Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323634363436.roa
File:                     34352e3138312e3230342e302f32332d3234203d3e20323634363436.roa (raw, json)
Hash identifier:          s97sb1HMcf934YVNh2s6CmDl5MxQiF3XRW/Qh+pHs9E=
Subject key identifier:   CD:A5:18:DA:9A:51:D4:50:BE:9C:9B:61:6B:36:A0:F1:F8:03:A7:AB
Certificate issuer:       /CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Certificate serial:       30B866D8B01E796CBFB4B14AC8FCD34745375DB9
Authority key identifier: 7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323634363436.roa
Signing time:             Mon 17 Mar 2025 14:12:06 +0000
ROA not before:           Mon 17 Mar 2025 14:07:06 +0000
ROA not after:            Mon 16 Mar 2026 14:12:06 +0000
asID:                     264646
IP address blocks:        45.181.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b8:66:d8:b0:1e:79:6c:bf:b4:b1:4a:c8:fc:d3:47:45:37:5d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
        Validity
            Not Before: Mar 17 14:07:06 2025 GMT
            Not After : Mar 16 14:12:06 2026 GMT
        Subject: CN=CDA518DA9A51D450BE9C9B616B36A0F1F803A7AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:8b:5c:47:5b:f1:19:b4:8e:f4:9d:2c:eb:
                    4d:dd:6d:31:a4:bf:11:84:2d:cf:4f:91:d6:a0:6e:
                    1f:1e:a1:b5:8c:dd:bb:ed:f3:d2:3a:06:b8:ec:8c:
                    82:d5:6d:2c:d9:01:e4:9e:13:c8:8f:eb:2e:a2:7a:
                    4e:59:54:4d:1f:eb:7d:72:6e:61:5e:07:6d:3a:71:
                    da:e6:16:09:fa:51:11:6d:cc:75:e9:29:fb:74:97:
                    9f:75:12:f5:37:c4:d6:74:15:e9:e7:d5:bb:36:5b:
                    17:9c:d8:b3:fc:26:c9:6f:ba:f0:d2:ec:b1:ee:9f:
                    be:63:05:45:7d:d7:53:1b:26:54:6b:00:32:d3:03:
                    7d:1f:67:1a:0d:95:2c:0d:89:1f:b6:1c:ef:51:fe:
                    e4:2c:49:76:ad:32:90:bb:6c:81:df:39:74:26:1e:
                    52:71:bb:d5:f3:13:d3:23:82:35:15:c0:33:43:40:
                    8a:3e:11:98:e5:cc:89:ce:9f:5a:e6:a5:18:86:f4:
                    e8:bc:c7:ed:aa:55:07:bc:0e:f2:5a:0a:ab:2a:c5:
                    15:7f:b0:c8:bf:fa:3e:77:41:34:e9:7c:52:aa:e2:
                    f7:77:21:3f:25:ca:6d:35:54:7d:d3:2c:b3:89:e8:
                    9e:fd:80:e6:7a:24:6d:47:f9:16:29:7b:7f:ec:d8:
                    3c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A5:18:DA:9A:51:D4:50:BE:9C:9B:61:6B:36:A0:F1:F8:03:A7:AB
            X509v3 Authority Key Identifier:
                keyid:7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323634363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:76:27:48:10:87:17:3f:49:0e:26:17:57:5d:54:dc:20:78:
         6e:a0:36:60:60:1f:ce:85:c6:95:a3:a6:7d:48:2f:95:08:5d:
         dc:5f:36:6c:d3:1f:d8:02:e1:fb:56:58:ac:34:09:00:e6:f3:
         70:0b:ef:fc:70:45:18:7e:cb:f8:0a:43:8d:bd:fb:da:28:98:
         db:13:bc:20:08:d8:16:0e:23:76:b4:93:11:e0:ef:b9:15:c4:
         cb:5a:d3:f9:e6:07:0a:5e:06:b5:9e:fe:a9:98:5c:48:22:44:
         8e:27:b1:31:4f:97:70:70:cb:10:64:1b:98:51:68:e9:ba:44:
         37:15:fd:29:07:8a:02:28:40:b0:1b:f1:8f:42:7c:4b:38:06:
         39:40:50:e6:7e:43:93:2f:f9:0e:41:e0:f5:c8:bc:ee:ad:80:
         ae:98:84:ab:94:72:d2:25:b1:9d:58:eb:fe:67:84:36:93:db:
         f0:13:d1:55:41:29:9d:43:49:7e:1e:6a:db:b8:0e:d8:60:47:
         cf:2b:73:29:d1:6e:77:f6:f2:29:f1:5b:ac:bd:53:8c:3e:cd:
         02:d2:0f:56:6d:3a:ce:10:66:e0:f3:ae:1e:72:5c:d7:b8:59:
         30:c0:48:8f:cf:a7:8c:53:6c:ad:7e:c4:2c:48:6e:77:71:2f:
         e7:0c:ba:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:28 2025 by rpki-client