Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0930C6D701CE2265C2D06CF0BB9DA5BAFFDC79C92B043982D8056088319CA904/0/34352e37312e3230342e302f32322d3234203d3e203238313030.roa
File:                     34352e37312e3230342e302f32322d3234203d3e203238313030.roa (raw, json)
Hash identifier:          UbYzu0yvjwxm5RMiYLurwoiuI9+wRAN8l9AHGD1qmUw=
Subject key identifier:   27:62:7A:C7:83:EE:0C:59:08:76:8A:8A:2B:CF:74:AF:60:DC:07:E3
Certificate issuer:       /CN=23F35C92F4627E1565E06AD98238DA016BDCC2B3
Certificate serial:       2AF8C63C16D3808EEAA1CBD22FD46DE797EE41C0
Authority key identifier: 23:F3:5C:92:F4:62:7E:15:65:E0:6A:D9:82:38:DA:01:6B:DC:C2:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23F35C92F4627E1565E06AD98238DA016BDCC2B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0930C6D701CE2265C2D06CF0BB9DA5BAFFDC79C92B043982D8056088319CA904/0/34352e37312e3230342e302f32322d3234203d3e203238313030.roa
Signing time:             Tue 04 Feb 2025 18:34:31 +0000
ROA not before:           Tue 04 Feb 2025 18:29:31 +0000
ROA not after:            Tue 03 Feb 2026 18:34:31 +0000
asID:                     28100
IP address blocks:        45.71.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0930C6D701CE2265C2D06CF0BB9DA5BAFFDC79C92B043982D8056088319CA904/0/23F35C92F4627E1565E06AD98238DA016BDCC2B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0930C6D701CE2265C2D06CF0BB9DA5BAFFDC79C92B043982D8056088319CA904/0/23F35C92F4627E1565E06AD98238DA016BDCC2B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23F35C92F4627E1565E06AD98238DA016BDCC2B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 20:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f8:c6:3c:16:d3:80:8e:ea:a1:cb:d2:2f:d4:6d:e7:97:ee:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23F35C92F4627E1565E06AD98238DA016BDCC2B3
        Validity
            Not Before: Feb  4 18:29:31 2025 GMT
            Not After : Feb  3 18:34:31 2026 GMT
        Subject: CN=27627AC783EE0C5908768A8A2BCF74AF60DC07E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:c8:25:cb:c5:12:79:cb:fd:35:93:e2:dd:
                    af:a6:a7:c1:50:f0:c5:65:eb:91:68:f1:5a:bc:4f:
                    76:42:05:0d:08:ed:82:61:04:e8:97:0a:e1:b1:d0:
                    4f:5c:40:bd:82:a6:2f:ac:8e:b3:bc:d8:ca:ae:9b:
                    80:88:99:22:4c:e4:e5:1b:fc:80:63:b1:db:61:aa:
                    34:d2:c6:ae:63:77:51:1f:35:b5:c0:26:66:6a:5d:
                    11:07:d4:ad:78:c0:4c:69:df:3e:da:38:a3:4d:1f:
                    f5:dd:73:5d:10:49:50:76:aa:e6:8e:c6:85:70:f9:
                    61:97:4c:3a:35:43:4a:46:4b:45:e8:78:17:78:ee:
                    c3:83:d5:b2:19:28:e7:2b:1c:7d:c6:6d:df:7e:c8:
                    58:ea:c6:26:aa:c4:b6:58:c1:2c:34:15:7d:5c:70:
                    eb:14:fb:1b:b2:93:f7:66:fd:62:93:54:49:98:bf:
                    84:d9:86:3c:66:8f:a5:36:98:16:fc:95:20:ab:e2:
                    19:81:4f:3f:1f:18:e0:d2:a0:19:f9:eb:76:df:cd:
                    82:a7:29:3e:c7:74:b6:fb:22:f1:a3:c9:df:f5:ee:
                    9f:c5:82:07:f4:91:f7:d2:da:1d:b7:d0:c4:e8:9f:
                    c3:8a:c1:7f:f6:b3:20:88:28:58:ca:2d:65:6e:11:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:62:7A:C7:83:EE:0C:59:08:76:8A:8A:2B:CF:74:AF:60:DC:07:E3
            X509v3 Authority Key Identifier:
                keyid:23:F3:5C:92:F4:62:7E:15:65:E0:6A:D9:82:38:DA:01:6B:DC:C2:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0930C6D701CE2265C2D06CF0BB9DA5BAFFDC79C92B043982D8056088319CA904/0/23F35C92F4627E1565E06AD98238DA016BDCC2B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23F35C92F4627E1565E06AD98238DA016BDCC2B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0930C6D701CE2265C2D06CF0BB9DA5BAFFDC79C92B043982D8056088319CA904/0/34352e37312e3230342e302f32322d3234203d3e203238313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:2e:f6:92:6c:0f:78:fb:07:a7:eb:de:2c:bb:24:ff:63:42:
         0e:bf:d1:76:21:fa:2e:dd:53:31:f4:78:d7:bf:96:9f:ef:e8:
         55:16:a2:11:b8:d8:d7:c8:87:f4:4c:0f:cc:2f:5f:af:53:a9:
         d9:e7:08:35:27:39:c1:0c:46:7c:05:1d:73:ae:e5:53:ad:c1:
         48:ea:63:11:e8:3f:fb:c8:c3:7d:20:97:c7:1d:14:6f:76:34:
         15:59:ac:44:c9:2a:27:48:72:39:67:e8:f7:a3:ab:71:5b:2f:
         44:89:a1:03:db:1c:79:ed:2d:08:4f:97:ed:62:6e:6d:5e:a2:
         cb:68:b1:37:5c:71:7b:41:41:3e:83:7a:d8:fd:33:94:1a:9f:
         ab:39:d2:b7:36:e3:ad:40:78:84:a6:8a:49:e2:a8:27:de:11:
         9f:05:43:26:c4:f2:50:9b:09:82:df:c3:bf:6b:67:e0:87:4a:
         4b:c7:76:6e:05:ea:ba:1d:73:a5:c8:2a:20:8d:f0:e9:8e:02:
         c7:3f:1b:5c:60:b4:77:30:ce:5e:85:34:15:7c:f7:21:10:c6:
         a7:1e:9a:62:45:d7:a4:7c:ab:aa:0c:b7:5c:18:3d:f9:b7:b8:
         71:5d:37:3e:93:75:9d:bb:b1:80:d8:a2:c0:5f:ba:97:a0:10:
         d0:00:a0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:14 2025 by rpki-client