Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53597B0E71B9106A97FE0731821F974E2A39E5F15F4244AEA1D09AB156C65042/0/34352e362e3231352e302f32342d3234203d3e20323730313031.roa
File:                     34352e362e3231352e302f32342d3234203d3e20323730313031.roa (raw, json)
Hash identifier:          nsihwyquDVbt3obDztDi/T/FT777Q4z4FzBGuLc1jxc=
Subject key identifier:   36:CA:E4:0E:9D:AB:9E:79:17:BE:DF:70:31:9B:B7:DE:41:91:4F:56
Certificate issuer:       /CN=BD94D9821F379D20EA36D36736038ACA527A9932
Certificate serial:       77CFE7D22E29410DC8404F504C139F27AF60D893
Authority key identifier: BD:94:D9:82:1F:37:9D:20:EA:36:D3:67:36:03:8A:CA:52:7A:99:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD94D9821F379D20EA36D36736038ACA527A9932.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53597B0E71B9106A97FE0731821F974E2A39E5F15F4244AEA1D09AB156C65042/0/34352e362e3231352e302f32342d3234203d3e20323730313031.roa
Signing time:             Tue 04 Feb 2025 18:16:11 +0000
ROA not before:           Tue 04 Feb 2025 18:11:11 +0000
ROA not after:            Tue 03 Feb 2026 18:16:11 +0000
asID:                     270101
IP address blocks:        45.6.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53597B0E71B9106A97FE0731821F974E2A39E5F15F4244AEA1D09AB156C65042/0/BD94D9821F379D20EA36D36736038ACA527A9932.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53597B0E71B9106A97FE0731821F974E2A39E5F15F4244AEA1D09AB156C65042/0/BD94D9821F379D20EA36D36736038ACA527A9932.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD94D9821F379D20EA36D36736038ACA527A9932.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cf:e7:d2:2e:29:41:0d:c8:40:4f:50:4c:13:9f:27:af:60:d8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD94D9821F379D20EA36D36736038ACA527A9932
        Validity
            Not Before: Feb  4 18:11:11 2025 GMT
            Not After : Feb  3 18:16:11 2026 GMT
        Subject: CN=36CAE40E9DAB9E7917BEDF70319BB7DE41914F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9d:0e:b6:5d:0c:a0:66:dc:20:8c:e1:2b:0d:
                    90:30:71:e5:4d:0a:18:0f:45:37:ca:37:e7:0b:3f:
                    64:58:8a:19:2a:ae:bd:da:6b:9a:f2:84:2a:8b:92:
                    da:6c:98:f1:47:5a:13:23:f0:a3:81:06:1e:91:df:
                    46:05:1f:cc:3a:06:b4:d1:01:64:59:36:19:32:b7:
                    4a:a5:87:3f:64:0b:e2:de:80:a4:cd:4d:da:6c:61:
                    11:30:60:c6:31:fd:25:c6:07:b8:ae:77:c4:8d:22:
                    4c:19:c1:02:f0:84:c1:d3:cc:08:65:58:d2:58:da:
                    60:c9:99:e9:d3:ba:f8:bf:76:fa:fc:6e:6c:a1:62:
                    3a:98:39:94:ca:15:d1:5d:f0:db:4a:b5:98:bf:2a:
                    df:e4:f3:b4:90:ba:24:27:19:37:4e:5c:d6:49:cc:
                    cc:32:72:cd:a5:30:2b:a9:bb:f7:90:95:48:a9:1c:
                    4e:c7:c7:31:e9:51:b5:a8:61:e4:c6:0d:9b:16:0a:
                    47:2a:6b:83:78:bf:76:44:d9:2e:69:17:7b:74:4a:
                    76:9c:14:80:47:e0:55:35:ce:3b:90:5d:a7:34:88:
                    41:3e:d5:d3:8f:e5:7e:c0:12:29:3f:bd:0a:47:b6:
                    09:d0:fa:79:b6:6e:ab:93:42:b9:97:b6:22:8b:b7:
                    5a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CA:E4:0E:9D:AB:9E:79:17:BE:DF:70:31:9B:B7:DE:41:91:4F:56
            X509v3 Authority Key Identifier:
                keyid:BD:94:D9:82:1F:37:9D:20:EA:36:D3:67:36:03:8A:CA:52:7A:99:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53597B0E71B9106A97FE0731821F974E2A39E5F15F4244AEA1D09AB156C65042/0/BD94D9821F379D20EA36D36736038ACA527A9932.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD94D9821F379D20EA36D36736038ACA527A9932.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53597B0E71B9106A97FE0731821F974E2A39E5F15F4244AEA1D09AB156C65042/0/34352e362e3231352e302f32342d3234203d3e20323730313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:20:49:98:f2:23:32:2c:59:c6:d7:a1:2c:81:89:96:e1:2c:
         53:66:dc:36:76:f5:36:da:12:02:da:85:e4:69:02:db:ac:2b:
         56:c3:58:40:6c:e9:bd:d8:c2:88:c5:b9:d2:5e:63:3d:d8:6f:
         fc:ae:d5:57:57:2f:bd:dd:87:90:77:9d:98:ce:61:12:a1:12:
         78:50:7b:01:24:5a:16:a8:59:72:91:68:5a:0c:41:99:97:bd:
         ec:8f:e8:ff:df:9c:ae:7f:db:81:76:22:f0:3d:f2:5f:fe:1c:
         61:1c:00:21:22:aa:5e:c9:29:04:a5:66:c1:9a:88:ea:9d:01:
         13:65:30:cf:06:37:bb:d1:b6:93:b2:76:59:81:ca:59:1a:97:
         ed:9d:d6:a5:eb:03:78:a5:95:3a:0c:a8:8a:a7:27:dc:f4:47:
         fa:fe:a1:84:7c:c7:ea:cd:5b:c6:38:cb:2d:1f:c6:fc:99:94:
         c3:ed:09:25:ac:dd:85:22:f6:49:6c:20:19:77:cb:d6:60:c3:
         22:4c:55:9b:f0:d1:3c:50:75:dc:9e:16:35:56:95:94:41:f5:
         5b:06:bf:ba:84:26:fb:fd:19:1d:67:a0:23:93:a6:28:b0:f3:
         98:20:11:4d:69:08:38:8f:28:55:38:85:1a:e0:bc:59:0b:95:
         26:6f:d1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:35:57 2025 by rpki-client