Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3235312e302f32342d3234203d3e203238343233.roa
File:                     34352e3137302e3235312e302f32342d3234203d3e203238343233.roa (raw, json)
Hash identifier:          CisVDh7iKxVM+B6TAeMpo7lL9OOM1QsVO7SFoxpUvFQ=
Subject key identifier:   57:71:7D:F6:EA:22:05:38:80:4E:6B:AA:67:9F:5B:5A:19:0D:8D:BA
Certificate issuer:       /CN=69FB064988CC6E77E3A9CF5D423A459765DC4E1B
Certificate serial:       4572861F10E7A8219CB529DE250303D2649A137C
Authority key identifier: 69:FB:06:49:88:CC:6E:77:E3:A9:CF:5D:42:3A:45:97:65:DC:4E:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3235312e302f32342d3234203d3e203238343233.roa
Signing time:             Sun 26 Jan 2025 01:40:03 +0000
ROA not before:           Sun 26 Jan 2025 01:35:03 +0000
ROA not after:            Sun 25 Jan 2026 01:40:03 +0000
asID:                     28423
IP address blocks:        45.170.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:72:86:1f:10:e7:a8:21:9c:b5:29:de:25:03:03:d2:64:9a:13:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FB064988CC6E77E3A9CF5D423A459765DC4E1B
        Validity
            Not Before: Jan 26 01:35:03 2025 GMT
            Not After : Jan 25 01:40:03 2026 GMT
        Subject: CN=57717DF6EA220538804E6BAA679F5B5A190D8DBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:60:ae:9d:5b:41:ab:d1:3c:20:2d:4b:ab:
                    91:b5:19:e6:65:df:ef:e2:3c:af:dc:50:71:91:be:
                    58:a0:95:1a:b0:2f:da:21:d7:a0:8f:6a:85:51:5d:
                    d0:a4:55:48:9b:8d:8a:69:8e:0a:54:a1:b7:22:07:
                    b9:f2:62:a1:b6:28:2b:9d:60:2b:a4:8e:c3:4a:88:
                    8b:05:d8:88:04:f0:2b:a6:e4:c9:a8:fc:29:95:59:
                    af:4c:12:3a:3f:d6:9c:05:11:92:11:cd:92:39:81:
                    cc:cb:57:e4:d5:d1:2d:d1:a6:7d:4f:b2:dc:79:4c:
                    d4:70:ca:6f:61:39:6d:58:e4:11:9f:2d:d7:22:4f:
                    11:6e:bb:f3:ae:e1:d8:40:37:68:a6:c1:77:8d:54:
                    1a:4f:8e:d3:97:4b:c4:10:26:42:25:03:40:ca:b9:
                    95:6a:97:14:5c:b3:90:57:04:4e:e4:cb:b1:b9:ca:
                    51:2b:0f:a1:01:ec:33:63:46:ec:d1:b0:70:36:21:
                    19:9a:47:6c:dd:72:b2:a8:c5:48:10:4f:dd:f0:37:
                    e9:41:36:5f:64:3b:04:a5:13:31:d0:40:8f:3b:53:
                    bc:47:f6:88:b0:81:72:35:3f:22:78:91:37:c2:cf:
                    53:50:f5:5b:ab:63:e6:cf:0b:c7:ce:b7:c0:60:55:
                    11:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:71:7D:F6:EA:22:05:38:80:4E:6B:AA:67:9F:5B:5A:19:0D:8D:BA
            X509v3 Authority Key Identifier:
                keyid:69:FB:06:49:88:CC:6E:77:E3:A9:CF:5D:42:3A:45:97:65:DC:4E:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3235312e302f32342d3234203d3e203238343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:0b:01:ca:e3:c4:14:37:e4:77:41:e6:0f:75:cb:4b:a1:37:
         bb:16:53:9f:25:13:a6:9d:d4:3c:16:bb:4e:31:cc:d8:4f:8e:
         26:88:16:e6:be:2b:f9:1f:f2:ca:cd:86:08:24:57:ee:1c:d1:
         ff:35:99:53:ba:24:08:4a:4f:82:60:5f:5d:95:ca:65:a3:f8:
         69:c6:ff:9e:0e:d4:db:da:28:40:ef:a9:5d:0a:00:e1:d0:a9:
         a7:c5:61:ab:34:96:ec:3e:b9:19:1a:07:39:91:be:01:8e:9d:
         ae:ad:eb:d6:b7:c7:d9:0d:d6:21:52:4e:2a:1a:c7:2f:5f:7d:
         4f:91:f3:f8:ca:e9:1b:9e:43:7a:e4:d7:63:a0:6d:8f:8f:fd:
         11:c2:c8:e1:69:37:b6:f9:6a:68:5b:48:10:6d:fc:1f:18:f9:
         24:67:f2:a4:b3:2f:85:27:36:6c:07:d3:b6:95:24:38:c2:3a:
         aa:2f:79:fe:91:5c:44:f1:db:23:4d:ed:05:ae:80:69:58:bd:
         71:71:5b:88:6d:73:6a:a6:72:03:60:36:75:ef:d0:2b:bf:84:
         f8:f1:39:35:d0:3c:c8:6e:cb:68:49:25:3f:3e:f5:58:dd:eb:
         ca:ac:94:45:ba:03:0e:4a:2d:f3:e5:8e:4a:44:77:56:66:3d:
         ca:4c:00:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:56 2025 by rpki-client