Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/34352e3138352e3134382e302f32342d3234203d3e20323639383037.roa
File:                     34352e3138352e3134382e302f32342d3234203d3e20323639383037.roa (raw, json)
Hash identifier:          HKmS4ElOOZj7WU5cEqaNDbix6OitkkXm5HSqIZpGN5g=
Subject key identifier:   FE:F6:F0:43:10:43:9E:3E:B6:91:36:82:EC:C2:27:F6:D6:96:FD:4B
Certificate issuer:       /CN=F68803BAD715CA869FCCE393884E6C602582BFF4
Certificate serial:       034DC8C0AFD0A64F9F56896A5C172EA7CDA5A8AD
Authority key identifier: F6:88:03:BA:D7:15:CA:86:9F:CC:E3:93:88:4E:6C:60:25:82:BF:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68803BAD715CA869FCCE393884E6C602582BFF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/34352e3138352e3134382e302f32342d3234203d3e20323639383037.roa
Signing time:             Tue 04 Feb 2025 18:48:52 +0000
ROA not before:           Tue 04 Feb 2025 18:43:52 +0000
ROA not after:            Tue 03 Feb 2026 18:48:52 +0000
asID:                     269807
IP address blocks:        45.185.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/F68803BAD715CA869FCCE393884E6C602582BFF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/F68803BAD715CA869FCCE393884E6C602582BFF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68803BAD715CA869FCCE393884E6C602582BFF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4d:c8:c0:af:d0:a6:4f:9f:56:89:6a:5c:17:2e:a7:cd:a5:a8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F68803BAD715CA869FCCE393884E6C602582BFF4
        Validity
            Not Before: Feb  4 18:43:52 2025 GMT
            Not After : Feb  3 18:48:52 2026 GMT
        Subject: CN=FEF6F04310439E3EB6913682ECC227F6D696FD4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:60:59:38:00:a0:aa:ea:21:1c:a2:cf:05:11:
                    73:95:9d:1c:97:46:4f:79:d7:fa:8e:b8:55:67:cc:
                    24:66:6a:a4:43:d8:c5:a6:65:95:77:d6:01:74:25:
                    31:a1:a8:40:53:d6:f0:ab:b8:ff:09:1f:da:16:b2:
                    f6:5c:13:55:57:dc:9b:c9:c7:eb:b9:c5:cf:6a:63:
                    b7:f4:55:8a:5d:d6:68:fe:57:d9:d4:0e:54:4f:29:
                    1f:21:37:c7:0c:a1:63:dd:8c:38:f5:21:dc:6c:ea:
                    98:02:3e:a5:cc:ca:e5:15:ea:bd:0e:fd:c9:c6:90:
                    71:9f:7f:08:b4:1d:c3:02:08:c9:42:25:cc:72:4a:
                    c0:5f:1a:df:81:47:ef:a1:bd:f3:fd:68:73:4f:ab:
                    cc:63:a0:7b:13:ea:e4:b2:34:d3:62:6a:96:f3:6a:
                    63:24:9f:8c:4f:4c:a5:4c:7e:60:e1:51:c2:6c:d7:
                    cc:f5:4d:36:d0:13:f9:02:5a:d2:b7:55:81:f9:8d:
                    08:17:6f:73:9b:0f:e7:3f:3e:d2:ce:ba:c5:68:e7:
                    35:47:db:62:8b:1a:2c:83:93:d7:31:7e:dd:0b:d8:
                    3c:2c:80:e8:dd:5f:f3:ec:b3:f3:dc:a5:1a:c2:e8:
                    4b:b7:a6:2e:e2:ea:92:c5:0e:ce:e3:06:80:25:13:
                    80:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F6:F0:43:10:43:9E:3E:B6:91:36:82:EC:C2:27:F6:D6:96:FD:4B
            X509v3 Authority Key Identifier:
                keyid:F6:88:03:BA:D7:15:CA:86:9F:CC:E3:93:88:4E:6C:60:25:82:BF:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/F68803BAD715CA869FCCE393884E6C602582BFF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68803BAD715CA869FCCE393884E6C602582BFF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54B36AF948B3E6D51AB687F0CE15A8FE5CB8C977D0E2BEEB42850B1DE5F8FA83/0/34352e3138352e3134382e302f32342d3234203d3e20323639383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:0f:ed:0d:38:bb:36:78:a6:f0:4d:9f:7b:0c:0e:f8:11:9f:
         1c:e2:7d:3c:42:5a:b3:0b:1f:83:18:ff:65:1e:4a:13:bb:82:
         b2:3c:37:4a:94:90:b6:cc:3c:58:da:78:f2:da:d1:a1:56:3e:
         c3:53:2f:a1:ff:b5:76:dd:4e:89:96:c0:46:bd:ae:ed:a0:d7:
         8f:73:34:2b:92:46:9f:c8:4d:8a:56:d8:70:c5:ca:74:1d:ce:
         1e:ef:7f:87:83:4a:8c:b8:08:e8:f2:12:05:98:4e:50:e7:ae:
         12:19:44:ca:c0:d2:bd:9f:a1:1c:62:75:a5:88:fb:32:1c:fc:
         7c:95:7f:66:a9:9e:be:b1:89:67:5e:2f:09:8a:f2:68:4d:cf:
         38:c2:14:41:e8:13:f4:2a:c7:0c:20:9b:91:67:4f:27:92:bf:
         09:11:35:b6:37:bd:14:77:70:a1:23:0a:e5:21:00:d2:9f:31:
         5e:ed:96:84:a3:a6:4c:e5:d6:d9:29:25:42:a5:7a:6e:4f:46:
         1a:2d:77:e7:a1:22:c3:f7:70:b0:ae:f4:2a:e1:f6:f7:b9:3b:
         65:5c:c0:b6:ce:62:27:fc:45:6d:de:db:8f:f7:b0:cb:19:f3:
         42:e3:e4:e0:53:a4:cf:62:32:fc:81:7d:19:32:02:37:85:fc:
         b1:bd:e7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:52:33 2025 by rpki-client