Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235322e302f32342d3234203d3e20323637373834.roa
File:                     34352e3232372e3235322e302f32342d3234203d3e20323637373834.roa (raw, json)
Hash identifier:          rofLERE6qlgOxwx+GmCp7DFHhiTROP+Xw+X+A1n1p6Q=
Subject key identifier:   0E:10:FA:F8:21:C6:C7:40:55:F2:B7:3E:56:3B:D3:44:C0:D7:04:91
Certificate issuer:       /CN=0A2E8494F1EE6E9343EF823748A436EA77B86231
Certificate serial:       435C1763C4B8148C390C5CA4CCA1A9D808341CFF
Authority key identifier: 0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235322e302f32342d3234203d3e20323637373834.roa
Signing time:             Tue 04 Feb 2025 18:50:47 +0000
ROA not before:           Tue 04 Feb 2025 18:45:47 +0000
ROA not after:            Tue 03 Feb 2026 18:50:47 +0000
asID:                     267784
IP address blocks:        45.227.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.crl
                          rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5c:17:63:c4:b8:14:8c:39:0c:5c:a4:cc:a1:a9:d8:08:34:1c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2E8494F1EE6E9343EF823748A436EA77B86231
        Validity
            Not Before: Feb  4 18:45:47 2025 GMT
            Not After : Feb  3 18:50:47 2026 GMT
        Subject: CN=0E10FAF821C6C74055F2B73E563BD344C0D70491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:1a:cf:40:47:61:99:d2:d6:9b:ac:30:1a:
                    23:33:43:b8:53:fb:59:0c:e5:d5:a9:9b:03:b2:e7:
                    c9:82:6c:24:0f:31:ce:46:48:d5:91:e9:4f:20:ab:
                    98:5e:93:44:2f:18:a5:38:78:21:16:cb:5c:e6:f0:
                    71:86:ce:b6:2e:77:ac:d8:80:fb:71:9b:4d:8d:6d:
                    0e:e2:de:fd:89:29:dc:55:5a:1b:8a:e6:6f:63:2d:
                    a4:4f:3c:47:ff:e4:6a:2d:81:18:a8:eb:4e:84:ee:
                    d4:61:7d:96:95:7f:1b:83:b6:3f:41:1e:49:22:dc:
                    d4:5d:89:f9:e9:5e:02:ee:bd:77:f7:4a:10:44:13:
                    3e:6b:39:a9:90:9e:dc:dc:dc:13:e9:64:51:0a:cb:
                    75:bb:2a:29:a3:cf:c8:09:2b:b1:af:23:86:33:ed:
                    ea:90:ea:92:f2:21:47:31:d5:ff:ad:3d:10:48:e0:
                    7b:fc:5b:18:6e:4c:15:cd:f3:05:ce:e2:fa:0f:3d:
                    a8:62:b9:f7:af:4c:fe:26:1b:4f:a8:c7:55:c9:df:
                    05:8b:75:fd:24:60:db:96:26:1f:7f:51:ab:9c:d8:
                    6c:92:e8:f5:e2:ed:00:70:35:cd:fb:d5:e7:fe:65:
                    92:65:e8:21:5e:7e:23:7d:53:4a:af:f3:40:3b:18:
                    f5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:10:FA:F8:21:C6:C7:40:55:F2:B7:3E:56:3B:D3:44:C0:D7:04:91
            X509v3 Authority Key Identifier:
                keyid:0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235322e302f32342d3234203d3e20323637373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:71:37:38:38:a9:d7:f2:ba:05:26:c9:59:36:27:32:9c:51:
         82:83:c8:07:58:a9:70:8f:a8:9b:a3:b0:bf:d3:bd:5e:57:24:
         1f:0e:fd:7c:ef:08:79:ba:b4:4d:07:2b:87:42:c8:8c:7f:82:
         2f:60:73:26:b0:dc:b1:6c:13:f3:9e:25:7b:8a:f8:fa:c9:a3:
         6c:c2:f6:85:1d:91:e6:e0:ea:a8:12:11:a5:bf:f5:e0:a8:c9:
         78:5a:f1:65:84:2e:f5:3b:cf:71:e2:8c:e5:f7:91:13:09:21:
         65:4c:c5:9e:5e:2e:c8:6d:8d:6e:cf:c0:7e:5c:4b:77:c6:95:
         5b:e5:b5:5a:ff:fb:d1:ec:ae:fe:e2:34:ee:00:66:a0:31:71:
         29:37:2b:a6:e6:6c:af:21:b1:86:b4:39:0b:11:06:1d:f3:da:
         9b:4f:51:bc:5d:57:ac:84:6a:2c:c4:de:17:2d:86:6b:a2:1f:
         b6:9c:72:6a:cc:62:41:32:35:16:8f:a3:61:80:70:3c:09:e8:
         b0:18:d5:4d:b7:fe:f0:e7:34:3a:91:33:92:4d:77:fa:46:a9:
         c5:20:1c:05:d9:77:62:e4:c3:65:62:85:85:ff:a7:af:f6:18:
         6c:f9:43:44:52:01:5e:97:07:ca:ee:09:44:ea:61:ef:46:3b:
         c9:90:f9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:41:23 2025 by rpki-client