Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132322e302f32342d3234203d3e20323636383030.roa
File:                     34352e3233342e3132322e302f32342d3234203d3e20323636383030.roa (raw, json)
Hash identifier:          230lSIOKe1/V8bOKkyGjdkDdhVvAlWsi+BLNWd6gEIY=
Subject key identifier:   50:D2:88:5A:FB:8D:2A:C9:95:5A:98:1B:95:65:BD:89:97:52:51:8A
Certificate issuer:       /CN=E5E5F55E39001EF24D658430EB3A500D80E40348
Certificate serial:       7E56E6C48DD036507C1C177752835678C8C6FA16
Authority key identifier: E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132322e302f32342d3234203d3e20323636383030.roa
Signing time:             Tue 14 Jan 2025 11:30:00 +0000
ROA not before:           Tue 14 Jan 2025 11:25:00 +0000
ROA not after:            Tue 13 Jan 2026 11:30:00 +0000
asID:                     266800
IP address blocks:        45.234.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:56:e6:c4:8d:d0:36:50:7c:1c:17:77:52:83:56:78:c8:c6:fa:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5F55E39001EF24D658430EB3A500D80E40348
        Validity
            Not Before: Jan 14 11:25:00 2025 GMT
            Not After : Jan 13 11:30:00 2026 GMT
        Subject: CN=50D2885AFB8D2AC9955A981B9565BD899752518A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:e8:bc:bf:bc:7e:e4:65:3f:df:66:0d:bf:
                    1e:51:71:5d:a3:6c:2d:fa:3b:b4:2c:be:f8:4e:ed:
                    bb:f0:6f:0c:62:f8:9f:2e:71:c7:3e:a4:23:84:94:
                    d9:b2:e1:51:af:a0:2b:23:f5:34:6d:a4:81:d1:3f:
                    d3:d6:b3:dd:38:d2:3f:4a:13:72:3f:f1:71:4e:6b:
                    a5:6b:7d:e3:23:6e:c5:18:ff:37:4a:56:cd:ba:9d:
                    96:9c:b3:24:37:88:e5:57:a7:f2:92:19:ef:bf:58:
                    b0:0b:b0:76:19:e6:87:2f:ab:42:b4:64:6a:3c:3e:
                    a2:48:c8:aa:69:fa:2c:3e:2a:95:3f:02:de:ba:74:
                    de:1f:8a:44:3d:e8:ca:77:de:7c:d2:0f:14:2e:ca:
                    81:fc:93:9e:0a:f9:49:44:1e:93:04:70:a5:a6:de:
                    c9:60:2a:a1:2b:bf:5e:f1:61:84:06:f3:bc:ed:fe:
                    f2:47:d4:eb:05:2d:85:d1:44:b8:7c:f4:75:18:04:
                    14:db:03:9f:33:6d:58:c2:24:bf:79:c5:56:ad:9c:
                    3b:e2:ce:6c:cf:9c:8c:2c:2e:ed:1e:32:41:a0:68:
                    d2:0c:3f:56:16:29:c2:e8:b1:d1:cf:e1:69:5d:3d:
                    5d:e3:43:98:da:4b:38:ce:7c:77:83:84:c9:5d:ff:
                    06:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D2:88:5A:FB:8D:2A:C9:95:5A:98:1B:95:65:BD:89:97:52:51:8A
            X509v3 Authority Key Identifier:
                keyid:E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132322e302f32342d3234203d3e20323636383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:de:28:eb:b5:01:48:18:8c:89:cd:8a:47:77:16:9b:c1:6c:
         a3:cc:7a:8a:54:b3:b2:31:a8:a7:fe:b9:50:6f:b9:e2:06:df:
         9d:28:6f:89:3d:27:b1:7b:90:4e:e2:14:bf:5e:61:27:c7:89:
         d5:07:32:50:bd:43:89:73:31:31:fd:ba:c0:1d:29:d1:9f:a4:
         aa:06:fe:e1:f3:f1:ff:c7:b1:bd:02:46:58:d1:28:49:f7:42:
         a6:a7:63:db:7b:17:6b:ea:bb:32:13:a9:28:69:5c:25:9f:41:
         e2:35:19:9b:88:71:f4:e0:5e:1d:e6:e1:f8:07:c4:e3:de:ff:
         a1:33:90:14:a5:47:b9:cc:97:c6:cc:3f:9a:a0:ce:81:b3:cf:
         04:a6:aa:61:3d:40:19:50:0d:6f:f7:aa:98:5e:d2:04:aa:4a:
         05:a9:db:df:a1:5a:fa:a5:47:c5:cb:40:7e:a1:8a:d5:24:fa:
         8b:ba:f2:3a:74:6a:49:14:15:6f:9d:eb:e7:5f:62:86:01:29:
         10:8d:f6:b9:87:8f:05:f2:69:f3:fa:27:ee:85:52:ba:ea:54:
         02:8a:dc:3d:c8:be:3c:ec:53:c5:90:41:ad:38:91:6b:82:ba:
         26:2e:81:d7:b6:4a:00:06:95:15:de:99:a2:1c:7c:b0:95:03:
         e9:0d:c5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:37 2025 by rpki-client