Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/34352e3233392e3230382e302f32322d3234203d3e20323635373033.roa
File:                     34352e3233392e3230382e302f32322d3234203d3e20323635373033.roa (raw, json)
Hash identifier:          drTPYu44cUZ+WlRY8cGcyjgh077ey6nMJaeCfA0hDhU=
Subject key identifier:   34:26:9C:91:20:FB:D5:D8:08:44:20:66:2C:E9:F7:D3:52:1C:F0:E4
Certificate issuer:       /CN=30CE6EC3702B5E482D95BC9EF543168CE08B2F66
Certificate serial:       703959F76B18EA36E7D09B230D5E647D63A7779C
Authority key identifier: 30:CE:6E:C3:70:2B:5E:48:2D:95:BC:9E:F5:43:16:8C:E0:8B:2F:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/34352e3233392e3230382e302f32322d3234203d3e20323635373033.roa
Signing time:             Tue 04 Feb 2025 18:21:08 +0000
ROA not before:           Tue 04 Feb 2025 18:16:08 +0000
ROA not after:            Tue 03 Feb 2026 18:21:08 +0000
asID:                     265703
IP address blocks:        45.239.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:39:59:f7:6b:18:ea:36:e7:d0:9b:23:0d:5e:64:7d:63:a7:77:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30CE6EC3702B5E482D95BC9EF543168CE08B2F66
        Validity
            Not Before: Feb  4 18:16:08 2025 GMT
            Not After : Feb  3 18:21:08 2026 GMT
        Subject: CN=34269C9120FBD5D8084420662CE9F7D3521CF0E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:93:2f:a4:39:62:4b:f9:27:c7:c9:b3:83:
                    37:b4:3e:79:2b:40:7b:17:b9:0d:02:fe:ad:5d:34:
                    d4:28:03:d0:f9:4c:e3:9c:91:9a:3c:fb:93:48:85:
                    68:c4:0c:55:74:d9:03:67:07:b8:40:62:1c:e3:43:
                    22:53:bf:04:5b:24:6b:c1:f6:49:bc:bf:6a:a2:aa:
                    22:97:41:8b:1f:98:63:5c:34:88:fa:47:45:36:7e:
                    8d:8e:57:69:20:64:ad:03:89:f3:b7:b1:38:bf:ab:
                    d7:71:49:91:81:d5:ca:46:41:9c:e6:20:de:ec:99:
                    d6:52:87:33:ca:3f:19:89:56:ff:32:62:31:f3:b8:
                    0c:30:bb:47:1e:92:fc:c5:1a:e7:7a:d5:0e:a3:a8:
                    1b:ca:a4:d5:8a:f3:46:b5:e5:56:03:48:e9:6d:58:
                    9a:cf:cc:e5:49:0a:61:0f:a4:da:d8:94:6f:66:af:
                    bb:62:80:ce:21:a1:da:a7:9c:19:e8:2d:3a:45:86:
                    59:07:49:9c:db:02:8a:6a:d7:05:48:53:53:ac:90:
                    27:32:98:1f:ca:d4:64:7f:52:7c:32:75:a3:17:86:
                    65:a3:d9:12:16:e5:02:2c:1d:8c:4f:6b:57:3a:96:
                    b6:41:51:a9:69:21:35:b3:e0:cf:60:70:f5:94:51:
                    a7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:26:9C:91:20:FB:D5:D8:08:44:20:66:2C:E9:F7:D3:52:1C:F0:E4
            X509v3 Authority Key Identifier:
                keyid:30:CE:6E:C3:70:2B:5E:48:2D:95:BC:9E:F5:43:16:8C:E0:8B:2F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/34352e3233392e3230382e302f32322d3234203d3e20323635373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:25:90:ae:7d:2e:d5:33:63:16:4e:80:2c:4d:74:2f:a0:bc:
         50:21:d7:09:5f:1d:9a:32:01:9e:4a:3f:04:7e:bd:b6:82:c9:
         be:ab:dc:54:5a:8e:2b:8a:9b:af:5e:60:8f:b3:a1:b4:3a:f7:
         13:96:e2:98:6d:5f:77:16:ea:39:50:f8:7b:c9:e9:2c:d0:c3:
         fd:87:63:d0:c6:6c:6c:6c:e1:24:15:06:94:ea:91:54:54:9f:
         53:b3:1a:a5:c8:b9:b4:5b:28:e0:1a:62:6d:1b:dd:02:24:ea:
         08:6c:d6:90:7e:2c:33:91:b5:f0:8b:1b:96:a0:96:dd:60:b3:
         88:4d:d1:19:d4:53:0e:79:77:cd:00:dc:37:e3:a3:2c:f5:75:
         e0:41:b6:64:53:f0:c4:47:5a:00:d4:af:66:1b:4a:69:66:b1:
         da:d3:7d:3a:b0:2c:ee:bf:7f:50:b8:bb:bc:38:44:41:4d:eb:
         16:d9:75:15:99:11:84:e6:ab:06:73:a6:c9:13:b9:c3:92:83:
         c9:9a:be:94:a0:f4:78:7b:24:5d:d8:24:0e:08:07:f2:90:3d:
         ca:a3:7a:ac:dc:aa:15:4c:39:a7:2e:32:03:8b:85:44:5f:48:
         cb:f8:0c:f6:7a:56:92:ce:9b:c9:85:19:e9:d9:4c:70:52:46:
         e7:29:dd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:58:27 2025 by rpki-client