Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e33332e302f32342d3234203d3e203634313530.roa
File:                     34352e36382e33332e302f32342d3234203d3e203634313530.roa (raw, json)
Hash identifier:          7q57SLJ1qh9iyvjYLupV0ZH64F90/X+AORWPsnsgdeM=
Subject key identifier:   BC:69:1E:46:30:A2:70:1E:D7:B3:26:5D:06:DA:9F:7D:8C:8F:60:CB
Certificate issuer:       /CN=77B81134906868C6E3E9D1FFFFFA566816CB9125
Certificate serial:       1ACDD661C89CE6E0B8F15ADE45CCEB5FFED0C2D4
Authority key identifier: 77:B8:11:34:90:68:68:C6:E3:E9:D1:FF:FF:FA:56:68:16:CB:91:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e33332e302f32342d3234203d3e203634313530.roa
Signing time:             Tue 23 Jul 2024 20:05:00 +0000
ROA not before:           Tue 23 Jul 2024 20:00:00 +0000
ROA not after:            Tue 22 Jul 2025 20:05:00 +0000
asID:                     64150
IP address blocks:        45.68.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cd:d6:61:c8:9c:e6:e0:b8:f1:5a:de:45:cc:eb:5f:fe:d0:c2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77B81134906868C6E3E9D1FFFFFA566816CB9125
        Validity
            Not Before: Jul 23 20:00:00 2024 GMT
            Not After : Jul 22 20:05:00 2025 GMT
        Subject: CN=BC691E4630A2701ED7B3265D06DA9F7D8C8F60CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:32:ef:9a:23:bc:75:b0:a2:b1:e5:a6:22:86:
                    3f:39:8d:6e:ad:02:59:99:b5:55:4a:f4:e0:7e:ac:
                    00:e4:19:1a:35:a2:08:1f:1d:1b:ea:b7:b2:59:f8:
                    25:af:9f:8c:24:df:b7:e4:d2:30:28:8c:34:7c:6c:
                    35:c8:fc:b2:d0:b9:a9:87:a3:ec:53:70:5e:c3:17:
                    88:c2:23:04:95:87:64:0b:15:f5:a0:84:59:68:c9:
                    d3:a7:d3:5b:4d:a3:09:ec:af:1f:62:37:2e:c7:a9:
                    6f:08:4e:ac:db:d4:f3:b2:fe:b0:b8:20:19:0d:87:
                    e4:cc:51:e5:03:1d:f7:44:2a:16:a8:20:ee:93:08:
                    a3:1b:6e:21:90:68:57:f5:7e:fc:72:5e:74:64:bc:
                    ed:70:39:de:eb:81:5f:c2:09:a1:98:c5:a9:c4:3f:
                    03:c6:e6:87:91:6a:b9:8e:cd:ab:c8:3c:c0:8e:6b:
                    c5:f8:4a:5a:17:5c:32:b7:2f:3a:dc:2d:a0:14:1c:
                    11:d3:29:f3:5c:15:a6:80:04:53:a7:08:cb:df:15:
                    45:e1:7d:4a:c5:cc:d5:6e:0c:b9:8d:8e:df:dc:2e:
                    f9:fa:ca:12:48:90:6b:31:6e:a9:1c:61:84:71:61:
                    1f:d3:90:2f:71:1b:2c:0f:9a:7f:f1:07:5c:0d:3c:
                    1f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:69:1E:46:30:A2:70:1E:D7:B3:26:5D:06:DA:9F:7D:8C:8F:60:CB
            X509v3 Authority Key Identifier:
                keyid:77:B8:11:34:90:68:68:C6:E3:E9:D1:FF:FF:FA:56:68:16:CB:91:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/77B81134906868C6E3E9D1FFFFFA566816CB9125.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35D7D37DF398ACFA714DB98008A80EC63AC65C6A43D6130E0FD980FE3F313F9B/0/34352e36382e33332e302f32342d3234203d3e203634313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:a5:bf:c4:ee:57:cd:89:ba:cf:c1:8f:5f:f0:38:2a:81:03:
         11:a1:98:21:74:1d:e4:b2:02:4f:04:a7:c6:e7:b0:86:8c:4d:
         32:81:0e:55:66:21:02:c0:ac:9c:f6:d2:6b:8d:22:c2:af:c0:
         7a:bc:40:bc:4d:0d:e8:80:96:87:38:37:9b:93:b0:79:66:36:
         c9:12:1f:df:d5:53:ec:f9:1d:07:45:0d:52:93:58:fa:77:b1:
         6d:bb:bb:26:0b:c9:29:7d:09:8b:1d:f0:3f:24:93:ad:66:84:
         ba:a8:e9:18:19:b6:8a:13:24:8e:7d:f6:79:a4:e0:3b:b0:02:
         31:32:25:1e:38:7c:57:c2:36:27:b2:c0:bf:d1:50:06:34:d8:
         9a:08:ae:a7:56:b3:d0:af:54:84:ab:fa:ab:42:54:ec:2d:d7:
         19:24:2b:43:18:d0:35:8c:7f:3a:aa:f0:eb:1e:23:57:92:b0:
         c9:a9:85:f3:05:12:b7:bc:21:de:74:ec:6d:cd:b4:1f:98:6d:
         c5:fb:c6:ff:f8:a9:1c:c8:8f:46:a8:01:58:72:56:20:9d:68:
         09:cb:ea:3a:fa:96:f2:9f:58:49:09:8a:a3:cd:f5:35:ee:92:
         2e:f2:d9:1c:38:4a:f1:fa:35:bd:98:42:f1:17:ef:f2:e9:48:
         6a:4c:aa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:24 2025 by rpki-client