Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134342e302f32342d3234203d3e20323636383332.roa
File:                     34352e3233382e3134342e302f32342d3234203d3e20323636383332.roa (raw, json)
Hash identifier:          7N8OhnIah88LdD+5E/2UYYXJiO6AoA15iEEKFpfspRU=
Subject key identifier:   BA:2F:01:7C:A0:D7:AF:C6:9F:77:E0:36:96:47:08:1C:08:46:59:84
Certificate issuer:       /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
Certificate serial:       6FF71AAE4E3A78C2FCB6C43C53731E2735111E0B
Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134342e302f32342d3234203d3e20323636383332.roa
Signing time:             Tue 04 Feb 2025 18:43:55 +0000
ROA not before:           Tue 04 Feb 2025 18:38:55 +0000
ROA not after:            Tue 03 Feb 2026 18:43:55 +0000
asID:                     266832
IP address blocks:        45.238.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f7:1a:ae:4e:3a:78:c2:fc:b6:c4:3c:53:73:1e:27:35:11:1e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
        Validity
            Not Before: Feb  4 18:38:55 2025 GMT
            Not After : Feb  3 18:43:55 2026 GMT
        Subject: CN=BA2F017CA0D7AFC69F77E0369647081C08465984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:67:47:29:37:95:49:68:41:fa:c5:89:0c:ec:
                    9e:9f:84:dc:81:eb:0c:b1:63:68:f9:cf:27:25:63:
                    08:1f:58:cf:08:fc:04:7c:91:53:13:30:f8:b9:f9:
                    a9:8e:ab:e9:7e:f0:a3:96:d3:ff:b0:60:a4:38:58:
                    4f:49:89:a9:13:05:92:05:df:82:5e:b1:67:0d:5e:
                    55:07:a3:31:cf:f9:c8:39:2c:7b:f3:4f:8a:bd:c7:
                    26:f6:84:f3:1e:25:8e:7c:9c:64:65:9c:82:cb:10:
                    7b:b0:bd:58:cc:d5:19:f5:5c:9c:e8:6d:6f:16:ae:
                    cb:25:8d:42:64:e9:9a:d5:55:10:5f:70:9c:0e:c2:
                    05:2f:5f:01:e1:b8:52:6b:3d:22:5b:1e:63:c1:f7:
                    14:1a:5d:e5:b2:19:6a:2d:9b:c5:bd:34:b7:71:d9:
                    bd:4a:ed:dc:44:de:e5:1a:12:26:ba:ad:35:91:88:
                    34:87:32:65:e7:c1:ea:b3:e7:75:d4:ce:ba:ad:c0:
                    98:0d:bd:c2:f1:1f:65:24:ec:9b:ab:e9:66:30:cc:
                    eb:6b:7f:d1:7b:44:cc:b0:fd:18:f3:d0:37:3b:dd:
                    3f:87:ff:f2:4b:bd:71:6f:72:85:1e:89:bf:7c:70:
                    f1:be:da:32:d6:3e:51:a8:c6:c2:93:29:c2:78:9e:
                    5c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2F:01:7C:A0:D7:AF:C6:9F:77:E0:36:96:47:08:1C:08:46:59:84
            X509v3 Authority Key Identifier:
                keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134342e302f32342d3234203d3e20323636383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:7d:25:da:a1:7e:41:84:c8:18:42:bc:ca:ff:8c:16:1f:17:
         8e:23:2a:db:27:f0:dd:78:5c:e9:80:63:b1:0e:cf:da:f6:c0:
         eb:c0:f4:1c:c4:29:67:44:f0:90:dd:38:e3:c4:ca:34:2d:15:
         54:32:8e:28:f9:06:af:bc:b6:1b:7c:b4:68:c3:37:40:12:bf:
         0b:e7:42:0a:ef:2c:ba:30:67:29:d4:af:10:2b:9a:26:91:6e:
         ef:3f:8d:6c:30:c0:d3:8d:12:02:5e:9d:b5:16:77:6c:fa:cd:
         38:f2:13:be:d7:88:26:12:1f:af:0a:45:a9:b7:9d:15:0b:95:
         0a:fc:1b:04:56:a0:20:f7:42:ff:b2:40:a4:b1:8b:57:66:4b:
         e1:0b:05:0e:16:39:9e:6b:ce:80:31:00:88:73:40:46:8f:c4:
         df:db:35:52:2e:16:65:0b:a5:ab:36:28:4b:37:f9:e1:06:98:
         d2:e4:0e:7d:14:66:3f:65:3e:69:20:ae:03:93:b0:76:cb:7a:
         a3:a5:7e:fe:71:ab:58:1a:f2:41:b4:7c:a5:de:31:35:79:69:
         46:51:50:29:67:62:e2:04:77:c4:fc:7b:1f:58:36:8e:0d:42:
         58:d2:8d:9c:bf:04:42:a5:23:d1:84:39:e1:04:ba:53:7e:90:
         f3:c2:1d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:06:24 2025 by rpki-client