Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/34352e3139302e3139312e302f32342d3234203d3e20323633373530.roa
File:                     34352e3139302e3139312e302f32342d3234203d3e20323633373530.roa (raw, json)
Hash identifier:          3+mac6y4gD/fIkoVOV1w8Z784BAU0j2e3gDtlFpEMHk=
Subject key identifier:   83:AB:83:8D:64:AC:88:FF:BC:49:54:B4:05:2D:92:B4:DF:82:CF:B1
Certificate issuer:       /CN=66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698
Certificate serial:       4C4D71212AF1DD1A205DD05A4873DA346FC7DF6B
Authority key identifier: 66:FF:CE:89:2A:47:04:0F:2D:AB:7D:4D:1A:0B:1B:0B:3C:07:B6:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/34352e3139302e3139312e302f32342d3234203d3e20323633373530.roa
Signing time:             Thu 29 May 2025 21:20:38 +0000
ROA not before:           Thu 29 May 2025 21:15:38 +0000
ROA not after:            Thu 28 May 2026 21:20:38 +0000
asID:                     263750
IP address blocks:        45.190.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4d:71:21:2a:f1:dd:1a:20:5d:d0:5a:48:73:da:34:6f:c7:df:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698
        Validity
            Not Before: May 29 21:15:38 2025 GMT
            Not After : May 28 21:20:38 2026 GMT
        Subject: CN=83AB838D64AC88FFBC4954B4052D92B4DF82CFB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:fc:8e:18:43:ac:2c:13:80:bc:f2:2c:f6:
                    69:6a:19:04:a2:04:53:33:06:6e:92:a3:cc:ae:d0:
                    ff:44:67:11:3d:e0:bc:15:86:9d:7a:9a:b5:d8:69:
                    b4:d4:43:b9:c1:3c:41:19:8a:d2:81:23:88:39:01:
                    4f:94:ec:b3:bd:33:ea:9f:a6:f8:b1:bb:7d:ab:a0:
                    3d:49:75:0d:b4:d4:6d:82:df:e1:51:c7:6a:4d:5d:
                    90:1c:09:20:52:f7:59:ec:61:75:9c:51:41:f6:56:
                    5e:01:7f:89:ce:3a:bc:d5:3c:57:86:44:bc:d7:5c:
                    2c:73:6c:e3:23:77:9b:35:fd:2b:76:55:ed:ce:a3:
                    35:c1:41:42:76:9e:e2:24:07:fb:53:11:fd:97:a5:
                    2b:f1:56:e3:3a:ee:0e:6b:b5:e2:e5:93:b9:79:58:
                    cc:e3:1e:40:20:c2:2b:08:4f:2a:65:27:93:3e:b0:
                    58:01:18:12:66:5a:32:7b:e4:ab:3f:07:fd:4e:21:
                    59:6e:6a:37:b0:cc:85:9f:a8:59:9c:86:13:d2:65:
                    e8:d1:82:28:be:10:34:e9:3e:9d:41:51:1a:86:09:
                    fd:5b:53:71:12:3b:28:3f:5b:da:01:65:35:44:44:
                    e5:7e:08:55:60:94:a5:71:5e:76:e2:c0:54:51:d4:
                    30:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AB:83:8D:64:AC:88:FF:BC:49:54:B4:05:2D:92:B4:DF:82:CF:B1
            X509v3 Authority Key Identifier:
                keyid:66:FF:CE:89:2A:47:04:0F:2D:AB:7D:4D:1A:0B:1B:0B:3C:07:B6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66FFCE892A47040F2DAB7D4D1A0B1B0B3C07B698.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2879CFC2F64F4F92B0F85D09D97EFFE336F88ACF855115C00ECBB2AC4E9B1C9B/0/34352e3139302e3139312e302f32342d3234203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:7f:06:f4:ce:5c:39:74:e5:6d:ed:88:09:c1:da:81:ff:4b:
         d5:bf:3a:21:07:50:63:85:6d:13:5b:79:71:75:20:6c:85:63:
         c3:19:90:44:f1:a9:bd:83:f4:b2:d0:93:87:9a:85:28:37:03:
         1d:90:b1:18:63:e4:c1:12:24:ff:3d:b2:38:58:96:2e:41:68:
         9b:c1:b1:62:9c:99:ec:84:c2:e5:8a:9f:de:eb:ea:62:49:ad:
         c2:d7:73:0e:0f:5b:c4:de:ac:83:74:0d:86:12:43:45:58:dd:
         a5:7c:6f:ef:4f:85:fb:97:05:01:cd:82:72:59:d7:90:ef:99:
         08:46:cb:fc:af:6f:f9:97:26:99:c1:df:f6:82:f1:10:27:6f:
         18:b6:96:9f:ba:e4:48:a8:17:7f:65:25:94:97:f5:d2:87:17:
         8f:2c:7b:4e:56:b0:fb:70:56:22:c3:a5:b0:9d:e5:58:bc:5c:
         d5:f3:c0:ca:39:a9:60:63:45:25:c9:bb:21:1c:81:b9:aa:3d:
         84:cc:e5:b8:91:5b:26:73:dc:57:7c:24:73:03:32:6a:e1:84:
         e2:50:22:c1:5f:8a:b4:cd:22:c1:38:bc:58:55:9b:bd:5e:be:
         b2:af:74:7e:12:60:5b:cd:6d:c2:1a:e1:c6:68:c3:73:96:99:
         2b:13:49:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:49:12 2025 by rpki-client