Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/34352e3233352e31332e302f32342d3234203d3e20323733393233.roa
File:                     34352e3233352e31332e302f32342d3234203d3e20323733393233.roa (raw, json)
Hash identifier:          BtKuoZdZIttYBqrNPO63p0UlaKEFsIz0Xu2UK93ghKo=
Subject key identifier:   2D:C5:0D:C6:D5:9F:5B:9B:66:0E:37:0B:DA:38:B8:64:0E:B4:5A:29
Certificate issuer:       /CN=CBF31447B564264D0A347F323D8011AEBA5D1613
Certificate serial:       397DF9C15754B6F2D7D79C75AB53A5DF01F19FE9
Authority key identifier: CB:F3:14:47:B5:64:26:4D:0A:34:7F:32:3D:80:11:AE:BA:5D:16:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/34352e3233352e31332e302f32342d3234203d3e20323733393233.roa
Signing time:             Mon 06 Jan 2025 18:45:00 +0000
ROA not before:           Mon 06 Jan 2025 18:40:00 +0000
ROA not after:            Mon 05 Jan 2026 18:45:00 +0000
asID:                     273923
IP address blocks:        45.235.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.crl
                          rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 15:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7d:f9:c1:57:54:b6:f2:d7:d7:9c:75:ab:53:a5:df:01:f1:9f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBF31447B564264D0A347F323D8011AEBA5D1613
        Validity
            Not Before: Jan  6 18:40:00 2025 GMT
            Not After : Jan  5 18:45:00 2026 GMT
        Subject: CN=2DC50DC6D59F5B9B660E370BDA38B8640EB45A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:5a:08:64:91:83:32:cb:65:53:78:4d:25:
                    4e:55:3b:a9:e5:e7:78:bf:12:ec:ee:95:af:08:d5:
                    08:6f:a7:e5:ea:c5:a6:11:35:76:5f:e3:a3:c9:8d:
                    a3:d5:50:7b:56:08:f3:c2:0a:a7:eb:7d:71:f9:94:
                    58:7d:e8:15:35:ac:c6:83:60:d7:78:da:e8:5f:c1:
                    89:bb:9d:7d:a1:a1:19:c7:29:f7:f5:dd:11:dd:3f:
                    71:02:56:f4:d6:19:e7:7e:44:9d:84:74:05:08:3a:
                    a5:87:71:eb:fb:52:5b:63:fb:8c:fb:ad:95:66:17:
                    9b:66:4c:bb:5e:2e:9c:7c:35:9b:0f:23:6c:e1:b3:
                    50:38:e0:de:6a:ad:1f:39:fa:f6:ba:cb:38:0d:2b:
                    72:47:c8:61:8b:a7:77:da:b2:c0:64:6b:19:72:57:
                    31:a4:7a:52:62:08:7a:8d:e5:41:c4:47:03:77:e2:
                    87:dc:d9:05:12:43:3f:a2:0f:dc:05:80:b1:b2:67:
                    0f:f6:5d:9c:0d:4d:43:06:64:dc:ae:7f:89:86:52:
                    13:9f:0e:2d:8b:18:87:51:9c:da:03:c9:99:5a:a2:
                    9e:8d:69:ff:8d:cc:cd:e0:7d:68:55:29:33:35:29:
                    d3:d8:64:61:86:55:f1:4e:38:86:c8:3f:e6:66:5c:
                    eb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C5:0D:C6:D5:9F:5B:9B:66:0E:37:0B:DA:38:B8:64:0E:B4:5A:29
            X509v3 Authority Key Identifier:
                keyid:CB:F3:14:47:B5:64:26:4D:0A:34:7F:32:3D:80:11:AE:BA:5D:16:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/34352e3233352e31332e302f32342d3234203d3e20323733393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:84:37:1f:da:2c:7b:24:63:fb:ac:c7:01:79:97:bd:2b:a9:
         d8:5d:5e:c0:4e:40:41:39:19:a4:29:fc:b7:78:2b:31:9a:01:
         73:61:97:58:35:1a:d6:6e:74:b9:c0:eb:2d:5f:e3:a0:36:7d:
         fb:0b:06:b0:f5:d6:7b:69:3d:c7:f4:45:9e:51:2a:80:4b:b5:
         87:f0:7d:89:b4:f2:80:43:ed:a3:cf:7c:6b:4b:cc:dd:93:8b:
         79:7b:de:85:e2:b8:30:49:ea:f2:6d:78:20:e2:ec:72:87:21:
         d5:da:c7:5c:e8:08:47:f9:a0:88:26:28:39:7e:70:56:a9:d7:
         05:f2:d1:7c:d4:6a:3f:ed:ad:d2:ff:f3:b1:c3:8d:a3:4e:49:
         17:92:0e:da:d6:e5:ad:07:45:36:da:db:25:b8:7c:02:23:4f:
         50:73:3e:56:1f:d8:d1:e5:57:2d:24:dc:03:15:2e:98:f2:a4:
         c7:00:1f:d6:0c:92:bc:ea:a5:52:4b:33:e0:d0:09:d5:f3:22:
         cf:24:71:af:74:d9:5a:44:2b:cf:96:be:45:e5:4e:ec:7e:db:
         8d:fd:cf:be:26:8c:ee:48:d1:88:c1:ad:e5:f0:73:de:2f:ed:
         c9:dc:2a:2e:0a:7a:73:be:47:63:09:ef:6b:29:63:65:84:cb:
         7d:c2:6a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:46:22 2025 by rpki-client