Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/34352e352e37392e302f32342d3234203d3e20323635363830.roa
File:                     34352e352e37392e302f32342d3234203d3e20323635363830.roa (raw, json)
Hash identifier:          aWie8mEuvBCXoyLMdsXYn+7uoJ7ANebaX1tPfmqkX6k=
Subject key identifier:   85:E0:C2:CA:BE:56:9F:22:58:B5:AC:AF:64:CE:41:57:DC:01:68:2E
Certificate issuer:       /CN=E80A8AB689AB034F3F64DE7FFC596924B02BA842
Certificate serial:       5A56364AF920A5C01A5A502DA78110B09E39740A
Authority key identifier: E8:0A:8A:B6:89:AB:03:4F:3F:64:DE:7F:FC:59:69:24:B0:2B:A8:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/34352e352e37392e302f32342d3234203d3e20323635363830.roa
Signing time:             Tue 04 Feb 2025 18:42:18 +0000
ROA not before:           Tue 04 Feb 2025 18:37:18 +0000
ROA not after:            Tue 03 Feb 2026 18:42:18 +0000
asID:                     265680
IP address blocks:        45.5.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.crl
                          rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:56:36:4a:f9:20:a5:c0:1a:5a:50:2d:a7:81:10:b0:9e:39:74:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E80A8AB689AB034F3F64DE7FFC596924B02BA842
        Validity
            Not Before: Feb  4 18:37:18 2025 GMT
            Not After : Feb  3 18:42:18 2026 GMT
        Subject: CN=85E0C2CABE569F2258B5ACAF64CE4157DC01682E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:87:d8:92:d5:f4:e9:e3:b6:1c:af:cb:20:
                    3c:18:a7:6e:1f:06:24:69:35:33:eb:94:4a:0a:e6:
                    0f:37:e6:cd:ee:89:dc:d2:75:69:a8:2c:56:98:e2:
                    7f:b7:8f:e4:fe:4f:58:22:44:49:80:50:f5:24:08:
                    a5:57:c5:d5:73:53:9b:b6:4b:00:05:e3:83:51:6e:
                    1d:9e:92:aa:1c:94:71:19:91:a6:50:25:52:26:8d:
                    1d:21:c9:84:1c:f4:77:44:65:40:00:fd:96:26:7d:
                    16:1c:9f:31:a9:39:2e:3f:90:e4:cf:9a:3f:4a:92:
                    55:28:7c:ee:76:e5:f7:06:dd:7f:43:20:6f:75:c8:
                    de:b5:7a:91:2f:84:34:4d:21:21:37:b3:57:5a:95:
                    54:16:40:73:94:89:ad:4e:e1:03:31:34:5a:b1:54:
                    ca:59:1f:f2:bc:a8:be:34:3a:67:0a:a8:ef:c8:11:
                    75:fe:bc:27:3f:d5:05:02:7a:a9:61:9a:28:80:a4:
                    c4:b9:47:d2:4a:6c:2d:b0:88:f1:37:0e:21:ca:9d:
                    42:49:a1:d3:49:77:f2:12:eb:0f:e1:f1:c6:1c:0c:
                    eb:e3:b8:a7:b7:22:3b:df:be:10:c0:15:9c:68:89:
                    cd:fe:ec:a5:1f:3b:f4:d6:3f:96:aa:4d:20:73:3c:
                    74:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E0:C2:CA:BE:56:9F:22:58:B5:AC:AF:64:CE:41:57:DC:01:68:2E
            X509v3 Authority Key Identifier:
                keyid:E8:0A:8A:B6:89:AB:03:4F:3F:64:DE:7F:FC:59:69:24:B0:2B:A8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/34352e352e37392e302f32342d3234203d3e20323635363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:62:1d:74:82:62:95:f4:4a:3d:e5:b2:c1:bd:f3:89:c1:5a:
         64:71:03:70:19:5c:90:92:e9:41:c5:10:75:8f:14:e7:e6:98:
         eb:45:11:07:7e:c1:f1:18:a4:6f:e7:76:ee:e1:88:27:b4:10:
         6c:8d:76:59:51:6c:ac:f3:c0:5a:0e:3e:81:d6:4c:01:c6:e4:
         88:71:0b:51:c0:46:26:96:92:e7:f5:c0:23:fd:0a:1b:03:73:
         37:96:b4:d9:9c:b7:1c:e4:78:de:b3:17:dd:11:97:bf:2d:57:
         45:ae:4b:51:ff:bc:2f:fb:04:0f:b8:99:f6:0c:b1:08:e7:a4:
         20:73:53:01:ce:0b:bf:d2:20:e7:ab:29:8c:24:ac:7c:ad:05:
         d9:51:83:88:3f:91:8e:a0:be:98:98:05:41:03:65:58:3e:b6:
         56:85:ef:4b:08:1c:9e:96:87:92:09:cb:0a:bd:11:6e:ac:d6:
         bb:8b:ff:99:c9:91:64:b5:40:b8:da:4f:cf:a0:1e:30:7d:a9:
         e6:dd:6f:05:2c:a3:75:43:36:75:b4:8e:a4:ad:c2:be:fa:dc:
         58:ae:15:12:14:e5:40:65:8f:65:86:b9:89:8a:93:d0:ca:c0:
         c9:ab:28:f6:f3:d9:2f:5a:51:5d:98:26:2b:50:5f:38:1a:20:
         7b:f5:93:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:37 2025 by rpki-client