Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/34352e3232382e3138312e302f32342d3234203d3e20323634383336.roa
File:                     34352e3232382e3138312e302f32342d3234203d3e20323634383336.roa (raw, json)
Hash identifier:          Z/diKijea1o9F7+O/wXWqJCeqb1AnzvVQF5tYeJ9vuc=
Subject key identifier:   4E:E7:6E:3F:07:83:19:95:A4:D5:57:66:AD:6A:BC:12:23:39:08:4A
Certificate issuer:       /CN=260895D787D39C6EC70E61B3A77A0B956804C253
Certificate serial:       621A629BE5B0B1D6D49F1DF66ED5E774337AA814
Authority key identifier: 26:08:95:D7:87:D3:9C:6E:C7:0E:61:B3:A7:7A:0B:95:68:04:C2:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260895D787D39C6EC70E61B3A77A0B956804C253.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/34352e3232382e3138312e302f32342d3234203d3e20323634383336.roa
Signing time:             Tue 04 Feb 2025 18:24:37 +0000
ROA not before:           Tue 04 Feb 2025 18:19:37 +0000
ROA not after:            Tue 03 Feb 2026 18:24:37 +0000
asID:                     264836
IP address blocks:        45.228.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/260895D787D39C6EC70E61B3A77A0B956804C253.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/260895D787D39C6EC70E61B3A77A0B956804C253.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260895D787D39C6EC70E61B3A77A0B956804C253.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1a:62:9b:e5:b0:b1:d6:d4:9f:1d:f6:6e:d5:e7:74:33:7a:a8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260895D787D39C6EC70E61B3A77A0B956804C253
        Validity
            Not Before: Feb  4 18:19:37 2025 GMT
            Not After : Feb  3 18:24:37 2026 GMT
        Subject: CN=4EE76E3F07831995A4D55766AD6ABC122339084A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d2:2d:27:e7:43:91:16:9f:22:6a:12:44:a0:
                    0c:e7:78:17:89:82:e2:7e:c2:a4:6e:5b:46:65:ed:
                    5d:89:6a:34:b1:07:f9:e4:a5:1b:b2:05:cb:1a:cb:
                    b7:9b:fe:93:f3:0d:14:42:73:9b:d1:60:6d:a0:78:
                    f6:f4:18:22:b1:3c:44:f8:3a:6e:8f:49:d3:01:54:
                    70:4d:7f:ad:25:ae:6e:10:d7:c0:04:41:ee:a8:b2:
                    2c:1b:6b:ad:d7:52:9b:12:16:62:02:1d:11:f4:f3:
                    27:07:fe:6d:ce:c7:ee:1b:f4:8a:2b:68:4f:59:4e:
                    1e:f8:41:ed:3f:83:2c:f9:8a:d3:5f:cb:6b:e8:70:
                    72:33:0b:56:06:f1:d2:f2:b3:c7:0b:1a:9c:b8:42:
                    37:44:f9:30:4f:31:1f:c2:9e:18:e4:6e:69:46:ec:
                    e3:5d:9e:04:7c:00:3d:52:09:27:08:f9:9c:29:2e:
                    d9:01:e7:5a:27:83:c9:cb:d5:1f:dd:1f:ef:23:2d:
                    85:62:4c:19:53:a9:da:85:2e:84:ab:f3:de:69:f5:
                    4f:fb:cd:1f:cf:73:04:e3:c3:8a:46:45:f4:a7:a0:
                    93:0e:17:23:02:63:b1:21:8e:03:85:0a:24:70:fb:
                    4d:6b:6a:a7:ec:0a:5b:06:d9:3d:2a:c5:fa:6c:82:
                    3e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E7:6E:3F:07:83:19:95:A4:D5:57:66:AD:6A:BC:12:23:39:08:4A
            X509v3 Authority Key Identifier:
                keyid:26:08:95:D7:87:D3:9C:6E:C7:0E:61:B3:A7:7A:0B:95:68:04:C2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/260895D787D39C6EC70E61B3A77A0B956804C253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260895D787D39C6EC70E61B3A77A0B956804C253.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/34352e3232382e3138312e302f32342d3234203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:3d:34:a2:30:b5:96:f5:08:19:8e:b4:11:43:4a:33:eb:22:
         b5:db:fd:1b:0a:da:19:20:96:07:6e:64:89:75:72:56:a2:e7:
         12:f8:e5:24:39:7c:d2:06:87:86:7a:93:0b:1d:13:b9:27:d2:
         cc:42:e1:e9:16:33:25:6d:9b:61:20:4d:a6:10:ec:d1:30:e4:
         70:05:bc:57:ff:4e:03:3a:ed:86:53:21:e7:36:81:fd:75:61:
         fc:ab:69:f7:5c:4d:ce:35:3a:f9:fd:bb:bb:b7:ff:e6:8b:c6:
         af:26:c9:67:ad:02:78:fc:a2:f9:c9:c9:38:b6:5a:51:43:5a:
         3f:96:7a:21:c9:48:87:b4:92:02:72:95:75:d3:03:0e:46:78:
         9d:59:74:aa:c8:8b:22:f0:a3:4a:a1:73:46:5f:4f:9a:89:b6:
         aa:e3:1d:23:7d:d7:9b:e0:95:91:23:53:ba:2d:2e:17:b6:36:
         ec:5d:c4:7e:11:62:33:29:14:be:d4:5a:b3:28:ea:e8:1b:db:
         78:cb:19:4d:ff:3b:f7:f1:68:af:b0:3f:71:24:0d:e5:ec:ef:
         81:e0:ea:7a:60:79:11:60:98:55:9e:64:c5:69:50:10:94:de:
         1a:8e:1a:fd:21:b7:89:19:a0:cc:66:b1:ea:c1:25:29:63:22:
         0d:f6:b4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:10 2025 by rpki-client