Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/34352e3233382e3139322e302f32322d3234203d3e20323636383037.roa
File:                     34352e3233382e3139322e302f32322d3234203d3e20323636383037.roa (raw, json)
Hash identifier:          S81tlBe+KN1ODOXhuLJ+o0FyfIFQPmZOCKsXLyRbvFs=
Subject key identifier:   F3:6C:EF:85:25:07:9B:F7:8D:88:12:24:37:7D:3D:1A:41:A9:A4:32
Certificate issuer:       /CN=00D66BC9589B906B6A52A31D7187FE6686118DFA
Certificate serial:       2A5D3F44B2724F4B4056A0D0C208045642FAB81E
Authority key identifier: 00:D6:6B:C9:58:9B:90:6B:6A:52:A3:1D:71:87:FE:66:86:11:8D:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/34352e3233382e3139322e302f32322d3234203d3e20323636383037.roa
Signing time:             Tue 01 Apr 2025 13:13:34 +0000
ROA not before:           Tue 01 Apr 2025 13:08:34 +0000
ROA not after:            Tue 31 Mar 2026 13:13:34 +0000
asID:                     266807
IP address blocks:        45.238.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5d:3f:44:b2:72:4f:4b:40:56:a0:d0:c2:08:04:56:42:fa:b8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00D66BC9589B906B6A52A31D7187FE6686118DFA
        Validity
            Not Before: Apr  1 13:08:34 2025 GMT
            Not After : Mar 31 13:13:34 2026 GMT
        Subject: CN=F36CEF8525079BF78D881224377D3D1A41A9A432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:a7:91:f3:c6:7d:d0:64:90:34:2d:e0:83:
                    19:b7:b4:df:b0:32:5a:14:18:bd:dd:f6:85:4c:2e:
                    8e:df:d8:3e:c2:aa:b0:8d:ff:c9:e5:db:2c:c5:b1:
                    7e:a5:7b:04:1b:0e:73:26:a7:73:c4:f9:c9:21:2f:
                    b1:30:19:09:93:a7:9a:76:55:c9:1f:89:11:50:ef:
                    49:58:7a:2a:66:e5:51:38:b2:d5:ef:dc:df:34:26:
                    3b:ca:c8:67:02:b2:73:8c:9a:90:df:a8:38:20:cc:
                    aa:79:92:8d:ab:af:8a:3d:ce:b5:7a:a6:cf:c3:43:
                    72:45:76:d3:39:5e:52:d3:2b:94:ab:7e:9b:fa:40:
                    d0:a2:9a:d4:3d:0a:1d:6b:6b:c0:eb:46:ac:46:57:
                    d9:ad:7f:d7:94:68:76:77:c4:23:c4:9c:51:75:c6:
                    d2:df:9f:ed:09:89:85:e6:07:d6:be:3a:cb:4e:3e:
                    a6:de:4b:2d:36:10:2b:79:26:33:f6:08:8f:d4:b6:
                    45:95:e4:9f:97:e7:2c:68:2f:39:b3:b8:24:18:8a:
                    d1:43:43:ff:8b:32:1f:90:0b:65:d0:75:50:b2:f1:
                    d0:9e:eb:3b:e8:9d:58:81:18:2f:dd:5b:98:8b:87:
                    8a:25:8c:ca:d1:98:84:51:f0:b5:07:e1:cb:dc:74:
                    9c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6C:EF:85:25:07:9B:F7:8D:88:12:24:37:7D:3D:1A:41:A9:A4:32
            X509v3 Authority Key Identifier:
                keyid:00:D6:6B:C9:58:9B:90:6B:6A:52:A3:1D:71:87:FE:66:86:11:8D:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00D66BC9589B906B6A52A31D7187FE6686118DFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E47C12E8CFB133228169D6F0A484EDA0D819670BE7EB24B80A334773A467CE4D/0/34352e3233382e3139322e302f32322d3234203d3e20323636383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:92:a2:51:5e:54:1e:ad:92:61:cd:f7:06:66:64:b8:35:7d:
         b4:82:bd:b0:80:55:62:ab:78:97:75:95:17:b1:9d:83:e9:80:
         99:13:2c:a7:2d:33:06:a7:dc:71:a9:f3:3a:3d:6a:27:63:5f:
         a5:a1:12:b8:d6:cc:7e:a4:7b:f1:3d:9b:14:d4:1f:8d:74:27:
         b4:fc:dc:ae:12:b7:c5:22:a2:b0:7a:8e:b1:55:bf:c3:85:c4:
         38:10:36:ba:98:5f:f6:e7:7c:70:8f:0f:b1:75:84:b1:62:79:
         9d:b3:f4:17:64:85:7e:90:d7:ad:a2:aa:87:37:03:95:aa:3c:
         1d:af:29:5b:9c:61:51:79:55:f9:0a:1e:ae:0d:57:1f:d7:1f:
         69:52:a8:23:81:05:7c:6d:0d:ea:ca:1a:3e:25:3a:39:69:b1:
         fd:08:28:cf:a8:5b:d0:a4:29:a0:44:75:15:b3:46:d3:39:37:
         1d:38:8f:a4:86:9c:f6:c5:47:1d:8e:30:45:4a:fb:fb:0c:37:
         db:d7:89:0b:d0:94:76:4e:11:56:8b:f1:fd:4a:be:56:9f:d1:
         88:b5:ed:aa:da:3b:e7:f4:2f:e4:c3:b6:72:36:ef:65:dc:9c:
         a5:c7:05:8d:2e:67:83:98:f9:93:ff:3f:43:ac:26:22:9e:b5:
         9c:22:58:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:59:21 2025 by rpki-client on console.sobornost.net