Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139372e302f32342d3234203d3e20323639383538.roa
File:                     34352e3138392e3139372e302f32342d3234203d3e20323639383538.roa (raw, json)
Hash identifier:          WIggVM1yi48ELLS46jHgJqM5lqF55JMqa6uoxRasWig=
Subject key identifier:   2C:16:79:AC:41:CD:1A:F0:5E:65:0B:1F:2E:DE:90:B3:37:A4:6B:42
Certificate issuer:       /CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
Certificate serial:       2CCCFDBD243D1224CBEAA44C95F860361C8394D6
Authority key identifier: 0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139372e302f32342d3234203d3e20323639383538.roa
Signing time:             Tue 04 Feb 2025 18:39:31 +0000
ROA not before:           Tue 04 Feb 2025 18:34:31 +0000
ROA not after:            Tue 03 Feb 2026 18:39:31 +0000
asID:                     269858
IP address blocks:        45.189.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cc:fd:bd:24:3d:12:24:cb:ea:a4:4c:95:f8:60:36:1c:83:94:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
        Validity
            Not Before: Feb  4 18:34:31 2025 GMT
            Not After : Feb  3 18:39:31 2026 GMT
        Subject: CN=2C1679AC41CD1AF05E650B1F2EDE90B337A46B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:ca:7a:2f:59:fe:a5:39:60:08:d0:83:cf:
                    ab:9f:2c:b1:b2:74:80:e1:fb:75:1f:15:16:3d:be:
                    f0:80:bd:86:71:4c:bf:88:1f:6f:ff:67:f6:ee:21:
                    74:ac:16:4d:91:55:97:4a:9a:1c:e9:0b:68:e0:7a:
                    1a:ce:a3:4e:c3:9d:78:50:43:b2:0b:75:e8:2e:5d:
                    21:e5:b1:8c:7f:f0:38:dd:95:ad:2e:e1:88:46:a2:
                    51:14:7b:48:10:95:5d:0d:eb:7f:ea:3a:3f:0f:c6:
                    48:59:3c:69:f5:e9:c3:40:93:4a:3f:e0:35:f6:ec:
                    b0:23:95:89:9c:a1:4f:48:72:28:09:f2:91:29:c4:
                    8d:52:31:c0:f9:0b:ba:0a:f7:d1:42:15:2d:5b:a9:
                    b1:ba:4f:0b:41:32:cb:b0:28:a0:35:1c:05:f8:6c:
                    a7:3a:d8:f3:76:f3:f4:22:ce:86:36:9e:b6:f8:d3:
                    b0:f1:22:41:c4:df:0e:ee:9f:2e:4a:a9:93:db:73:
                    88:ba:cf:f9:1a:c0:d0:26:4d:a9:e2:f4:62:02:34:
                    05:d6:27:9d:8c:93:db:8a:77:87:ae:3d:d3:16:78:
                    3c:40:f3:78:ef:72:74:a9:d8:59:28:ec:ea:1f:f5:
                    da:4e:56:c5:a6:af:4f:fe:f6:56:90:65:1a:47:38:
                    a6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:16:79:AC:41:CD:1A:F0:5E:65:0B:1F:2E:DE:90:B3:37:A4:6B:42
            X509v3 Authority Key Identifier:
                keyid:0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139372e302f32342d3234203d3e20323639383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:f2:08:36:91:48:1f:32:0c:55:f1:e5:8f:3e:bb:32:4a:f7:
         3f:d4:63:a2:91:c9:2d:56:bd:b7:dc:b3:d9:14:4e:ed:c9:7a:
         5d:5d:d2:05:73:b3:3f:da:62:7d:46:6c:cc:1a:23:85:19:a6:
         9f:03:64:a9:3c:c8:16:c7:04:48:ca:49:95:0d:93:93:de:59:
         91:66:65:e3:c5:20:79:f1:91:e5:ed:f9:70:d6:f8:ba:d9:5b:
         93:ca:09:3b:c9:5a:f9:0a:be:7b:6f:96:d6:28:fe:ee:77:e5:
         ed:0e:62:d4:51:52:2b:18:db:a2:e9:17:f1:da:c2:d8:17:44:
         57:16:6d:8a:c3:dc:b7:4c:9d:cf:a9:23:c2:95:c4:d5:c4:15:
         78:9c:72:8f:37:f8:ce:c0:72:fe:87:ac:0f:88:a8:07:af:c9:
         c1:04:2c:7e:12:23:b7:eb:b5:d5:9d:51:8d:22:02:0d:06:e8:
         d9:4f:3c:66:f0:3d:3b:b2:c8:4e:65:7c:6c:0f:40:d6:4e:bb:
         e0:ba:92:f0:d0:8b:98:20:b9:e7:aa:15:10:24:a2:33:11:44:
         1f:98:48:20:0f:55:d3:c6:38:c9:47:66:9d:29:fe:73:04:6d:
         e1:9f:6d:d5:7e:46:71:42:c2:ee:05:60:96:f6:cb:12:9b:57:
         98:3e:a4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:11:38 2025 by rpki-client