Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/34352e3138312e38372e302f32342d3234203d3e20323639373239.roa
File:                     34352e3138312e38372e302f32342d3234203d3e20323639373239.roa (raw, json)
Hash identifier:          cQXfBLaekCYTIdECvz/UDvNHeRpFmthYvQFxxgKmBWs=
Subject key identifier:   5D:63:67:44:3D:B7:33:24:FC:1E:A8:19:2E:C8:17:D3:9D:72:92:EB
Certificate issuer:       /CN=F8143F9E2D393A66C9D60429BD535353F0BAF150
Certificate serial:       74205EC904D05F0360796DC72B79DF7C0AFA5EC7
Authority key identifier: F8:14:3F:9E:2D:39:3A:66:C9:D6:04:29:BD:53:53:53:F0:BA:F1:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/34352e3138312e38372e302f32342d3234203d3e20323639373239.roa
Signing time:             Tue 04 Feb 2025 18:25:34 +0000
ROA not before:           Tue 04 Feb 2025 18:20:34 +0000
ROA not after:            Tue 03 Feb 2026 18:25:34 +0000
asID:                     269729
IP address blocks:        45.181.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:20:5e:c9:04:d0:5f:03:60:79:6d:c7:2b:79:df:7c:0a:fa:5e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8143F9E2D393A66C9D60429BD535353F0BAF150
        Validity
            Not Before: Feb  4 18:20:34 2025 GMT
            Not After : Feb  3 18:25:34 2026 GMT
        Subject: CN=5D6367443DB73324FC1EA8192EC817D39D7292EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8b:11:e4:68:c5:d3:26:38:ea:e9:70:f8:b4:
                    f2:a9:0e:36:20:6f:5e:14:e8:84:72:2a:2e:11:d3:
                    23:35:ae:67:19:5d:f5:c9:ed:fa:29:fa:b0:b7:a8:
                    34:02:33:00:bd:ea:9e:3c:e6:de:c1:fc:e4:db:35:
                    ad:fb:b9:7e:61:cf:c3:1b:c0:a8:d5:d7:ba:1e:f7:
                    a4:11:2a:66:c4:8a:0f:6a:b5:61:46:9a:73:70:30:
                    a3:a1:1a:e0:45:1f:a5:ab:2a:c5:4f:81:d0:ba:5d:
                    c7:e9:fb:9a:dd:ae:2a:10:be:73:7f:09:47:f6:ab:
                    95:3b:26:21:5b:04:a0:a9:25:58:51:b7:16:7a:78:
                    1f:cb:b9:22:01:9b:f0:9e:f9:19:1e:a8:04:f2:aa:
                    e8:dc:82:f2:e2:08:21:dd:ef:9a:7e:11:7b:db:1c:
                    87:72:d9:73:3a:e7:d9:81:0d:64:b4:b5:01:5d:d1:
                    55:08:bf:09:12:6d:a7:b1:df:76:49:22:3b:fb:74:
                    2c:f9:94:50:a8:2a:87:dd:c7:35:34:54:ff:af:7d:
                    18:04:e7:9b:b6:ca:9d:26:22:04:c2:eb:3a:7d:b8:
                    35:bd:0c:4f:d3:70:97:bb:8d:81:43:08:66:26:a9:
                    d9:e6:8f:f7:07:26:c4:04:34:0a:e7:f8:2d:9d:61:
                    fc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:63:67:44:3D:B7:33:24:FC:1E:A8:19:2E:C8:17:D3:9D:72:92:EB
            X509v3 Authority Key Identifier:
                keyid:F8:14:3F:9E:2D:39:3A:66:C9:D6:04:29:BD:53:53:53:F0:BA:F1:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/34352e3138312e38372e302f32342d3234203d3e20323639373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:04:d7:0c:0e:1d:b4:e2:0f:cb:61:40:9d:cd:18:6f:18:88:
         58:05:70:48:f9:25:59:3e:ac:e0:29:88:1d:c2:84:b0:9d:1c:
         94:6c:93:f8:a7:8b:b2:5c:66:ba:ee:03:eb:e1:71:03:54:06:
         61:92:bb:a7:24:84:ed:a9:a2:35:9b:8f:6f:d6:74:09:2a:08:
         8f:f2:f1:fe:14:41:78:25:5a:e2:99:cd:48:94:07:10:fe:17:
         88:a9:b6:65:f7:66:6b:26:ed:0f:6b:8c:c2:fd:3a:13:20:ba:
         ce:cb:6f:90:d3:b4:f5:21:24:68:25:1f:ad:4f:c5:f2:30:55:
         3b:e3:73:77:df:30:fd:74:12:86:31:cf:7f:e9:64:66:54:7c:
         17:5d:5c:f1:89:44:7e:31:ba:75:cd:ff:04:f4:61:be:b7:76:
         4e:39:37:66:fd:a6:cd:f3:6c:a0:d5:44:b1:23:12:93:05:48:
         f6:2c:48:72:62:1d:d3:0d:46:db:ae:7e:23:53:f6:fe:e9:c0:
         15:83:fe:a4:67:25:4c:c2:2c:e6:3d:2c:b7:15:fc:20:a7:7a:
         55:e6:da:52:2f:70:ef:07:91:34:6a:b8:8e:fb:2f:1a:b6:64:
         db:cf:32:f0:e4:ae:cd:ae:c3:ce:3e:64:91:03:8c:36:09:0c:
         07:5c:ce:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:28:01 2025 by rpki-client