Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130352e302f32342d3234203d3e20323633373530.roa
File:                     34352e3137302e3130352e302f32342d3234203d3e20323633373530.roa (raw, json)
Hash identifier:          2dHNJ5rRHSAMWqygZtDFP2Vh2TmTIdbparwWFUgYqP0=
Subject key identifier:   A3:04:CE:EC:B0:E1:72:7D:09:CF:C0:E4:21:B2:93:FB:6B:65:B0:FD
Certificate issuer:       /CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Certificate serial:       6588DA3B8D8360E93BA2B396CC122EBEFF3AE8B7
Authority key identifier: 1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130352e302f32342d3234203d3e20323633373530.roa
Signing time:             Fri 30 May 2025 20:20:43 +0000
ROA not before:           Fri 30 May 2025 20:15:43 +0000
ROA not after:            Fri 29 May 2026 20:20:43 +0000
asID:                     263750
IP address blocks:        45.170.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl
                          rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 06:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:88:da:3b:8d:83:60:e9:3b:a2:b3:96:cc:12:2e:be:ff:3a:e8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
        Validity
            Not Before: May 30 20:15:43 2025 GMT
            Not After : May 29 20:20:43 2026 GMT
        Subject: CN=A304CEECB0E1727D09CFC0E421B293FB6B65B0FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:35:40:f8:33:42:c3:c2:4d:1b:2d:01:d5:fe:
                    81:30:6a:ea:1c:4a:31:49:cf:72:3a:74:79:5f:06:
                    63:fb:d2:eb:9a:39:4d:c9:38:db:76:59:24:c1:3c:
                    ce:9b:77:cd:22:ce:05:21:2f:64:0e:1c:58:69:96:
                    1e:e5:d0:59:96:49:16:2d:90:bb:e4:d5:b5:96:9d:
                    13:9d:1b:d6:d0:ee:7a:4c:6e:9f:c1:a6:2b:10:fa:
                    4c:53:c2:bd:f5:33:03:9a:5d:a5:33:72:e8:41:ed:
                    a5:ec:e3:33:b4:b2:ad:3e:c4:51:47:bc:06:0e:26:
                    be:a0:01:c6:97:60:ab:6a:91:e9:cc:e3:6a:7f:98:
                    41:4b:ce:cd:c8:3e:ec:e2:ea:3f:e7:47:e1:93:3f:
                    e8:98:1c:df:0f:d2:d8:55:47:00:e7:83:16:06:9d:
                    03:78:70:e8:fe:d7:6f:51:46:31:1e:89:02:58:69:
                    20:58:00:2e:d6:13:da:e9:8a:f3:0c:1e:db:ac:1b:
                    41:76:5f:29:46:1a:3b:a4:af:3b:49:b0:07:a1:c6:
                    9e:c7:a5:19:cf:b6:e4:c7:79:6e:37:0a:5b:c0:16:
                    0d:10:bb:a6:c1:56:07:13:76:01:e2:a5:c3:a7:fd:
                    3b:52:e9:34:98:e8:f2:11:e1:15:36:b5:03:2e:4d:
                    a8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:04:CE:EC:B0:E1:72:7D:09:CF:C0:E4:21:B2:93:FB:6B:65:B0:FD
            X509v3 Authority Key Identifier:
                keyid:1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/34352e3137302e3130352e302f32342d3234203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:eb:0c:af:0d:69:33:75:f5:c1:91:bd:d8:e4:a6:2e:8f:fe:
         db:da:6d:b7:c1:d1:d8:21:a7:44:88:6f:1e:4e:57:0a:1d:b3:
         40:03:f5:9f:db:20:26:d0:c8:f6:5e:12:7d:ea:85:5c:f4:cb:
         5c:2a:ed:ec:fd:ed:a4:b7:c0:33:91:86:90:b3:a8:27:aa:81:
         8d:e2:17:3a:ae:bc:86:15:98:0f:be:10:e8:19:fe:fc:32:6c:
         08:5d:ae:ed:cf:f3:10:67:84:bc:72:c0:f2:76:a8:c5:e2:e9:
         f6:f0:1b:6c:db:c2:c4:0c:a5:a9:ad:78:e0:a2:46:b8:d3:62:
         a3:ea:fe:03:97:dd:a3:90:2b:b8:e8:fc:59:54:96:e0:02:05:
         f3:72:4d:8e:14:ed:88:08:7c:14:77:2a:bc:f8:66:21:e7:6a:
         f2:87:39:63:35:06:84:4d:27:16:2b:96:30:ea:1d:5d:20:60:
         e1:93:c6:5b:95:c0:6e:c7:66:95:7a:e2:65:5c:e8:a0:c6:64:
         79:01:e2:fa:47:62:51:27:76:f4:f2:d2:b7:56:97:1d:b9:08:
         46:30:23:c9:b1:49:93:a8:2e:2f:7d:2a:fd:ba:81:52:27:09:
         07:df:2c:2a:02:e2:6f:d0:77:47:a8:55:a8:cb:6d:0f:69:07:
         2d:68:45:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:19:46 2025 by rpki-client