Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134342e302f32332d3233203d3e20323636383332.roa
File:                     34352e3233382e3134342e302f32332d3233203d3e20323636383332.roa (raw, json)
Hash identifier:          vuM0dmBOGr/We0s8p7yNlTRHFh8E/rS51peBTAEpfAY=
Subject key identifier:   90:7F:5D:BD:88:04:7A:96:E6:A8:B7:6A:33:7B:C7:A8:BA:E5:AC:89
Certificate issuer:       /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
Certificate serial:       5E57BBA24CFC19B93D83EBC4CB35ED0AC049CEB4
Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134342e302f32332d3233203d3e20323636383332.roa
Signing time:             Fri 24 Jan 2025 17:00:02 +0000
ROA not before:           Fri 24 Jan 2025 16:55:02 +0000
ROA not after:            Fri 23 Jan 2026 17:00:02 +0000
asID:                     266832
IP address blocks:        45.238.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:57:bb:a2:4c:fc:19:b9:3d:83:eb:c4:cb:35:ed:0a:c0:49:ce:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
        Validity
            Not Before: Jan 24 16:55:02 2025 GMT
            Not After : Jan 23 17:00:02 2026 GMT
        Subject: CN=907F5DBD88047A96E6A8B76A337BC7A8BAE5AC89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:85:8e:21:8b:2b:5d:14:ee:be:c5:84:a2:4f:
                    f2:80:8b:41:67:50:6d:5c:55:1d:17:ec:c8:1c:9f:
                    40:60:16:f3:6d:ad:55:da:df:52:0d:91:ca:70:20:
                    59:a2:ec:28:b0:06:6a:33:40:62:42:eb:9a:95:a3:
                    cc:45:15:df:2e:d8:c0:95:a8:73:2a:25:59:e2:67:
                    5c:d4:07:b1:e6:7a:16:68:e3:8c:0b:13:ea:a8:2e:
                    27:0f:96:30:ae:f3:4f:77:56:5c:9d:6d:ce:ac:29:
                    8a:fa:b7:a9:89:57:00:98:f4:2e:c8:0c:9d:9c:69:
                    6b:9d:7b:2e:61:bd:91:8c:7d:3a:42:35:21:52:c2:
                    05:95:19:e7:da:8a:0f:26:b7:5c:da:5b:88:67:28:
                    7c:98:74:51:0c:02:c2:e6:f8:26:66:82:94:34:16:
                    8e:ac:a8:51:7e:48:54:51:37:05:c9:09:a1:77:03:
                    a9:1d:e3:a6:3c:3b:22:d8:13:93:c5:45:a3:07:ce:
                    28:f5:0e:e7:79:b2:a3:a7:41:cc:c4:78:78:15:37:
                    68:e0:88:6a:a8:c1:f6:0d:b6:b0:99:f1:d4:13:4b:
                    59:bd:8f:ef:66:7c:43:97:d1:51:95:cc:fe:67:17:
                    41:12:20:2e:72:86:7c:50:fc:74:86:51:ee:81:ac:
                    d8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7F:5D:BD:88:04:7A:96:E6:A8:B7:6A:33:7B:C7:A8:BA:E5:AC:89
            X509v3 Authority Key Identifier:
                keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134342e302f32332d3233203d3e20323636383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:44:cb:c3:cf:b8:07:97:56:14:e9:7a:ae:27:09:56:84:06:
         26:8c:8a:58:60:d9:bb:37:ee:6a:6c:35:c6:2e:eb:0f:34:90:
         af:e3:1d:86:21:df:86:59:2c:54:e4:04:5e:91:65:49:e1:3e:
         e5:8c:d3:f9:b0:a7:12:cf:b6:ff:ac:33:8e:e4:25:12:e6:fa:
         69:d9:5c:5c:8f:63:b4:50:96:3f:b4:a9:b1:49:b4:c0:04:10:
         9e:9d:93:62:df:07:8f:73:c0:e3:28:6c:bf:38:a9:38:23:a7:
         bc:a9:6f:95:eb:3d:b4:ed:ef:30:2c:a6:a4:61:47:9f:0e:95:
         11:26:5e:6b:cc:8b:61:9c:6a:58:75:20:d7:30:48:9e:39:12:
         61:15:8d:b3:1f:25:88:24:fa:d1:4c:cf:71:c9:2b:f8:b8:f0:
         cb:af:fa:31:fa:c1:38:7a:1e:e8:7d:35:9b:54:f8:5d:6f:fb:
         0a:aa:0b:2a:89:09:38:70:99:1a:9d:89:ed:62:b8:c4:7f:57:
         a2:01:7b:19:f5:60:ad:77:a6:07:32:f5:c4:06:29:1b:6b:05:
         65:fb:05:a4:be:30:60:23:22:40:f7:e9:ec:64:ae:0c:12:69:
         77:f0:7d:58:7f:a5:e4:25:7b:78:b8:2d:4e:e6:b7:2e:56:05:
         c8:e6:85:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:59:26 2025 by rpki-client