:1d:bb:b3:18:46:
                    55:5e:21:bb:db:36:78:10:52:f5:a9:8a:47:35:67:
                    60:c9:06:65:ca:d7:56:eb:8d:dd:2c:fb:12:84:50:
                    4a:dd:f3:65:2c:19:a7:53:79:5a:6f:65:d7:4a:a8:
                    b5:f7:6b:7c:08:15:11:25:a8:13:9a:3c:93:0a:13:
                    e0:2d:7b:0c:a8:44:b3:98:41:3b:83:a9:e3:7e:d0:
                    a0:c8:9d:a0:da:b6:e3:20:79:fa:66:e4:56:99:39:
                    5d:56:84:68:8e:84:a6:60:de:14:17:5d:5d:e2:df:
                    ea:0e:94:c5:6f:db:31:b9:a6:d1:2e:12:21:1c:f3:
                    6d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8B:5B:53:C3:8F:F5:74:25:32:7A:3D:C1:0D:BB:D6:D0:C4:B2:A2
            X509v3 Authority Key Identifier:
                keyid:8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34342e302f32322d3234203d3e20323633373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:32:ca:66:bc:69:fc:97:72:07:63:99:0e:99:a8:e5:b0:f0:
         e3:c2:f7:82:11:14:7b:b5:31:5e:c9:66:0d:23:12:9a:b6:66:
         29:b8:5e:67:68:70:85:40:89:90:20:f4:93:6a:f2:42:dc:13:
         f6:a4:cb:43:a6:99:09:0d:58:3e:55:2e:56:60:e8:81:40:85:
         21:4e:da:65:ce:02:67:18:55:d7:4c:7a:58:92:97:fc:39:c1:
         92:e9:19:e7:a1:1c:57:cc:a6:29:7d:a7:f0:9b:7d:fc:13:75:
         91:fa:bf:ee:6f:b5:1b:bf:97:e7:fb:b0:55:5e:d3:70:34:5d:
         87:f9:3c:ee:68:35:a4:3b:dd:7b:5d:81:1c:e6:c4:60:c6:52:
         b0:99:44:eb:07:77:ce:7f:f8:f2:fa:f5:11:c5:ee:39:40:5b:
         31:55:a6:b4:a4:bf:d7:90:1e:14:62:9c:61:f5:67:51:05:c2:
         8b:bd:6e:cb:f8:3b:b3:bd:4c:56:2c:d6:98:cf:4e:01:21:19:
         9e:eb:69:85:6d:87:15:ed:ae:27:e2:76:6f:e7:a5:c0:ac:dd:
         b5:6f:6b:2d:7a:1b:13:d0:2a:65:ea:c9:a2:29:26:de:97:10:
         68:d9:9c:38:6a:66:67:70:cb:63:b5:26:30:d1:36:fb:94:f2:
         69:6f:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:27 2025 by rpki-client on console.sobornost.net