Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234352e302f32342d3234203d3e20323637393239.roa
File:                     34352e3137392e3234352e302f32342d3234203d3e20323637393239.roa (raw, json)
Hash identifier:          ElA0XStyOEItfbkCllA7ySbbx/h54Oxp1AWj8H1PZo8=
Subject key identifier:   B2:F5:78:1C:F6:0F:C2:78:6A:3D:2A:36:E7:5C:3A:4A:CB:E4:B1:DD
Certificate issuer:       /CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
Certificate serial:       5E96E5EB5EF80102315578DF051F0457A316FC18
Authority key identifier: B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234352e302f32342d3234203d3e20323637393239.roa
Signing time:             Tue 04 Feb 2025 18:29:21 +0000
ROA not before:           Tue 04 Feb 2025 18:24:21 +0000
ROA not after:            Tue 03 Feb 2026 18:29:21 +0000
asID:                     267929
IP address blocks:        45.179.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 15:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:96:e5:eb:5e:f8:01:02:31:55:78:df:05:1f:04:57:a3:16:fc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
        Validity
            Not Before: Feb  4 18:24:21 2025 GMT
            Not After : Feb  3 18:29:21 2026 GMT
        Subject: CN=B2F5781CF60FC2786A3D2A36E75C3A4ACBE4B1DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:58:ea:93:56:45:87:e6:98:a5:0d:ab:1e:7f:
                    4e:2f:1a:af:b7:ec:f3:21:c3:d2:31:a3:43:ed:a5:
                    31:de:7b:68:e7:6f:f1:27:20:84:7c:53:73:17:2a:
                    a4:de:fb:1d:88:22:6b:e5:5a:60:09:0e:4d:44:53:
                    00:7e:81:4b:70:3b:5e:56:83:e7:ea:eb:c7:1d:95:
                    01:13:44:5f:05:55:8c:f4:53:f4:e5:de:de:08:9e:
                    9e:af:c8:cb:64:98:8e:d1:4f:70:f4:72:87:65:26:
                    c1:db:7d:ee:63:48:62:bc:38:da:6c:ee:77:e9:dd:
                    f5:2b:4c:95:40:dd:ab:fd:9e:7e:7a:e6:41:7f:e3:
                    53:35:eb:b9:b8:44:e7:b6:13:ea:cf:e7:28:b0:01:
                    93:c7:51:a1:38:51:b0:82:90:26:f5:54:15:8f:95:
                    0c:65:cb:64:92:9b:a1:57:3a:71:73:50:47:ba:fe:
                    f7:2e:a2:79:0e:1e:b6:9b:84:22:da:3f:02:35:36:
                    6c:f2:63:b4:b4:9c:95:a7:a8:46:09:be:e2:19:26:
                    77:ab:f4:e6:19:5a:ee:37:25:eb:07:97:0e:9b:ca:
                    3f:2b:b0:c2:55:e2:79:58:14:40:7d:72:dc:d0:e5:
                    71:51:8c:68:1e:f9:52:bb:d5:31:14:30:9b:22:a6:
                    fd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F5:78:1C:F6:0F:C2:78:6A:3D:2A:36:E7:5C:3A:4A:CB:E4:B1:DD
            X509v3 Authority Key Identifier:
                keyid:B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234352e302f32342d3234203d3e20323637393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:4a:38:06:ea:83:04:bf:db:63:8f:2e:ff:1c:65:e0:59:0d:
         b9:07:0c:1c:23:90:56:0f:fe:c9:6f:3f:ca:a6:10:1e:5e:36:
         a2:0c:a4:b9:c9:dd:9e:a6:70:ec:de:97:9c:76:8f:88:9d:90:
         ab:9f:59:17:96:4f:71:67:51:73:c5:c3:20:a3:5d:d7:84:44:
         87:d0:b4:68:86:dd:68:d1:5a:46:77:0c:cf:3c:05:88:fc:74:
         50:c0:83:71:8c:fb:07:b5:b9:18:df:04:bb:ba:a3:f0:1d:c7:
         b9:68:71:15:8b:c9:1c:1b:21:b7:e2:a9:8f:1d:c2:09:02:76:
         94:fc:56:1b:b5:8a:3a:7c:c8:b2:cb:52:d3:e3:5c:85:c8:d9:
         07:10:f8:40:38:dc:e3:ab:c2:2f:d3:60:ca:8f:5c:e8:50:db:
         c5:5f:34:dd:07:5d:63:b2:3f:f4:4c:8a:20:5f:2f:40:0b:6c:
         25:33:30:64:3d:a7:b0:97:a4:79:6b:3f:c3:87:22:fc:46:88:
         34:d8:cd:89:8f:28:39:81:ec:fa:7e:8a:2b:4f:59:46:c5:83:
         fd:d7:37:4b:13:06:f5:42:68:1b:35:6c:26:80:d6:a2:6d:ec:
         5f:35:e3:b7:35:45:4d:e2:b3:2e:17:01:72:e9:53:89:8e:97:
         f9:91:01:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:41 2025 by rpki-client