Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134372e302f32342d3234203d3e20323636383332.roa
File:                     34352e3233382e3134372e302f32342d3234203d3e20323636383332.roa (raw, json)
Hash identifier:          d+fFMoODHcEFuUEvvf5b3GCie2WgGq8zkYmRWK+gceI=
Subject key identifier:   6A:DD:B0:38:25:47:59:E3:63:AF:17:E5:12:E3:78:89:1B:EE:00:3E
Certificate issuer:       /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
Certificate serial:       6DA6B3F932DB1A3B55037E3E2139B8F071B3E357
Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134372e302f32342d3234203d3e20323636383332.roa
Signing time:             Tue 04 Feb 2025 18:43:55 +0000
ROA not before:           Tue 04 Feb 2025 18:38:55 +0000
ROA not after:            Tue 03 Feb 2026 18:43:55 +0000
asID:                     266832
IP address blocks:        45.238.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a6:b3:f9:32:db:1a:3b:55:03:7e:3e:21:39:b8:f0:71:b3:e3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
        Validity
            Not Before: Feb  4 18:38:55 2025 GMT
            Not After : Feb  3 18:43:55 2026 GMT
        Subject: CN=6ADDB038254759E363AF17E512E378891BEE003E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:4d:e0:28:48:28:39:c5:4e:30:ed:46:26:
                    9d:dc:82:00:8c:1f:5e:75:72:f1:9d:65:05:76:82:
                    86:64:51:e1:6e:fa:1b:ee:ff:71:1a:00:f0:49:c1:
                    b9:dc:2f:e7:e7:7f:50:32:6b:9d:0a:1b:f7:f9:e9:
                    06:73:9c:c0:ff:e3:51:c9:f0:5e:8c:23:ab:2a:f5:
                    37:ea:fe:d9:81:5e:6b:76:2a:3b:fe:6f:4a:0f:a1:
                    3f:f9:78:3b:5d:e9:0d:85:d6:f6:bf:21:51:fa:65:
                    db:14:3d:b7:c1:6f:4f:e2:cc:eb:9a:c9:fa:ca:26:
                    23:5a:2c:ea:11:73:77:27:93:fb:97:a0:a5:64:d0:
                    9e:e5:72:6e:fc:18:72:92:b2:b6:3e:68:87:cb:9d:
                    01:7d:f6:64:2b:21:12:a9:15:a6:ed:64:88:ce:9d:
                    48:dc:3d:03:eb:35:51:15:95:fa:17:1c:8c:fa:ae:
                    97:88:d1:74:41:c7:ef:e0:c2:37:b5:b0:87:4a:ca:
                    55:3f:9e:65:2c:89:a1:76:c6:20:ad:dc:9d:7c:a8:
                    1f:df:3d:20:4b:50:ae:5a:c6:d1:1b:b7:f8:d8:c8:
                    2b:13:eb:c1:11:ee:4e:9d:10:67:67:39:9c:b9:c9:
                    1b:9c:18:cb:b9:62:28:b0:4e:fa:0e:b3:da:7e:ca:
                    d6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DD:B0:38:25:47:59:E3:63:AF:17:E5:12:E3:78:89:1B:EE:00:3E
            X509v3 Authority Key Identifier:
                keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134372e302f32342d3234203d3e20323636383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:be:1d:a6:e5:9e:a6:3b:19:f4:fe:b2:ec:f0:ab:3a:e6:e7:
         f0:c5:b0:db:bf:de:0b:aa:22:1e:29:4f:46:e8:74:e3:3c:9e:
         f4:f7:74:48:51:1a:9c:4a:3a:6c:e0:b9:55:39:8f:43:39:82:
         de:f7:11:7b:26:83:a3:0a:e8:d5:29:c3:6f:d5:b9:0f:a5:a0:
         5c:7d:63:46:c0:2c:32:3a:5c:10:05:50:43:28:81:66:99:be:
         1f:41:01:ab:64:4e:ec:a6:b2:26:e0:08:af:e4:02:36:d5:84:
         b0:51:2c:29:ab:28:1a:cc:ce:e2:5a:80:ba:b7:f0:74:39:36:
         23:11:42:c0:20:5a:65:89:7c:07:2e:25:a7:32:a0:d4:77:99:
         89:a1:2c:aa:48:a1:78:87:c3:53:b1:7b:8f:48:86:43:63:fb:
         bb:6d:1f:69:15:a8:a9:c9:a3:3e:a5:90:63:e4:f9:f9:bb:f8:
         b6:67:8c:4e:a8:f3:95:e7:b9:87:00:31:bb:fa:7e:48:ae:15:
         2f:1f:fb:00:6b:57:88:47:03:20:75:4a:03:43:d8:da:6c:e4:
         1c:a7:00:fb:9f:6e:0b:d0:51:1c:8c:72:b2:13:94:a3:ea:f1:
         e8:1d:94:54:d2:ad:42:44:f0:e9:ba:16:ae:fb:d9:14:e9:1d:
         0a:e9:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:23 2025 by rpki-client