Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/34352e3232372e39352e302f32342d3234203d3e20323636363533.roa
File:                     34352e3232372e39352e302f32342d3234203d3e20323636363533.roa (raw, json)
Hash identifier:          TPcrRO0g+QcYqO0psycw6P+GtSc21T0fE0LpSRHLS3g=
Subject key identifier:   04:E5:9B:F0:0D:1B:DD:F1:8E:2B:04:23:BD:73:2B:2E:A5:17:43:EA
Certificate issuer:       /CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4
Certificate serial:       1CA9E7017811F5C1849E94AD46C189DE1DC1193E
Authority key identifier: FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/34352e3232372e39352e302f32342d3234203d3e20323636363533.roa
Signing time:             Tue 18 Mar 2025 23:12:24 +0000
ROA not before:           Tue 18 Mar 2025 23:07:24 +0000
ROA not after:            Tue 17 Mar 2026 23:12:24 +0000
asID:                     266653
IP address blocks:        45.227.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a9:e7:01:78:11:f5:c1:84:9e:94:ad:46:c1:89:de:1d:c1:19:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFBA5106E70D91E3861B5395B2D156C56E9589E4
        Validity
            Not Before: Mar 18 23:07:24 2025 GMT
            Not After : Mar 17 23:12:24 2026 GMT
        Subject: CN=04E59BF00D1BDDF18E2B0423BD732B2EA51743EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:72:db:b4:9d:52:72:8d:c6:d9:71:27:2d:90:
                    f1:f9:d0:38:aa:09:7a:ee:45:b5:2e:b9:82:d0:d3:
                    bc:31:72:12:70:6a:e0:59:57:8d:49:21:be:76:d3:
                    6f:65:7e:22:d8:03:81:de:35:f6:8a:fb:1d:09:33:
                    73:8a:a1:c7:4a:57:2c:f1:f0:11:e6:e4:a5:4a:43:
                    e5:76:c6:9d:08:83:6f:f5:03:9e:b2:46:9b:a1:51:
                    c6:d4:fd:9a:32:b9:3b:1e:4e:21:19:a1:bd:68:46:
                    5d:e4:dd:72:d9:37:a3:7c:f5:19:e2:da:ea:b6:9b:
                    bb:cb:58:7e:bf:ff:29:18:a2:ee:38:fa:48:7b:46:
                    fe:2d:db:33:d4:2e:f3:9a:58:ef:13:66:06:0c:e5:
                    f3:13:e2:f4:3c:5a:c1:93:64:3d:b6:f0:e3:49:23:
                    28:c3:78:b3:3a:fd:43:44:20:15:4c:25:57:46:f5:
                    71:34:cb:66:88:52:d3:68:14:ff:f5:20:53:ea:a3:
                    e2:20:4e:89:67:fb:86:a2:4d:6e:96:76:6a:cd:b2:
                    62:f9:57:5f:34:71:d1:f9:2b:53:21:77:6e:7a:33:
                    2e:30:b5:7d:2d:bc:31:78:6a:0a:dd:5b:36:d1:33:
                    2d:a0:73:cc:2a:e8:24:b8:7c:e2:03:8e:8e:84:a1:
                    1b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E5:9B:F0:0D:1B:DD:F1:8E:2B:04:23:BD:73:2B:2E:A5:17:43:EA
            X509v3 Authority Key Identifier:
                keyid:FF:BA:51:06:E7:0D:91:E3:86:1B:53:95:B2:D1:56:C5:6E:95:89:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFBA5106E70D91E3861B5395B2D156C56E9589E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FFCA767638A4DD39C6A6D7E2BA39772CDA296DEE6BF36A333C7FDCE89D7F225/0/34352e3232372e39352e302f32342d3234203d3e20323636363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:fb:37:4f:cd:34:ce:e8:7b:e5:73:6f:82:c2:da:58:1c:05:
         0c:ff:eb:1f:c6:d0:c6:89:ab:80:0c:3f:66:49:fb:05:7d:62:
         c0:a5:d8:b6:e4:0f:95:7c:3e:f6:34:6d:a9:dd:8a:2a:c9:c6:
         72:05:27:ff:6e:fd:39:eb:09:5c:08:14:f6:2e:97:9e:fd:cc:
         df:3f:f0:2a:34:0f:b8:7a:4a:dd:e1:c6:17:fa:45:4c:de:d2:
         47:40:80:5f:1d:db:23:ae:25:3e:b3:bf:b7:82:1b:5f:d0:72:
         09:f6:b4:f7:56:19:15:8c:80:14:f0:54:09:28:d5:7b:a5:42:
         9f:3d:d1:50:9f:59:23:72:14:90:fb:21:65:64:3e:7b:e4:d6:
         43:df:19:78:2e:19:ff:15:91:bb:f9:34:42:bc:c0:57:0f:3d:
         78:d9:0f:23:02:0f:c4:ac:37:cc:d9:22:9c:ec:0a:cd:6f:7f:
         45:ab:65:8c:60:12:84:5f:b4:c8:f4:0f:9f:3c:b5:1a:f4:9a:
         4e:72:f0:64:ff:f3:d3:57:5a:1a:34:ae:66:d5:53:b9:35:72:
         4f:5d:2f:8a:84:12:24:fc:9b:58:47:8d:5d:90:20:b7:bb:17:
         d7:2b:2e:2f:d2:ec:bf:00:82:25:39:9d:23:66:b3:1f:a5:b9:
         19:70:01:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:18:17 2025 by rpki-client