Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235342e302f32342d3234203d3e203238343233.roa
File:                     34352e3137302e3235342e302f32342d3234203d3e203238343233.roa (raw, json)
Hash identifier:          cklhrOcGkfNRspNIh5S4u818R1vr+5vJh6WQKxlhOu4=
Subject key identifier:   E9:76:BB:68:FA:35:9C:B4:93:A2:D3:4F:86:49:D1:8C:3D:35:6E:1D
Certificate issuer:       /CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
Certificate serial:       5F27E5D4C0088C25A8A58187C96258E42DB6CDE1
Authority key identifier: 6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235342e302f32342d3234203d3e203238343233.roa
Signing time:             Sun 26 Jan 2025 01:50:00 +0000
ROA not before:           Sun 26 Jan 2025 01:45:00 +0000
ROA not after:            Sun 25 Jan 2026 01:50:00 +0000
asID:                     28423
IP address blocks:        45.170.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:27:e5:d4:c0:08:8c:25:a8:a5:81:87:c9:62:58:e4:2d:b6:cd:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
        Validity
            Not Before: Jan 26 01:45:00 2025 GMT
            Not After : Jan 25 01:50:00 2026 GMT
        Subject: CN=E976BB68FA359CB493A2D34F8649D18C3D356E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:13:41:70:a2:7d:ba:82:25:db:32:ff:a6:2d:
                    da:8d:43:75:4b:5a:e9:a0:ad:97:9d:d1:ce:2c:80:
                    fd:bf:07:1d:7b:6e:f2:be:b0:0a:2c:01:3c:4d:00:
                    af:73:4c:c8:07:24:a1:85:54:46:15:73:da:e2:54:
                    5f:bd:92:fc:b1:e3:0a:cf:e2:16:c3:15:8a:c3:ce:
                    9c:3f:f7:91:cc:f7:11:3d:46:33:52:e7:ea:26:40:
                    3c:41:db:99:0d:7e:a6:12:d1:f4:0d:d0:f3:79:bd:
                    96:b6:4b:0d:6d:ae:26:78:a5:ab:a5:d3:31:e1:28:
                    76:2f:45:af:3d:d2:48:99:6d:fc:c4:77:b1:20:a8:
                    c6:9d:b8:57:09:22:c5:29:7d:a7:f3:83:d2:8e:30:
                    94:d7:47:5e:64:02:dc:ad:41:06:b0:e5:34:00:bd:
                    38:08:10:70:7a:55:5c:29:6a:c6:1a:4c:94:38:e4:
                    79:91:f5:bd:81:5c:fb:d8:1a:f3:6f:e3:70:e0:c3:
                    33:4e:f1:d6:e1:0b:32:45:98:1b:3b:ed:a8:86:80:
                    e4:b4:ad:4f:31:67:dc:e0:06:e6:74:4b:7f:32:c5:
                    40:d5:07:a1:3c:37:07:8c:fb:9a:26:81:03:b8:4d:
                    4b:7a:c0:43:30:9f:68:a8:6f:dd:48:14:f1:c8:3d:
                    56:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:76:BB:68:FA:35:9C:B4:93:A2:D3:4F:86:49:D1:8C:3D:35:6E:1D
            X509v3 Authority Key Identifier:
                keyid:6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235342e302f32342d3234203d3e203238343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:ee:81:72:6e:a3:9f:8c:d7:9a:3e:48:a3:ac:41:8a:3c:a2:
         50:66:d3:e5:42:ce:85:b7:31:ac:27:38:59:7a:16:fa:95:c9:
         3c:b7:6d:50:2a:4d:c4:ef:61:08:78:67:16:f7:a0:1b:db:9a:
         fa:ee:1e:78:74:5e:a3:a4:c1:56:ba:46:e5:fe:12:e1:eb:9d:
         f7:97:86:ac:db:7a:2a:41:4c:81:82:4c:e2:a5:b0:12:99:fc:
         1e:7a:c5:52:a0:86:f4:5e:d7:2a:f7:38:50:2f:7f:82:37:16:
         31:40:38:4b:68:81:0f:10:c8:8d:02:1c:00:46:6e:1f:9e:8a:
         b2:72:ec:00:7d:83:3b:e4:09:8d:99:07:65:96:58:47:dc:d1:
         64:c3:64:8d:8b:ee:b0:5b:3c:f4:34:68:bb:ad:6b:d4:85:e7:
         6f:49:f6:ed:11:8c:75:63:44:b9:1d:f5:55:20:99:da:0a:f9:
         f9:7b:35:d5:ba:8d:13:81:7c:38:3d:ec:79:ef:0b:c4:27:24:
         72:4e:1d:84:e6:e1:d0:ea:90:8e:15:ba:5c:ea:ec:42:5b:28:
         04:ef:68:bc:0a:10:c7:e1:f3:8d:41:bf:59:9c:7c:89:bf:49:
         78:f6:f7:6c:bb:6f:f9:7f:fa:45:49:5b:26:2b:c5:8a:3e:39:
         d3:6d:f5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:40 2025 by rpki-client