Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/34352e3232372e39322e302f32342d3234203d3e20323636363533.roa
File:                     34352e3232372e39322e302f32342d3234203d3e20323636363533.roa (raw, json)
Hash identifier:          2QLDn4G1PF9gzY6XJBm6E/GXU4TZxwKyeE0p8grIpmE=
Subject key identifier:   51:D6:F4:C6:6B:A1:6B:D1:B5:28:86:34:86:F3:D2:45:A1:5F:B2:03
Certificate issuer:       /CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4
Certificate serial:       14715646BB464B0BD22C897129602B4C0B707E3A
Authority key identifier: FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/34352e3232372e39322e302f32342d3234203d3e20323636363533.roa
Signing time:             Tue 18 Mar 2025 23:12:25 +0000
ROA not before:           Tue 18 Mar 2025 23:07:25 +0000
ROA not after:            Tue 17 Mar 2026 23:12:25 +0000
asID:                     266653
IP address blocks:        45.227.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:71:56:46:bb:46:4b:0b:d2:2c:89:71:29:60:2b:4c:0b:70:7e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4
        Validity
            Not Before: Mar 18 23:07:25 2025 GMT
            Not After : Mar 17 23:12:25 2026 GMT
        Subject: CN=51D6F4C66BA16BD1B528863486F3D245A15FB203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:a1:2d:5b:6d:1c:ca:e1:d9:f5:ce:c1:12:23:
                    c7:9c:9f:f4:b7:5c:5f:f6:b7:a9:a9:9b:f4:b1:5e:
                    44:53:23:85:dd:4e:d7:b1:f2:83:bf:a2:37:a0:2e:
                    4a:a1:0a:cb:9f:3b:cf:70:d7:4d:3a:0c:cf:99:9a:
                    16:98:67:86:5e:5e:db:de:09:29:98:09:cd:17:28:
                    bd:73:71:a4:87:16:7d:3c:fa:80:76:09:94:3b:14:
                    65:53:86:a7:2b:45:87:1b:e0:28:73:e3:8c:07:6b:
                    29:af:49:2c:44:54:62:85:4b:90:5b:b8:50:65:05:
                    18:ea:11:cf:7f:81:63:34:6d:df:e0:70:0e:b1:ce:
                    dd:f0:96:87:06:30:26:af:53:48:ff:ee:35:14:cb:
                    0e:44:1d:96:04:ad:31:8b:47:01:bc:da:6e:5a:0d:
                    4c:64:91:d8:ff:48:6a:3c:72:bc:05:58:b7:c7:53:
                    dd:1d:9a:a1:83:92:06:c1:43:51:35:59:b1:a5:bd:
                    27:90:07:ad:79:1a:57:a9:55:a3:a1:81:13:6f:f7:
                    a8:81:f0:b1:c1:3e:51:0e:2a:42:bf:49:2a:22:2f:
                    7d:21:c7:3d:63:c5:24:22:63:28:37:85:f0:37:15:
                    aa:c8:2b:09:19:91:35:6f:e6:bf:74:8c:92:c1:93:
                    e2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D6:F4:C6:6B:A1:6B:D1:B5:28:86:34:86:F3:D2:45:A1:5F:B2:03
            X509v3 Authority Key Identifier:
                keyid:FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/34352e3232372e39322e302f32342d3234203d3e20323636363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:bb:a1:b4:3e:50:d2:3f:ee:95:50:d5:8e:dd:79:cd:17:a3:
         d0:90:c4:2c:4a:d1:ac:30:07:e1:bd:3a:cf:1e:31:b9:37:ed:
         d9:1a:16:00:f1:34:75:f3:bd:c1:5e:08:ea:54:3b:69:b8:ad:
         98:72:eb:db:7b:9c:91:bd:9b:4a:46:ca:30:97:2b:4f:cd:7f:
         ab:ad:f7:8b:7f:b4:19:e8:21:4b:3c:b3:28:5d:06:64:4a:0d:
         a2:d4:92:c9:40:fd:f6:9a:b7:8e:92:7f:cb:f0:b6:bf:2a:70:
         87:58:38:a5:89:78:69:08:b8:49:e7:ec:6b:16:d0:28:f3:29:
         22:52:9b:ce:a2:8d:4a:a7:83:83:82:5f:4d:1c:ab:5e:83:fe:
         04:b7:6e:8f:f8:0a:64:20:6d:64:f4:93:9a:45:00:35:8a:8d:
         08:68:6a:d9:18:1c:81:9d:4e:f9:61:f8:c7:1e:5f:54:c5:2b:
         c5:65:23:a5:58:4b:54:ad:c7:9b:56:c2:49:3d:ad:48:ad:a8:
         b8:58:77:e8:d1:d8:b2:02:f8:02:49:47:2b:3e:fe:25:84:8c:
         5a:eb:04:fc:93:c5:73:3f:a3:f6:87:0a:d0:54:0c:89:65:8e:
         04:86:a3:70:54:06:91:8f:e7:40:9d:f1:dd:2d:89:fa:05:0e:
         1b:e2:50:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:19:27 2025 by rpki-client