Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235342e302f32342d3234203d3e20323637373834.roa
File:                     34352e3232372e3235342e302f32342d3234203d3e20323637373834.roa (raw, json)
Hash identifier:          fSooZ14fnRgN7TkIvwTYg3ucTKVmbkaA8Cf+gpu86vE=
Subject key identifier:   64:88:BA:35:5F:BE:4E:3A:19:1C:E9:DD:45:A8:C7:85:47:F8:37:02
Certificate issuer:       /CN=0A2E8494F1EE6E9343EF823748A436EA77B86231
Certificate serial:       0A96B32BA2B0684515F99FC58269BE16C1EB20D7
Authority key identifier: 0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235342e302f32342d3234203d3e20323637373834.roa
Signing time:             Tue 04 Feb 2025 18:50:47 +0000
ROA not before:           Tue 04 Feb 2025 18:45:47 +0000
ROA not after:            Tue 03 Feb 2026 18:50:47 +0000
asID:                     267784
IP address blocks:        45.227.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.crl
                          rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:96:b3:2b:a2:b0:68:45:15:f9:9f:c5:82:69:be:16:c1:eb:20:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2E8494F1EE6E9343EF823748A436EA77B86231
        Validity
            Not Before: Feb  4 18:45:47 2025 GMT
            Not After : Feb  3 18:50:47 2026 GMT
        Subject: CN=6488BA355FBE4E3A191CE9DD45A8C78547F83702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:5c:d7:e2:7f:33:d2:42:eb:34:3e:c3:b7:
                    99:c9:d8:20:a1:85:cd:55:9a:bf:c4:e7:82:bb:df:
                    18:cd:3c:d3:04:7d:eb:82:d7:5d:2f:ca:e8:46:42:
                    2a:63:13:16:98:80:4a:f8:cd:75:b6:cf:b2:a8:62:
                    60:80:dd:25:9e:28:01:56:be:9b:41:ca:83:2f:d6:
                    34:ad:66:e1:55:41:78:02:81:f4:8e:ff:e8:06:1a:
                    66:9e:e2:44:b2:47:53:5e:61:15:5c:52:54:38:62:
                    26:1b:fb:0e:da:c7:af:9d:a7:cc:19:19:18:0e:50:
                    c7:51:03:ec:de:90:b8:b1:cf:88:e4:08:bd:73:d2:
                    e0:ea:27:5b:ab:f7:b4:15:cb:3f:75:24:a8:b8:88:
                    b5:cf:7b:c4:eb:63:2d:a4:cb:48:d7:8c:99:38:8d:
                    c6:54:0c:f8:4f:d7:d4:5d:8e:3e:2d:01:eb:5a:1e:
                    0a:76:04:02:08:f6:00:21:56:f3:fa:3b:d5:7a:5e:
                    34:92:f2:18:c6:79:e1:c9:2d:38:08:f6:38:ad:11:
                    6a:e8:c2:5a:63:66:bd:23:b3:c5:3b:4c:ea:6e:51:
                    5b:34:f7:c4:6e:58:b2:b4:26:ed:0c:b7:09:cb:95:
                    19:ba:0f:40:fd:e5:6f:65:7f:98:7d:3a:0c:72:3b:
                    e8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:88:BA:35:5F:BE:4E:3A:19:1C:E9:DD:45:A8:C7:85:47:F8:37:02
            X509v3 Authority Key Identifier:
                keyid:0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235342e302f32342d3234203d3e20323637373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:fc:56:2c:40:04:5e:1d:56:aa:2e:28:04:84:82:90:49:03:
         0f:20:b0:71:e6:cc:70:71:b3:d8:22:0d:18:bf:87:c8:c1:1c:
         a4:91:23:7a:b6:fb:86:43:3b:a2:8c:ad:0a:8d:3c:2a:ff:e8:
         0a:98:3f:74:40:bf:9d:5c:54:b5:32:c0:9d:c6:7d:1e:50:bf:
         3a:93:a7:9c:2f:0f:a2:16:52:d3:e1:bb:62:a1:24:93:d3:33:
         8a:cf:06:e0:c5:82:2d:fb:f5:36:18:e6:73:04:3f:be:f5:94:
         8a:c5:9a:c7:21:f5:66:21:f2:12:6c:f9:3b:11:af:fa:47:79:
         70:e5:08:11:af:84:43:0c:88:95:98:d0:a5:ef:a2:f5:82:72:
         43:29:f8:ac:aa:e5:2a:62:25:eb:11:03:25:7b:9d:3e:49:45:
         ad:8e:fc:1d:dc:a4:8e:2a:a6:83:2b:9d:c7:36:5b:cc:14:07:
         05:28:71:05:62:b0:b7:fc:aa:73:d3:39:19:bd:d8:4a:22:2c:
         bd:cd:82:0f:9d:7c:59:14:c0:cb:e3:77:a8:cb:ee:12:b0:37:
         a4:4e:2a:be:3d:6a:fd:a7:f1:d2:7e:cf:e3:3c:3b:0f:cb:cd:
         c2:2c:19:10:6f:f7:ed:52:5c:17:34:33:03:62:73:73:55:f3:
         cb:6a:2d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:41:26 2025 by rpki-client