Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa
File:                     34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa (raw, json)
Hash identifier:          nPvm3kzjbUmYOtzUojc17lqgCTEOSCYg7LLW7Gc1DQs=
Subject key identifier:   9F:F9:90:B4:C4:22:F5:DF:2F:B2:EA:12:6F:AC:97:F7:4D:EB:D1:03
Certificate issuer:       /CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
Certificate serial:       6694FD61F221A5011DC305B906A0410164A730FE
Authority key identifier: BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa
Signing time:             Tue 04 Feb 2025 20:04:57 +0000
ROA not before:           Tue 04 Feb 2025 19:59:57 +0000
ROA not after:            Tue 03 Feb 2026 20:04:57 +0000
asID:                     266706
IP address blocks:        45.229.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 00:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:94:fd:61:f2:21:a5:01:1d:c3:05:b9:06:a0:41:01:64:a7:30:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
        Validity
            Not Before: Feb  4 19:59:57 2025 GMT
            Not After : Feb  3 20:04:57 2026 GMT
        Subject: CN=9FF990B4C422F5DF2FB2EA126FAC97F74DEBD103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:97:e9:f3:4c:a2:72:fa:84:b9:66:c7:3a:d6:
                    70:fd:47:4e:c6:ca:e8:88:2d:9c:63:e9:95:16:35:
                    1b:3e:2a:de:de:a6:fa:4c:93:13:78:1f:4b:77:d5:
                    b2:f4:17:f3:f9:d7:1e:99:b1:c9:31:9e:ef:43:c7:
                    ea:de:b3:41:a8:36:ac:78:7f:49:fb:48:53:8b:41:
                    21:9b:47:db:31:67:33:de:cb:78:20:1e:ad:ca:2d:
                    dc:38:12:84:4c:7a:22:73:e4:de:09:5d:e5:4f:b2:
                    ad:bf:75:ba:29:4e:fd:2c:3a:98:60:4a:bb:9a:bb:
                    bf:6a:aa:b8:19:e0:1f:ba:c5:2a:6e:07:dc:a7:1d:
                    78:13:d3:1d:2b:89:59:c8:3e:c0:a5:ad:22:8d:a9:
                    fe:00:51:50:bf:59:32:dd:b0:f4:e1:83:d0:aa:99:
                    e8:a9:db:93:88:da:c7:b1:3c:d6:e5:60:22:42:cb:
                    78:5c:54:cf:1e:e8:16:7f:95:61:3d:43:6d:c9:96:
                    98:0a:61:85:2e:e3:d5:b9:9d:11:a6:56:a6:eb:c8:
                    d7:49:1a:0b:3b:ae:9d:73:5e:49:a9:35:6d:f3:de:
                    74:4e:c9:29:df:70:01:c6:d2:c5:8f:df:8a:e7:d4:
                    ac:74:0c:2b:58:81:8d:8a:a7:73:4d:62:b8:e7:7b:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F9:90:B4:C4:22:F5:DF:2F:B2:EA:12:6F:AC:97:F7:4D:EB:D1:03
            X509v3 Authority Key Identifier:
                keyid:BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:62:7c:ee:fc:b1:97:4e:55:ea:f2:a8:45:1e:11:ee:21:72:
         ff:fd:8d:31:16:91:65:0b:68:35:28:b9:3b:4a:f8:f1:8a:f8:
         34:f5:b8:11:a1:6e:da:13:9f:4d:68:b0:21:82:2e:de:56:5a:
         38:99:bf:95:6e:1a:aa:c5:c9:31:e2:07:78:d0:77:24:f4:ce:
         ce:6f:9e:ac:4a:c3:da:0d:14:9c:6c:14:6b:6b:61:1f:87:0b:
         93:d8:84:a9:44:ae:35:0a:9d:d4:be:13:cf:c3:a3:59:68:b8:
         24:ec:67:8c:20:e6:bf:e6:f7:af:c7:9f:da:b9:e4:2d:c1:e1:
         13:6a:08:5c:b2:39:89:57:4e:e9:79:dc:12:83:0b:37:89:9f:
         86:e9:c3:8b:19:d9:21:cc:3c:75:93:fe:0c:bf:08:e2:f3:f8:
         35:82:68:a6:7f:0c:3d:37:fb:ce:51:c8:52:84:dc:eb:a0:3b:
         00:4c:90:b5:a6:a0:d4:1f:ab:23:27:e9:ab:8e:1d:87:f7:34:
         15:7f:5f:ef:9b:a1:3e:48:eb:56:c2:e3:b1:3b:68:2a:48:4c:
         e8:2f:ff:d7:d8:44:ee:a2:f5:75:7e:f4:71:99:99:fb:4a:6b:
         ea:e3:8f:b9:61:84:1e:2d:63:af:6d:db:05:03:cc:cd:0e:78:
         44:d7:7e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:25:02 2025 by rpki-client