Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/34352e3232352e302e302f32342d3234203d3e20323635383537.roa
File:                     34352e3232352e302e302f32342d3234203d3e20323635383537.roa (raw, json)
Hash identifier:          xbUll9pSzB/8l3e/d35ShqgHHYsmjGiuXGwca8n9M/g=
Subject key identifier:   E6:69:11:AC:46:E7:D9:71:5F:5E:95:70:24:F1:B3:13:C1:7D:91:43
Certificate issuer:       /CN=B1225D42FCF145DB2561F136DC359390925409AD
Certificate serial:       6C387CBCEB354366CE7DBC47D1CB287BEA9E31DB
Authority key identifier: B1:22:5D:42:FC:F1:45:DB:25:61:F1:36:DC:35:93:90:92:54:09:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1225D42FCF145DB2561F136DC359390925409AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/34352e3232352e302e302f32342d3234203d3e20323635383537.roa
Signing time:             Tue 04 Feb 2025 18:24:35 +0000
ROA not before:           Tue 04 Feb 2025 18:19:35 +0000
ROA not after:            Tue 03 Feb 2026 18:24:35 +0000
asID:                     265857
IP address blocks:        45.225.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1225D42FCF145DB2561F136DC359390925409AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:38:7c:bc:eb:35:43:66:ce:7d:bc:47:d1:cb:28:7b:ea:9e:31:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1225D42FCF145DB2561F136DC359390925409AD
        Validity
            Not Before: Feb  4 18:19:35 2025 GMT
            Not After : Feb  3 18:24:35 2026 GMT
        Subject: CN=E66911AC46E7D9715F5E957024F1B313C17D9143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:18:15:09:86:1d:e3:83:ec:e3:24:17:d6:89:
                    c6:d6:30:36:33:03:46:b7:75:34:2a:ca:7c:87:67:
                    62:1d:be:0c:1d:22:25:f2:8a:cd:5c:4d:4b:78:d7:
                    83:73:1e:0c:90:01:a6:9e:e8:d3:07:cb:4b:12:ec:
                    59:f1:c6:b6:2d:02:6f:dc:29:09:14:52:f8:c1:1f:
                    b3:06:b1:d4:cf:d2:d4:69:99:ea:5b:90:75:3a:ca:
                    a3:3e:e6:99:d4:64:f7:23:cd:98:59:e1:b6:47:50:
                    d3:23:2a:c6:7f:3f:da:d2:22:c1:78:82:cb:64:73:
                    f3:71:ce:f9:1b:a0:98:b5:25:a9:c0:52:e9:50:fe:
                    b5:d8:b7:22:bb:1b:a8:c1:4d:b2:3d:01:e2:8e:f0:
                    d8:ed:eb:ee:f0:66:d5:e7:06:55:b0:a9:f4:03:34:
                    3b:b2:1d:5e:13:f7:a5:0f:79:3f:d0:d6:81:66:26:
                    cb:33:05:70:7c:6f:fe:1c:68:71:1e:25:fd:e3:8e:
                    b6:a2:fe:60:15:db:8a:22:19:8b:f8:42:78:b7:0a:
                    e3:cb:0d:3a:5f:83:8b:87:14:b6:2e:1d:0e:c1:37:
                    dc:a8:e1:d1:8b:44:34:c5:4d:df:80:0e:00:44:b0:
                    4e:70:cd:bd:e0:5a:de:33:0e:9e:f9:0f:6d:27:d4:
                    a1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:69:11:AC:46:E7:D9:71:5F:5E:95:70:24:F1:B3:13:C1:7D:91:43
            X509v3 Authority Key Identifier:
                keyid:B1:22:5D:42:FC:F1:45:DB:25:61:F1:36:DC:35:93:90:92:54:09:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1225D42FCF145DB2561F136DC359390925409AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/34352e3232352e302e302f32342d3234203d3e20323635383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:66:89:f5:ed:23:f7:1e:a1:1f:f9:d3:73:13:0d:2a:c4:b4:
         01:16:04:3d:29:f4:70:59:88:84:8e:e5:c7:62:c0:f9:a7:d3:
         7d:e5:45:d5:6a:4e:51:f9:9f:bc:71:9a:fd:4e:5c:c7:4c:04:
         c5:aa:3d:41:60:fb:5a:39:36:f6:ea:ea:43:3f:1f:63:02:57:
         a7:32:21:f2:d4:50:f7:82:6d:38:ea:f2:f9:c3:d0:cc:19:55:
         28:ac:4a:6b:50:bc:4e:de:86:c8:1e:91:5a:21:f8:3a:29:cc:
         07:7d:c3:f9:3a:a3:1a:b6:51:c9:a6:84:06:1a:13:c1:9a:4a:
         5e:01:6c:4a:31:3d:cb:ae:5e:84:1c:c9:9e:61:24:03:76:7e:
         f1:93:b8:40:a5:2d:96:03:c2:20:3f:f4:2e:2b:0b:e4:68:32:
         8f:5e:ca:6c:fd:db:38:e6:1e:21:af:57:99:a7:34:2e:71:2f:
         e1:10:48:3c:fd:aa:c2:9b:39:86:81:d0:da:68:c5:39:4a:1a:
         c3:5e:72:a7:ae:ec:5d:73:e1:73:36:c7:9d:eb:ef:d9:f2:18:
         67:40:24:74:a4:db:13:70:f4:01:be:05:eb:64:5f:02:ee:d9:
         01:09:39:3d:55:90:73:7b:58:01:ab:d9:cd:2f:65:76:9a:68:
         31:27:67:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:55:03 2025 by rpki-client