Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/34352e36382e35312e302f32342d3234203d3e20323733313439.roa
File:                     34352e36382e35312e302f32342d3234203d3e20323733313439.roa (raw, json)
Hash identifier:          2oNZ+eM1C1ZWGeYkxpzEzwVaMJSEOWPrSfBj3V3pItw=
Subject key identifier:   55:C2:FF:2C:35:16:EC:B4:5D:92:DA:3E:5E:2C:82:95:98:A1:B2:7F
Certificate issuer:       /CN=7039B2C15CFC707C0F3843B1C8341A31CE412765
Certificate serial:       0E921624CA99BAC9CFF6186C348C8D5C230B213D
Authority key identifier: 70:39:B2:C1:5C:FC:70:7C:0F:38:43:B1:C8:34:1A:31:CE:41:27:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/34352e36382e35312e302f32342d3234203d3e20323733313439.roa
Signing time:             Tue 04 Feb 2025 20:07:08 +0000
ROA not before:           Tue 04 Feb 2025 20:02:08 +0000
ROA not after:            Tue 03 Feb 2026 20:07:08 +0000
asID:                     273149
IP address blocks:        45.68.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:92:16:24:ca:99:ba:c9:cf:f6:18:6c:34:8c:8d:5c:23:0b:21:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7039B2C15CFC707C0F3843B1C8341A31CE412765
        Validity
            Not Before: Feb  4 20:02:08 2025 GMT
            Not After : Feb  3 20:07:08 2026 GMT
        Subject: CN=55C2FF2C3516ECB45D92DA3E5E2C829598A1B27F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:66:ff:4b:76:1f:f1:b6:ec:b4:3f:7b:0c:49:
                    67:04:ef:a3:66:36:83:24:8a:2b:c4:da:76:1f:fc:
                    0a:7e:79:2b:c1:a2:c0:0c:09:f2:84:f3:83:21:1f:
                    8c:f3:68:f6:f0:20:89:8d:e9:0f:8e:ef:94:cf:7a:
                    3b:a3:d5:6a:4e:62:52:b6:82:89:85:42:0f:68:01:
                    d5:f1:83:0e:73:6b:9e:ef:c0:7d:ed:0e:0f:b4:8e:
                    af:56:31:1f:31:6c:aa:11:5b:f8:68:c8:ff:ce:d7:
                    78:c2:03:52:2b:79:ca:6e:7d:9b:1e:9e:fa:2b:2d:
                    0f:f0:a3:58:fe:70:5e:99:2a:31:a2:87:0f:f9:8c:
                    f9:a0:fa:46:bd:ff:17:31:e9:99:30:41:17:69:8d:
                    f3:62:3c:88:0e:76:3b:92:e8:53:4e:f6:27:ff:fa:
                    f8:c0:ba:19:10:24:05:f5:de:98:4b:53:4b:17:c5:
                    c8:e2:67:d0:c4:c3:6d:29:1a:da:d8:4f:1c:db:0e:
                    88:bb:e1:d5:3f:22:15:e9:9b:6e:ce:1f:cf:42:fc:
                    12:ef:c0:d0:20:41:f6:17:73:92:e2:f1:26:bb:71:
                    8c:75:e2:42:33:0e:d7:70:62:e0:12:72:39:0b:38:
                    8e:61:62:50:dd:b1:69:dc:6e:86:b8:ef:0c:ac:5a:
                    9c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C2:FF:2C:35:16:EC:B4:5D:92:DA:3E:5E:2C:82:95:98:A1:B2:7F
            X509v3 Authority Key Identifier:
                keyid:70:39:B2:C1:5C:FC:70:7C:0F:38:43:B1:C8:34:1A:31:CE:41:27:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/34352e36382e35312e302f32342d3234203d3e20323733313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:58:ba:62:1b:b7:de:df:87:f8:56:36:ae:18:76:af:5f:06:
         06:ef:95:9c:ea:8d:7a:1e:5e:55:b4:92:3e:48:a4:2f:58:57:
         f2:68:71:e4:5e:7c:9d:0f:a8:c5:d3:b0:2b:35:45:dc:34:f8:
         6d:ed:cb:41:df:a5:ec:29:f5:64:6c:7c:43:ce:f1:02:59:3a:
         cf:c5:4f:4b:4f:e3:dc:6c:27:1e:bf:cc:e4:c8:fa:85:2e:1f:
         69:39:04:cc:e9:11:bc:dd:b8:7b:3f:d0:3f:66:80:8c:e2:fc:
         db:b7:ab:91:e2:9d:db:05:f7:ae:8f:e6:51:8b:f8:07:cf:e7:
         b7:a2:5f:d7:cd:2f:52:94:be:77:21:2e:33:11:e4:3d:da:09:
         e1:2b:14:ff:bd:25:ae:fb:40:ec:d4:14:9d:c5:f5:d1:48:ab:
         16:1d:f6:8f:62:33:48:3a:4a:ae:39:00:be:9f:57:ba:9f:97:
         4c:38:91:5d:f3:ac:6d:6d:32:9c:bd:30:eb:4a:c2:84:e0:5d:
         c2:bc:06:d4:36:55:fb:fb:d1:88:8e:57:b2:b4:01:65:88:29:
         2a:72:74:e8:69:e8:6a:c9:e4:77:3b:7a:a6:00:d7:4a:57:ef:
         41:23:c3:6f:8f:ec:4f:b9:7c:fe:f8:9e:03:77:c4:27:a8:6a:
         8f:0c:25:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:03 2025 by rpki-client