Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/34352e3137352e3130332e302f32342d3234203d3e20323637383333.roa
File:                     34352e3137352e3130332e302f32342d3234203d3e20323637383333.roa (raw, json)
Hash identifier:          aUfK4gyhV4udnRE/SQqfuvkByYouPc31dqxCzzitnjY=
Subject key identifier:   80:9B:9D:CC:B5:A1:25:2E:78:B2:AC:F8:4E:7D:64:FB:D4:3D:A6:3F
Certificate issuer:       /CN=550C6BE760B5DF61359F2CD954A0E95372835F2C
Certificate serial:       47F0031F609664CA112D315BB68813E467B37D9C
Authority key identifier: 55:0C:6B:E7:60:B5:DF:61:35:9F:2C:D9:54:A0:E9:53:72:83:5F:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/34352e3137352e3130332e302f32342d3234203d3e20323637383333.roa
Signing time:             Tue 04 Feb 2025 18:15:45 +0000
ROA not before:           Tue 04 Feb 2025 18:10:45 +0000
ROA not after:            Tue 03 Feb 2026 18:15:45 +0000
asID:                     267833
IP address blocks:        45.175.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f0:03:1f:60:96:64:ca:11:2d:31:5b:b6:88:13:e4:67:b3:7d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550C6BE760B5DF61359F2CD954A0E95372835F2C
        Validity
            Not Before: Feb  4 18:10:45 2025 GMT
            Not After : Feb  3 18:15:45 2026 GMT
        Subject: CN=809B9DCCB5A1252E78B2ACF84E7D64FBD43DA63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d5:09:9f:52:05:2b:2b:1b:b7:03:6a:f4:7e:
                    d5:9e:66:0f:7d:a0:2c:52:34:0f:74:12:21:a1:21:
                    65:58:df:17:9f:61:4b:4e:c6:2e:3a:64:12:19:47:
                    93:b4:ee:c4:35:aa:ad:24:51:39:99:f3:be:f9:79:
                    91:81:55:bf:e7:6d:74:0c:76:f2:2c:45:00:2f:78:
                    b4:30:4b:d9:6a:4f:39:78:87:13:db:66:75:60:9d:
                    23:8d:e7:c6:e4:aa:06:80:a6:23:1e:56:ca:96:6b:
                    b2:fe:e5:27:9e:ed:cd:d6:64:a4:63:25:07:09:ea:
                    c6:22:c7:7f:f9:f8:1b:ba:4f:31:24:b1:5c:b3:8e:
                    d5:00:d7:e1:b1:30:47:0e:89:5f:97:02:89:5e:af:
                    3f:ea:30:d3:51:ae:98:31:78:1d:a8:67:67:c1:91:
                    7e:df:3d:e4:19:a8:1c:12:ef:42:24:c3:58:ba:01:
                    da:00:d2:d4:ac:68:43:58:25:b8:96:eb:09:e7:a4:
                    16:9c:e0:0f:5a:29:2e:f8:4e:a8:55:78:60:10:13:
                    d5:31:0b:b1:f5:d8:26:c6:c0:20:f1:d6:cc:d5:7e:
                    f0:f9:2b:82:e2:49:42:11:b7:b9:11:6c:88:ee:31:
                    bf:f1:cd:d1:a3:a3:f3:f7:f3:d5:18:40:64:17:7d:
                    67:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9B:9D:CC:B5:A1:25:2E:78:B2:AC:F8:4E:7D:64:FB:D4:3D:A6:3F
            X509v3 Authority Key Identifier:
                keyid:55:0C:6B:E7:60:B5:DF:61:35:9F:2C:D9:54:A0:E9:53:72:83:5F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/34352e3137352e3130332e302f32342d3234203d3e20323637383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:78:e0:9b:28:87:8b:3a:3f:8d:ad:b2:49:55:72:51:27:1c:
         fd:26:5c:37:6a:2d:0d:58:08:e6:3d:d4:fe:6d:93:10:63:98:
         97:ef:bf:c9:80:2c:81:a1:97:67:89:7c:d5:9e:ce:3f:dd:e9:
         17:a3:36:cf:e8:61:ba:5a:4b:3e:c1:fe:1f:9a:97:fd:d1:eb:
         b5:25:25:c9:b5:35:cb:20:71:41:91:45:e8:d3:c2:a8:79:9c:
         9f:89:74:50:89:c5:14:86:71:89:db:4e:f4:5b:3b:34:d3:10:
         91:a2:a9:8e:57:a6:72:90:5d:1b:e9:70:0b:4d:70:08:bd:93:
         ee:2c:53:14:65:93:40:db:2a:24:78:f3:2c:cf:68:cf:6e:2b:
         19:93:9d:33:2a:22:27:43:a1:ff:dd:4c:85:23:ad:13:a9:4f:
         37:25:fc:1b:3e:99:5c:32:66:fe:24:0e:63:f7:6f:52:1f:1a:
         0f:d9:a5:c8:6a:59:76:7f:49:2a:95:83:2f:03:84:d7:43:fa:
         38:2a:81:62:16:b4:2e:41:71:cd:6a:09:be:c0:46:09:51:9e:
         47:6e:33:e3:6b:4a:06:61:2a:8e:5a:34:3f:4e:e1:6a:7d:fc:
         b7:17:27:6a:1e:49:1c:db:f4:98:3d:a7:03:cd:12:6d:51:18:
         3b:03:51:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:21:04 2025 by rpki-client