Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/34352e3232372e39332e302f32342d3234203d3e20323636363533.roa
File:                     34352e3232372e39332e302f32342d3234203d3e20323636363533.roa (raw, json)
Hash identifier:          rNDU2Hfr3Z1ZFwluiAlGSnOh8xcQ+pqCZ7Zt4VmAjhU=
Subject key identifier:   56:5F:55:E8:9C:A3:23:25:6E:98:F3:B4:C4:8A:A0:D1:AB:13:B2:33
Certificate issuer:       /CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4
Certificate serial:       0D5C4F4FF0916C23D329CBEC38C8FE462ECEB265
Authority key identifier: FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/34352e3232372e39332e302f32342d3234203d3e20323636363533.roa
Signing time:             Tue 18 Mar 2025 23:12:24 +0000
ROA not before:           Tue 18 Mar 2025 23:07:24 +0000
ROA not after:            Tue 17 Mar 2026 23:12:24 +0000
asID:                     266653
IP address blocks:        45.227.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5c:4f:4f:f0:91:6c:23:d3:29:cb:ec:38:c8:fe:46:2e:ce:b2:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4
        Validity
            Not Before: Mar 18 23:07:24 2025 GMT
            Not After : Mar 17 23:12:24 2026 GMT
        Subject: CN=565F55E89CA323256E98F3B4C48AA0D1AB13B233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:41:f4:25:c6:ff:f0:72:66:62:27:5a:a3:4f:
                    fe:7d:a6:e0:4a:1c:b8:94:51:c4:af:ad:dc:80:9b:
                    a4:e6:79:57:0b:4d:0f:61:dd:39:9f:0b:5f:de:b4:
                    69:79:73:24:32:be:7f:bc:d0:e4:e1:01:bb:36:e0:
                    34:1c:b7:71:9e:b1:48:02:60:fd:c1:fc:db:6d:b3:
                    c4:87:59:80:09:54:08:74:04:1a:51:51:b1:59:80:
                    cc:6e:84:fe:a2:06:27:ee:60:dc:2a:fa:45:34:ed:
                    72:36:12:fc:02:40:10:12:58:d4:da:b1:2c:f0:a8:
                    4a:95:ec:07:c2:6e:d3:af:c1:cd:e3:4f:c8:14:1c:
                    ac:18:11:87:85:a4:5f:7f:9f:3f:d4:f2:f9:86:3e:
                    f8:44:5e:e0:f0:27:ad:5c:a8:4b:e5:62:3a:12:63:
                    b5:28:87:37:a8:f5:7e:5a:07:4c:94:d3:79:7c:ac:
                    b5:b0:04:a9:d5:e6:c5:c2:1d:5a:fe:32:a7:c9:bc:
                    7d:11:ed:54:65:cf:9b:1c:a2:c6:ea:6b:ff:12:ff:
                    c2:84:97:e8:88:48:94:6f:c6:52:7b:11:64:66:17:
                    55:bd:72:ef:22:2c:37:9e:36:d7:d5:51:8b:9c:43:
                    8f:7b:9a:65:55:99:2c:30:91:fd:a5:d5:eb:bb:c4:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5F:55:E8:9C:A3:23:25:6E:98:F3:B4:C4:8A:A0:D1:AB:13:B2:33
            X509v3 Authority Key Identifier:
                keyid:FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/34352e3232372e39332e302f32342d3234203d3e20323636363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:b7:87:13:9b:6a:35:ad:f3:53:01:31:2a:14:51:b8:85:97:
         3a:e6:8c:3a:55:a7:d4:ed:5e:4a:7a:06:72:ad:31:08:e3:7e:
         7d:a3:4d:bd:8a:e4:dd:73:91:04:c6:d4:12:75:e9:66:7f:0a:
         da:05:fa:eb:cb:52:db:29:92:47:5d:38:ee:32:1f:9d:7e:f1:
         52:71:27:be:b1:ea:f6:62:c1:32:52:d9:09:53:e5:71:48:db:
         95:49:a2:d8:4d:4a:7b:d0:41:cf:9e:96:5e:92:df:12:c4:70:
         5c:bd:99:af:11:7d:6e:83:18:59:d9:81:77:eb:20:48:87:12:
         e7:29:00:16:ed:ac:5b:cc:47:29:73:ce:12:08:96:9f:e9:7c:
         c8:21:59:51:53:43:8d:77:58:ce:e5:62:3c:3c:b6:3c:16:52:
         38:3e:fc:bf:ce:bf:35:f1:05:35:77:37:01:46:fe:ce:7c:d4:
         22:38:a1:69:e8:22:fe:28:4f:74:15:94:3b:1c:6f:e3:b7:a1:
         5a:f0:e0:f7:8a:c9:14:0e:42:fc:37:36:4d:9b:c8:8d:5a:f4:
         88:75:d6:b3:6d:94:74:8a:cc:b2:0f:e4:7c:fd:8c:de:3c:43:
         8e:ae:2e:8a:09:1c:50:8f:c7:94:51:a5:b2:9d:4b:74:25:be:
         90:f6:54:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:18:18 2025 by rpki-client