Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/34352e3136332e3134332e302f32342d3234203d3e20323637363836.roa
File:                     34352e3136332e3134332e302f32342d3234203d3e20323637363836.roa (raw, json)
Hash identifier:          tJ4bDgPwgul2eyC3W6vgeXHC7oJXlSK8n04SNp46rfU=
Subject key identifier:   EE:1A:AC:BB:24:D8:E9:5D:7C:5B:9E:0A:C3:1B:45:96:F8:5A:B3:D3
Certificate issuer:       /CN=DA19E2D8391E84E168C007F85FDC2E229A1D9BC4
Certificate serial:       125DBEE8A4482A07B1106B1AA53B8A1033A0057E
Authority key identifier: DA:19:E2:D8:39:1E:84:E1:68:C0:07:F8:5F:DC:2E:22:9A:1D:9B:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/34352e3136332e3134332e302f32342d3234203d3e20323637363836.roa
Signing time:             Tue 04 Feb 2025 18:11:30 +0000
ROA not before:           Tue 04 Feb 2025 18:06:30 +0000
ROA not after:            Tue 03 Feb 2026 18:11:30 +0000
asID:                     267686
IP address blocks:        45.163.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 05:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5d:be:e8:a4:48:2a:07:b1:10:6b:1a:a5:3b:8a:10:33:a0:05:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA19E2D8391E84E168C007F85FDC2E229A1D9BC4
        Validity
            Not Before: Feb  4 18:06:30 2025 GMT
            Not After : Feb  3 18:11:30 2026 GMT
        Subject: CN=EE1AACBB24D8E95D7C5B9E0AC31B4596F85AB3D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:34:c9:c5:4b:03:df:9e:a2:ec:88:79:88:
                    a0:e7:ab:89:de:5e:11:1c:0f:97:59:79:a8:06:8a:
                    74:1f:65:47:c2:c2:f1:7a:eb:0a:41:0f:5f:7c:d5:
                    b7:25:65:66:23:4e:13:08:88:ab:cf:c7:fe:d7:a8:
                    e7:e6:08:4e:3e:f6:08:01:1c:6b:60:46:35:3b:fc:
                    9e:5f:99:f0:7d:b7:62:c9:f2:cf:1b:0e:6a:15:80:
                    fd:79:2a:66:c7:40:08:d7:70:ed:76:16:a8:9c:7b:
                    f1:d5:ff:89:64:53:d8:1b:fb:dc:f8:61:df:ad:ce:
                    ff:81:4b:6e:07:72:9d:19:b4:7e:4e:1f:ed:f6:e6:
                    2c:36:9e:b7:14:84:0e:4c:45:c2:d6:c8:8d:dc:b5:
                    24:c7:10:0c:1d:ca:0d:17:b4:11:54:c2:95:08:c4:
                    8d:99:9a:48:84:48:d2:f4:3b:c2:a6:b7:a3:4c:a8:
                    9b:1d:df:d3:c9:51:08:10:9d:ac:b7:91:06:67:11:
                    26:ca:9e:4c:43:2d:66:0e:16:a2:34:c7:31:1c:93:
                    ea:9a:56:48:37:19:86:96:77:19:87:0a:d5:7b:03:
                    09:81:8c:c7:9f:e2:74:6b:90:36:99:76:5f:8c:36:
                    b6:b7:fc:7d:96:f6:52:40:51:6b:f5:c7:ed:7d:ce:
                    9a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1A:AC:BB:24:D8:E9:5D:7C:5B:9E:0A:C3:1B:45:96:F8:5A:B3:D3
            X509v3 Authority Key Identifier:
                keyid:DA:19:E2:D8:39:1E:84:E1:68:C0:07:F8:5F:DC:2E:22:9A:1D:9B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/34352e3136332e3134332e302f32342d3234203d3e20323637363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:d9:97:ed:e1:3b:c6:9b:b7:92:dd:c0:81:76:c3:9d:6f:71:
         27:b5:a8:c4:c4:c9:18:bc:4a:0f:b1:f7:60:1c:90:94:7b:8e:
         07:1f:1f:9e:61:84:dd:36:ce:55:80:ed:8f:1d:5c:2d:7b:49:
         33:d8:1c:92:80:f1:11:0f:de:05:13:ce:01:86:dd:30:27:60:
         1f:68:38:d9:f1:6a:2f:5f:d2:a1:07:85:51:70:7c:0f:02:d7:
         81:28:77:b4:a6:e7:ff:f4:59:82:03:e5:a1:59:eb:8a:8a:87:
         ce:de:c9:e3:c4:22:9d:50:30:66:43:ed:cd:77:86:86:7d:a5:
         07:92:75:87:e6:63:b9:be:34:ea:ad:eb:48:4f:65:71:04:10:
         23:95:e5:15:a5:fa:44:9b:63:4f:23:24:3a:2c:ca:49:88:d8:
         cc:96:a8:d3:25:53:1a:f5:13:37:8e:b9:98:6d:67:77:8a:1d:
         77:6b:92:8a:1b:18:ab:9e:be:ad:b9:12:e3:fe:3f:c1:66:b3:
         21:67:07:83:13:1e:ca:5f:00:9b:31:24:71:6e:36:a5:71:64:
         5d:52:dd:9c:d5:72:d0:71:3c:a6:22:c8:c2:ad:8e:79:0f:58:
         22:63:25:b7:8a:94:a2:34:14:6c:66:78:9c:69:f7:5c:16:a1:
         3b:2f:7e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:01 2025 by rpki-client