Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135352e302f32342d3234203d3e20323639383138.roa
File:                     34352e3138342e3135352e302f32342d3234203d3e20323639383138.roa (raw, json)
Hash identifier:          Z+IbWvm4fmxUOVlgOxrJ5OC5m1V0dYlQmADMtyjNLJQ=
Subject key identifier:   B2:3B:27:F7:4C:D6:E8:4D:45:53:B5:1D:C3:49:0D:F8:B1:C9:C6:FA
Certificate issuer:       /CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
Certificate serial:       4F3F7B621E6BBD6909178340202DD23CA0843DB5
Authority key identifier: 73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135352e302f32342d3234203d3e20323639383138.roa
Signing time:             Tue 04 Feb 2025 18:23:15 +0000
ROA not before:           Tue 04 Feb 2025 18:18:15 +0000
ROA not after:            Tue 03 Feb 2026 18:23:15 +0000
asID:                     269818
IP address blocks:        45.184.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3f:7b:62:1e:6b:bd:69:09:17:83:40:20:2d:d2:3c:a0:84:3d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
        Validity
            Not Before: Feb  4 18:18:15 2025 GMT
            Not After : Feb  3 18:23:15 2026 GMT
        Subject: CN=B23B27F74CD6E84D4553B51DC3490DF8B1C9C6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:18:6f:7b:13:28:82:22:5b:c8:a3:02:aa:c9:
                    3a:3b:de:14:83:c9:0f:bc:4e:18:b8:ac:e8:a0:32:
                    19:a9:d9:1d:a7:f0:57:03:05:cf:46:b6:d9:38:9e:
                    14:22:f3:ad:17:6f:4c:17:ce:98:b8:2f:bd:24:97:
                    f3:07:38:a1:3d:b0:0d:c5:c6:9b:52:47:33:02:6a:
                    ea:b4:b9:eb:36:a9:90:48:81:39:d6:9d:fd:52:07:
                    2b:71:a1:4c:d7:10:79:58:24:a7:0d:d8:7d:81:b7:
                    59:1f:38:64:67:9f:55:66:7e:97:70:66:c9:c8:2e:
                    6e:22:a2:f6:3c:fc:25:df:56:be:f0:b2:d3:13:a4:
                    7d:0c:b7:91:3b:98:68:36:9d:09:98:0d:13:03:65:
                    a9:7d:c2:88:61:b8:ba:d0:bf:a2:e8:00:50:f0:ac:
                    41:08:24:44:aa:48:2c:90:3d:99:8a:ff:cd:67:b8:
                    7c:30:7f:66:6c:a7:e6:40:50:f0:2f:65:6c:c8:2b:
                    f5:04:a3:47:ad:01:c2:e4:a0:e8:ea:fb:75:e6:85:
                    05:d7:c1:1f:82:6c:75:72:d7:89:3b:c2:7c:fe:2d:
                    c1:60:22:38:14:ef:d2:b4:45:6c:87:90:54:50:95:
                    0c:0f:6c:02:fb:3f:60:1b:3a:42:73:89:c0:80:1c:
                    ea:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3B:27:F7:4C:D6:E8:4D:45:53:B5:1D:C3:49:0D:F8:B1:C9:C6:FA
            X509v3 Authority Key Identifier:
                keyid:73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135352e302f32342d3234203d3e20323639383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:50:42:3e:12:ed:1f:ef:2c:36:29:09:e7:9a:41:17:42:15:
         bd:0d:e3:57:87:57:6c:bf:f1:a9:96:d4:18:d7:5b:d7:b6:48:
         a4:ac:ca:7c:a4:01:e2:3a:07:37:60:a9:52:54:77:68:8e:0d:
         d8:83:ea:5e:e0:de:08:a1:dc:7b:75:ca:16:c0:ac:a1:bd:a2:
         e8:d7:3c:68:fc:6d:95:3b:ce:65:4f:a2:e6:fc:72:0e:56:58:
         e5:f6:0c:f0:74:ea:cc:08:e8:29:dc:74:44:12:c6:ab:64:8a:
         c9:6d:a9:41:13:00:70:54:ca:ca:49:3f:e2:8b:cc:d6:cc:50:
         39:07:73:80:94:76:c2:cf:80:6e:db:ff:b8:c3:c7:e6:b6:26:
         2c:71:5b:be:91:36:6e:e4:c8:d5:72:00:82:19:36:25:5e:91:
         f2:59:a7:59:ef:28:38:d5:f2:87:86:61:72:64:b4:db:0d:9e:
         9a:09:3e:63:c4:7a:78:df:b2:bb:14:43:b7:df:56:9c:09:95:
         86:0e:f3:67:1f:fc:ac:74:67:c9:6d:7f:81:34:7b:2b:ec:2d:
         b4:91:b1:6f:46:eb:0b:21:b9:7e:ec:52:b8:fb:88:9d:85:82:
         20:9f:44:20:de:c1:00:75:4b:3d:e6:48:27:c2:54:90:92:15:
         52:98:a3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:17:41 2025 by rpki-client