Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/34352e3136332e3134302e302f32342d3234203d3e20323637363836.roa
File:                     34352e3136332e3134302e302f32342d3234203d3e20323637363836.roa (raw, json)
Hash identifier:          +q6gdfD+w5AJaAJOxN0PZrP2kmHqtvaOZk6ilMoo7pw=
Subject key identifier:   3B:1F:A2:48:19:8F:FE:9C:18:AC:90:3B:D9:ED:C0:AF:D9:38:D4:32
Certificate issuer:       /CN=DA19E2D8391E84E168C007F85FDC2E229A1D9BC4
Certificate serial:       13303CDA4EACC7C6C52E5DD2CDDBD6B4741DF062
Authority key identifier: DA:19:E2:D8:39:1E:84:E1:68:C0:07:F8:5F:DC:2E:22:9A:1D:9B:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/34352e3136332e3134302e302f32342d3234203d3e20323637363836.roa
Signing time:             Tue 04 Feb 2025 18:11:30 +0000
ROA not before:           Tue 04 Feb 2025 18:06:30 +0000
ROA not after:            Tue 03 Feb 2026 18:11:30 +0000
asID:                     267686
IP address blocks:        45.163.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 05:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:30:3c:da:4e:ac:c7:c6:c5:2e:5d:d2:cd:db:d6:b4:74:1d:f0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA19E2D8391E84E168C007F85FDC2E229A1D9BC4
        Validity
            Not Before: Feb  4 18:06:30 2025 GMT
            Not After : Feb  3 18:11:30 2026 GMT
        Subject: CN=3B1FA248198FFE9C18AC903BD9EDC0AFD938D432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1d:6e:f4:f1:1b:97:2c:e0:d9:d2:e8:45:fa:
                    0e:c4:f6:9a:7f:eb:ed:b7:87:d9:49:8d:ad:82:3a:
                    20:26:9f:3a:d0:17:d7:1b:1c:9a:da:d9:f9:29:c5:
                    0f:43:aa:c8:a7:ac:f1:01:98:9b:39:b1:aa:f8:79:
                    5c:37:a6:96:27:18:b1:a1:20:ce:ad:b9:fb:82:4a:
                    3b:51:36:02:95:58:d4:b1:37:59:84:11:f6:cd:7f:
                    12:33:a7:23:94:50:44:62:0c:d1:24:f3:64:ac:9b:
                    ba:83:ee:b3:44:b7:54:57:23:cd:33:71:02:8d:b9:
                    29:07:40:8f:09:57:d7:df:87:9f:03:2e:0e:dd:5e:
                    df:24:5b:55:e5:af:37:33:9e:fb:ef:0f:6c:6f:87:
                    72:0c:d7:c9:b1:03:74:fe:0d:33:7c:0a:81:38:5c:
                    4e:53:a5:ab:d0:dd:7c:10:f5:53:3f:7d:cd:5d:e3:
                    95:62:e0:a7:3d:42:7b:53:25:7e:a8:ef:fa:3e:74:
                    8a:ee:8f:9e:47:54:e6:22:79:a4:46:52:3e:b4:d6:
                    79:a2:78:1b:47:49:e8:de:18:d1:cc:74:27:a2:ab:
                    9a:98:ff:13:9d:ab:30:23:b6:90:53:0f:8d:95:c3:
                    25:af:30:68:67:e4:a9:d4:14:55:71:ef:07:3f:fa:
                    15:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1F:A2:48:19:8F:FE:9C:18:AC:90:3B:D9:ED:C0:AF:D9:38:D4:32
            X509v3 Authority Key Identifier:
                keyid:DA:19:E2:D8:39:1E:84:E1:68:C0:07:F8:5F:DC:2E:22:9A:1D:9B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/34352e3136332e3134302e302f32342d3234203d3e20323637363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:da:02:5c:0e:55:50:0b:92:63:c6:5e:05:27:dc:ce:92:fa:
         be:37:7e:05:84:3b:a6:10:83:a1:31:47:54:5d:0c:c6:39:f3:
         bc:ba:d2:c3:a5:5e:0e:b9:48:41:d7:f3:78:85:f1:55:5c:8f:
         21:81:39:24:e8:96:fa:ab:69:6c:15:aa:35:f0:da:b5:e9:b9:
         be:65:41:a2:28:df:d9:b0:1c:96:57:db:b6:94:b8:c2:d0:8d:
         d6:b7:85:1e:be:1c:ec:c2:30:d3:f7:04:e8:f3:3d:54:53:7b:
         88:95:7d:40:88:c7:78:ca:12:08:99:24:4b:e6:9e:47:71:12:
         7d:db:d2:0d:c8:38:14:9a:5b:3a:e6:ec:ce:b1:5f:6f:44:6b:
         ee:2d:45:c2:64:64:08:03:c4:f7:1e:80:c9:61:41:13:34:7b:
         52:b0:8e:39:8d:e9:a6:c1:1f:a2:e6:48:9a:39:fd:b0:da:e8:
         ab:c7:2b:cc:65:4d:c5:94:a8:90:f4:e0:10:c2:b8:d1:70:21:
         ca:7a:02:d3:ee:3a:c9:16:c0:34:56:75:ff:0d:d9:36:fb:e1:
         e5:b4:9f:d6:eb:f8:cd:0a:8d:ac:8d:39:7d:c0:d3:8a:0e:2a:
         21:6a:86:ec:70:65:ae:e3:1c:e8:8f:08:03:89:96:dd:9d:77:
         71:61:2f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:06:55 2025 by rpki-client