Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D0A554FCFAED8F99B5EE1E73EA8259DB21F09E7923895F00B7A6279ABC889A3/0/34352e3137372e37352e302f32342d3234203d3e20323637393330.roa
File:                     34352e3137372e37352e302f32342d3234203d3e20323637393330.roa (raw, json)
Hash identifier:          x/JCm2wqLq2rsGJh9umZ69SJF+ICSwphMBvEqaEVBAE=
Subject key identifier:   0E:43:2D:94:5B:BC:58:82:75:9F:FA:AB:53:1C:6F:C1:D4:65:68:A3
Certificate issuer:       /CN=83D56D0FC54D143DFDA06E7172FF524B1AEA053C
Certificate serial:       3420D48A859AD7ED592302DFD36CC3DDAA305F77
Authority key identifier: 83:D5:6D:0F:C5:4D:14:3D:FD:A0:6E:71:72:FF:52:4B:1A:EA:05:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83D56D0FC54D143DFDA06E7172FF524B1AEA053C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D0A554FCFAED8F99B5EE1E73EA8259DB21F09E7923895F00B7A6279ABC889A3/0/34352e3137372e37352e302f32342d3234203d3e20323637393330.roa
Signing time:             Tue 04 Feb 2025 18:15:10 +0000
ROA not before:           Tue 04 Feb 2025 18:10:10 +0000
ROA not after:            Tue 03 Feb 2026 18:15:10 +0000
asID:                     267930
IP address blocks:        45.177.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D0A554FCFAED8F99B5EE1E73EA8259DB21F09E7923895F00B7A6279ABC889A3/0/83D56D0FC54D143DFDA06E7172FF524B1AEA053C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D0A554FCFAED8F99B5EE1E73EA8259DB21F09E7923895F00B7A6279ABC889A3/0/83D56D0FC54D143DFDA06E7172FF524B1AEA053C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83D56D0FC54D143DFDA06E7172FF524B1AEA053C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:20:d4:8a:85:9a:d7:ed:59:23:02:df:d3:6c:c3:dd:aa:30:5f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D56D0FC54D143DFDA06E7172FF524B1AEA053C
        Validity
            Not Before: Feb  4 18:10:10 2025 GMT
            Not After : Feb  3 18:15:10 2026 GMT
        Subject: CN=0E432D945BBC5882759FFAAB531C6FC1D46568A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:eb:2f:a6:56:8f:70:61:44:eb:28:da:7a:7e:
                    39:85:63:3a:b5:81:18:08:59:79:33:e4:14:a8:75:
                    21:fb:0b:66:b8:43:b7:15:b1:58:f2:0f:15:aa:25:
                    86:bd:48:3b:6c:9a:f7:be:5e:28:68:f0:dd:94:f9:
                    d1:1f:ea:18:22:38:7f:87:3f:af:96:d4:06:67:23:
                    ee:fb:60:54:e1:7f:25:5c:d2:65:aa:1d:e6:18:d3:
                    3b:c7:1d:85:ae:43:fb:50:15:32:c9:c0:08:fe:a9:
                    58:b5:0d:c2:50:ee:a6:37:87:b9:82:46:75:98:da:
                    7b:ec:e8:14:71:df:6c:50:07:66:5d:04:62:30:5c:
                    96:13:d1:32:78:cb:19:e2:4d:64:be:17:fd:c3:13:
                    39:71:49:04:4a:72:0a:1c:e1:50:35:ce:36:b5:fd:
                    8f:6a:70:45:0d:02:12:82:4b:a1:55:8e:89:10:25:
                    ff:63:ea:df:ac:d3:aa:be:82:18:2f:72:17:ef:32:
                    45:04:4a:d8:2f:3d:40:17:cd:8a:5c:27:52:cc:b4:
                    29:f8:2d:1a:ad:3d:44:63:80:22:8f:e6:dc:e2:56:
                    f4:82:fa:f8:51:cf:02:3b:57:3d:43:bc:53:01:d8:
                    cc:05:34:1a:bb:84:87:94:eb:42:f6:22:72:3b:1b:
                    4c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:43:2D:94:5B:BC:58:82:75:9F:FA:AB:53:1C:6F:C1:D4:65:68:A3
            X509v3 Authority Key Identifier:
                keyid:83:D5:6D:0F:C5:4D:14:3D:FD:A0:6E:71:72:FF:52:4B:1A:EA:05:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D0A554FCFAED8F99B5EE1E73EA8259DB21F09E7923895F00B7A6279ABC889A3/0/83D56D0FC54D143DFDA06E7172FF524B1AEA053C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83D56D0FC54D143DFDA06E7172FF524B1AEA053C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D0A554FCFAED8F99B5EE1E73EA8259DB21F09E7923895F00B7A6279ABC889A3/0/34352e3137372e37352e302f32342d3234203d3e20323637393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:75:83:de:1b:f6:0e:ea:23:fd:c8:98:87:4a:d8:a0:cc:26:
         7e:c3:0d:a7:4f:b8:e6:01:5a:03:d7:3c:b9:f6:ae:16:8a:8d:
         1e:0c:02:f0:ff:e2:fb:b9:ac:20:8e:2c:30:e9:c1:d9:7a:cb:
         e0:80:76:42:60:28:f8:9c:42:8f:41:54:3a:96:5c:16:17:74:
         03:6a:40:d2:ae:d6:b4:7c:20:30:8b:12:96:1f:f3:e3:34:4c:
         f0:bd:da:9d:d8:5b:41:66:8b:dc:77:05:7c:f1:44:a6:1d:ed:
         03:e4:a7:90:e9:6d:f1:7a:06:a6:63:6a:75:aa:dc:37:bd:68:
         ca:3f:9e:7f:46:f1:9b:84:e3:82:c7:fd:80:48:3f:2c:f9:6e:
         70:14:c4:81:1c:e0:64:f2:ba:84:ce:b3:d8:57:f4:5a:63:a0:
         07:e3:d1:ef:c8:9f:fa:e3:9f:ee:d3:e7:68:e6:5b:5f:cd:c0:
         dd:32:e9:cc:18:74:28:2a:d1:20:ce:7b:e4:1c:00:f3:9b:a1:
         af:b9:96:d2:44:d0:0b:2a:46:d6:13:2a:c4:d0:a8:08:41:09:
         57:74:4e:43:9c:64:cf:31:5a:8e:a7:6b:bb:d9:b2:9b:08:7a:
         da:76:c1:12:49:df:3b:37:40:9b:a3:10:3a:bd:ca:ca:02:b5:
         1a:11:87:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:08 2025 by rpki-client