Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/34352e3233392e3230382e302f32322d3234203d3e20323639373333.roa
File:                     34352e3233392e3230382e302f32322d3234203d3e20323639373333.roa (raw, json)
Hash identifier:          OnqdPqowuaMkRH6m4GjW5xNdzWaXASXzZdnjzlpsLVc=
Subject key identifier:   7A:6A:5C:4B:5A:9A:71:96:ED:BF:B6:AE:C5:EA:80:AA:EE:32:B2:6D
Certificate issuer:       /CN=30CE6EC3702B5E482D95BC9EF543168CE08B2F66
Certificate serial:       589869BBA4841298E926D54143FA2E38B0BF1A74
Authority key identifier: 30:CE:6E:C3:70:2B:5E:48:2D:95:BC:9E:F5:43:16:8C:E0:8B:2F:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/34352e3233392e3230382e302f32322d3234203d3e20323639373333.roa
Signing time:             Tue 04 Feb 2025 18:21:07 +0000
ROA not before:           Tue 04 Feb 2025 18:16:07 +0000
ROA not after:            Tue 03 Feb 2026 18:21:07 +0000
asID:                     269733
IP address blocks:        45.239.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:98:69:bb:a4:84:12:98:e9:26:d5:41:43:fa:2e:38:b0:bf:1a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30CE6EC3702B5E482D95BC9EF543168CE08B2F66
        Validity
            Not Before: Feb  4 18:16:07 2025 GMT
            Not After : Feb  3 18:21:07 2026 GMT
        Subject: CN=7A6A5C4B5A9A7196EDBFB6AEC5EA80AAEE32B26D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:5f:4e:fe:0d:50:50:71:f4:74:24:d5:05:
                    25:76:ce:b0:d4:e7:05:b4:d1:28:a6:15:92:75:af:
                    a6:f5:f7:3f:7c:8c:9c:73:19:c4:13:94:fc:40:80:
                    bb:4a:c0:c1:91:31:71:99:03:57:31:45:f3:cf:8a:
                    50:c5:b9:af:7e:14:03:c8:20:d7:de:5a:ef:07:d5:
                    c6:32:d0:6f:1b:80:77:af:d7:5c:f5:a2:da:d3:b2:
                    f0:0e:20:16:b8:3b:13:05:59:84:6b:51:80:e1:bf:
                    28:05:a6:69:71:ee:71:f7:a9:10:b6:b2:6e:b3:c7:
                    0a:34:09:44:47:ce:4c:62:da:2c:36:0d:80:55:63:
                    f9:de:d8:52:2a:63:a9:41:8f:bc:a9:5b:8a:c6:1d:
                    be:04:e2:5d:01:85:a7:e1:91:be:ec:7d:32:d1:81:
                    fc:25:b7:56:4e:b2:54:97:a3:41:2b:86:2a:eb:65:
                    6c:cd:88:83:1a:c2:94:60:16:16:90:dc:02:e7:1d:
                    98:8b:2f:84:21:91:c9:b7:6a:83:db:18:fe:b6:d3:
                    9a:f4:ee:2c:d1:b1:d4:aa:c1:17:09:84:57:5b:08:
                    7b:7d:e4:40:e5:1f:88:db:c1:3e:90:20:39:33:f3:
                    29:d9:76:fc:2e:7f:01:fd:46:bd:73:77:64:48:54:
                    79:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6A:5C:4B:5A:9A:71:96:ED:BF:B6:AE:C5:EA:80:AA:EE:32:B2:6D
            X509v3 Authority Key Identifier:
                keyid:30:CE:6E:C3:70:2B:5E:48:2D:95:BC:9E:F5:43:16:8C:E0:8B:2F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30CE6EC3702B5E482D95BC9EF543168CE08B2F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51C6C8139EDF163D07F881859D9FD4D4A27D746974CB7773CB657FF888D04491/0/34352e3233392e3230382e302f32322d3234203d3e20323639373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:f7:c5:ac:52:0d:42:40:6e:c9:8d:e1:d8:5c:d7:70:bc:e2:
         f3:a4:ce:95:ff:63:95:c0:18:43:a6:15:46:45:5e:e4:0f:5a:
         57:db:82:35:2e:dc:da:f8:92:a7:26:0b:23:7b:7f:08:72:72:
         94:ae:3f:19:d7:af:36:e9:9a:9f:73:96:ad:76:4f:f5:ac:05:
         2f:9f:97:90:3c:aa:ac:5c:a2:d8:0f:14:ce:9f:ca:93:b5:ba:
         6c:43:af:ab:de:79:aa:fa:6e:f8:a1:ed:4a:0e:19:29:fc:0a:
         93:00:14:c8:73:de:1c:64:43:f8:14:2e:ca:bb:1d:97:8e:6a:
         52:3e:bb:79:21:05:9b:e1:4f:0a:72:f1:db:e2:ad:96:c2:ab:
         8b:e9:92:68:5c:30:15:f6:33:b3:4b:8c:76:8d:03:1c:77:fe:
         b0:66:44:94:cc:60:0d:bd:74:4b:13:a7:34:21:2a:ee:33:d2:
         0a:ff:76:0d:d6:98:d9:57:72:20:be:88:28:42:42:cf:0f:a1:
         bb:8d:37:a4:ff:dc:e6:e9:3c:ba:af:96:8f:9c:33:a8:f4:54:
         75:4b:d5:b0:7f:51:c3:1f:88:fd:da:98:44:75:f2:2f:70:a2:
         65:04:b3:1e:f6:97:f8:7f:19:26:68:a5:f3:5e:06:7f:fb:68:
         41:a2:e6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:17 2025 by rpki-client