Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E563186D7451AF6254B321784269858A7A11CC13779FAA835F6DFEB32D81F03/0/34352e36352e3234302e302f32322d3234203d3e20323634373830.roa
File:                     34352e36352e3234302e302f32322d3234203d3e20323634373830.roa (raw, json)
Hash identifier:          NQ+8s6GxsfZKlBxfU4GH05l4XInpxmLLdU1YwjlW/TU=
Subject key identifier:   D8:73:7B:40:01:2A:45:F2:6F:07:09:83:3E:04:DD:B1:2F:4C:CF:E6
Certificate issuer:       /CN=753B319406FC01DB8D7206FA8131F5993B7C6A61
Certificate serial:       55487A67141BA574F616464F4305994D5440C78E
Authority key identifier: 75:3B:31:94:06:FC:01:DB:8D:72:06:FA:81:31:F5:99:3B:7C:6A:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/753B319406FC01DB8D7206FA8131F5993B7C6A61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E563186D7451AF6254B321784269858A7A11CC13779FAA835F6DFEB32D81F03/0/34352e36352e3234302e302f32322d3234203d3e20323634373830.roa
Signing time:             Tue 04 Feb 2025 18:34:08 +0000
ROA not before:           Tue 04 Feb 2025 18:29:08 +0000
ROA not after:            Tue 03 Feb 2026 18:34:08 +0000
asID:                     264780
IP address blocks:        45.65.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E563186D7451AF6254B321784269858A7A11CC13779FAA835F6DFEB32D81F03/0/753B319406FC01DB8D7206FA8131F5993B7C6A61.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E563186D7451AF6254B321784269858A7A11CC13779FAA835F6DFEB32D81F03/0/753B319406FC01DB8D7206FA8131F5993B7C6A61.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/753B319406FC01DB8D7206FA8131F5993B7C6A61.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:48:7a:67:14:1b:a5:74:f6:16:46:4f:43:05:99:4d:54:40:c7:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=753B319406FC01DB8D7206FA8131F5993B7C6A61
        Validity
            Not Before: Feb  4 18:29:08 2025 GMT
            Not After : Feb  3 18:34:08 2026 GMT
        Subject: CN=D8737B40012A45F26F0709833E04DDB12F4CCFE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8b:61:7c:a2:03:39:7b:0f:a9:fe:df:50:8c:
                    ab:7e:f9:4b:60:e3:70:ff:1f:73:94:d2:83:c6:bf:
                    2e:fe:43:65:48:c1:77:fd:a4:8e:e9:59:c2:83:3a:
                    c9:84:b3:d0:58:60:fc:d5:b1:24:98:c4:6e:73:16:
                    f0:a0:bf:10:66:c4:57:ca:01:e8:c2:dc:a6:67:74:
                    69:ff:24:9c:96:64:b4:6f:bb:64:0a:1d:bf:c4:da:
                    10:9d:fc:1d:dc:ad:70:64:95:38:18:b6:6a:40:38:
                    37:a0:cc:9a:d6:9a:2b:5b:dd:35:66:5b:b8:bd:78:
                    cb:3a:04:24:53:08:52:3e:68:28:68:bf:88:fb:53:
                    7d:96:10:2f:8a:9d:70:e5:8b:4f:e3:83:fb:d8:5c:
                    e1:44:ca:d7:fa:a4:0e:5e:b3:8d:8a:37:7b:b5:9e:
                    66:6e:88:fa:81:d1:e3:88:68:2d:be:25:07:8a:24:
                    c7:60:b9:96:0e:e6:43:01:82:e5:a3:4b:35:d4:e8:
                    12:2c:56:20:ad:6a:50:d9:e6:d0:81:25:ef:c9:c8:
                    a0:4e:40:7c:72:99:25:af:0a:35:bf:d1:03:be:26:
                    83:af:a5:63:b8:d7:7b:29:db:69:05:ba:47:01:67:
                    97:3a:11:07:30:f2:0a:49:0d:32:15:80:00:6b:2d:
                    6e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:73:7B:40:01:2A:45:F2:6F:07:09:83:3E:04:DD:B1:2F:4C:CF:E6
            X509v3 Authority Key Identifier:
                keyid:75:3B:31:94:06:FC:01:DB:8D:72:06:FA:81:31:F5:99:3B:7C:6A:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E563186D7451AF6254B321784269858A7A11CC13779FAA835F6DFEB32D81F03/0/753B319406FC01DB8D7206FA8131F5993B7C6A61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/753B319406FC01DB8D7206FA8131F5993B7C6A61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E563186D7451AF6254B321784269858A7A11CC13779FAA835F6DFEB32D81F03/0/34352e36352e3234302e302f32322d3234203d3e20323634373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:7a:a6:75:0f:9a:f7:d0:dd:de:26:65:b0:75:00:29:83:1d:
         5b:e5:1c:3f:94:20:c3:0c:3d:74:ba:95:bd:d1:58:d2:c0:22:
         c1:75:e9:55:45:25:d9:d4:e6:37:2a:cf:05:b7:98:62:2b:f6:
         e5:96:ff:68:79:a5:77:b5:7b:b1:0e:68:df:3a:be:23:e4:c0:
         0d:c3:fe:d0:02:3b:ff:17:16:84:3e:f8:4a:0a:cf:ae:18:60:
         7b:34:22:fc:7a:de:39:82:df:ab:d6:bf:58:f7:0c:2e:df:26:
         8a:23:7b:53:ef:64:c8:d7:55:6a:ed:52:b9:54:46:30:57:05:
         e7:97:c4:75:d9:0d:a3:eb:15:3c:df:e2:ed:db:ba:da:09:1a:
         f9:ab:8e:e6:25:a5:11:b1:2a:9c:9a:63:02:66:b0:60:79:af:
         9e:b9:72:cc:78:f6:f4:da:54:ec:29:a0:7c:17:95:27:45:1f:
         05:40:ba:8c:67:d7:1e:1f:61:02:b8:36:23:a0:61:df:54:7d:
         4e:b2:37:96:0b:33:bf:14:c4:ff:4d:94:bd:bd:75:01:68:12:
         eb:40:08:5a:b1:6b:10:06:00:e8:c1:f6:a0:2e:04:2a:52:a6:
         c3:92:d8:a1:6c:66:15:49:59:f2:cd:60:ec:b8:88:7b:fb:4a:
         1b:e4:4e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:07 2025 by rpki-client