Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/34352e3138302e3234302e302f32342d3234203d3e20323639373334.roa
File:                     34352e3138302e3234302e302f32342d3234203d3e20323639373334.roa (raw, json)
Hash identifier:          S38i3j1fSFMcJlOEoj/ojkNve2zL9/kLQQS/jaW7VHI=
Subject key identifier:   87:E3:1E:AC:79:CC:63:B6:FB:8F:F8:9D:14:0C:02:A7:C0:F8:B5:79
Certificate issuer:       /CN=8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14
Certificate serial:       69961743F39E292629D1D2B695AFDA86D3822EF5
Authority key identifier: 8F:88:AC:48:39:4D:A9:AB:A2:BA:9C:35:9E:01:BB:67:E1:A7:2C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/34352e3138302e3234302e302f32342d3234203d3e20323639373334.roa
Signing time:             Tue 04 Feb 2025 18:38:10 +0000
ROA not before:           Tue 04 Feb 2025 18:33:10 +0000
ROA not after:            Tue 03 Feb 2026 18:38:10 +0000
asID:                     269734
IP address blocks:        45.180.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:96:17:43:f3:9e:29:26:29:d1:d2:b6:95:af:da:86:d3:82:2e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14
        Validity
            Not Before: Feb  4 18:33:10 2025 GMT
            Not After : Feb  3 18:38:10 2026 GMT
        Subject: CN=87E31EAC79CC63B6FB8FF89D140C02A7C0F8B579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:5f:a5:49:9b:64:82:e0:7c:7d:25:52:34:
                    8f:c6:f6:dc:6f:63:94:6f:3e:a1:af:61:98:a6:05:
                    30:f9:c8:9a:55:c1:0f:4c:58:e2:1d:d8:72:c1:59:
                    78:b6:98:c8:8b:d5:01:2d:9b:fd:89:aa:62:3c:27:
                    5c:f1:a2:56:cb:2b:b4:93:4d:b3:d6:ce:f4:83:91:
                    af:f2:4a:3a:a3:6e:d4:6e:20:d1:5c:ba:f0:47:17:
                    81:6b:1e:9c:6c:c8:c4:bd:75:63:72:5d:fd:46:cb:
                    21:af:9e:9a:36:89:56:4e:7b:c6:8a:90:9b:f8:bd:
                    0b:37:54:7d:77:51:34:97:c6:56:74:fd:20:f3:6b:
                    78:68:f4:68:85:fd:dc:c4:4e:ba:6d:70:e8:40:94:
                    6d:4f:8c:0e:2b:b7:5f:44:95:64:c3:69:fa:8b:bb:
                    40:a8:ed:ac:c0:74:30:4f:b6:1c:f7:c1:0b:db:ca:
                    19:d9:58:e0:c3:c4:fa:14:e2:7d:a8:99:2b:4d:ca:
                    01:1e:1c:5f:f2:0c:2e:dd:1c:07:7c:67:6d:86:e8:
                    2b:86:aa:9d:8c:96:75:38:27:f6:57:0b:65:03:a0:
                    ca:3b:96:89:20:63:71:32:60:88:41:95:95:b1:5b:
                    3c:da:10:d6:d8:e8:1e:58:07:e2:c0:fc:a4:10:e2:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E3:1E:AC:79:CC:63:B6:FB:8F:F8:9D:14:0C:02:A7:C0:F8:B5:79
            X509v3 Authority Key Identifier:
                keyid:8F:88:AC:48:39:4D:A9:AB:A2:BA:9C:35:9E:01:BB:67:E1:A7:2C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/34352e3138302e3234302e302f32342d3234203d3e20323639373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:4b:fc:fd:a5:d2:89:0d:54:06:9f:93:11:6b:7c:e9:ee:97:
         07:c0:02:ea:41:8b:53:71:53:44:ed:7d:20:aa:7b:fa:bd:e7:
         27:39:a9:4b:7f:7c:d3:20:9a:68:d6:d8:b6:78:af:25:f6:e1:
         26:2c:09:d0:18:9d:e7:61:89:32:4b:17:00:ea:3f:44:9f:dd:
         dd:32:17:a0:c8:c3:84:03:31:b8:af:b6:0f:83:e5:1a:65:37:
         47:d0:ba:a9:31:46:77:2c:28:e2:a7:95:04:13:63:0f:fb:d8:
         67:a9:70:73:85:0a:80:8e:9c:bf:94:f6:80:0a:a6:df:a6:1b:
         8a:2c:82:7f:a3:fd:96:1a:fb:79:b5:b9:4a:0b:f1:72:af:52:
         82:5f:14:6d:2e:b8:bd:9e:33:4f:10:dc:07:63:0b:13:b4:61:
         f0:b7:68:6e:f2:b6:f4:0e:58:09:35:a0:90:f2:55:2a:9c:35:
         11:f3:0a:63:39:33:42:77:fb:d5:3f:aa:61:39:9a:ee:b6:ac:
         4b:db:77:93:81:bd:36:16:02:c4:f8:d5:7b:57:7b:29:61:12:
         44:35:fa:93:31:8d:71:e5:37:c8:f8:55:a1:e2:9b:a0:a4:f3:
         8d:0e:87:f7:e5:e6:6b:ad:42:68:bf:b1:a8:b9:02:09:5c:92:
         c3:2c:0a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:02 2025 by rpki-client