Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/34352e3232342e3134332e302f32342d3234203d3e20323635383433.roa
File:                     34352e3232342e3134332e302f32342d3234203d3e20323635383433.roa (raw, json)
Hash identifier:          3x6Q6bxPUAVwnprDGnve04G05bqzhKCJRKg/hsC1RVg=
Subject key identifier:   94:BF:98:3F:A4:E0:1B:8F:90:9D:41:BC:72:2A:9E:14:D3:DE:F0:D3
Certificate issuer:       /CN=9AB130A96BF3302DC0486818E0523507034D3DA9
Certificate serial:       79649195E9D7F54B8D38B77516FD2A9409753B5E
Authority key identifier: 9A:B1:30:A9:6B:F3:30:2D:C0:48:68:18:E0:52:35:07:03:4D:3D:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AB130A96BF3302DC0486818E0523507034D3DA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/34352e3232342e3134332e302f32342d3234203d3e20323635383433.roa
Signing time:             Tue 04 Feb 2025 18:20:04 +0000
ROA not before:           Tue 04 Feb 2025 18:15:04 +0000
ROA not after:            Tue 03 Feb 2026 18:20:04 +0000
asID:                     265843
IP address blocks:        45.224.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/9AB130A96BF3302DC0486818E0523507034D3DA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/9AB130A96BF3302DC0486818E0523507034D3DA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AB130A96BF3302DC0486818E0523507034D3DA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:64:91:95:e9:d7:f5:4b:8d:38:b7:75:16:fd:2a:94:09:75:3b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AB130A96BF3302DC0486818E0523507034D3DA9
        Validity
            Not Before: Feb  4 18:15:04 2025 GMT
            Not After : Feb  3 18:20:04 2026 GMT
        Subject: CN=94BF983FA4E01B8F909D41BC722A9E14D3DEF0D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:34:6e:b0:38:35:cc:d7:40:b7:96:e5:6f:08:
                    51:23:86:7e:b4:fb:40:d4:b3:2b:18:ec:ed:30:dc:
                    bd:4e:b5:5c:8e:8a:25:15:d1:3a:ee:d5:67:bf:d0:
                    4c:11:55:69:f8:0e:b8:29:b1:7f:4b:37:0d:4d:12:
                    c7:92:c0:bc:9d:45:32:08:bd:d7:e5:31:11:03:bd:
                    ea:75:b1:87:86:8a:a2:f2:50:6f:48:cf:2b:c4:b3:
                    73:e7:89:4a:f1:0f:8c:62:07:e2:0f:a3:0a:4b:ad:
                    0b:3a:e9:ad:a3:4a:13:af:8a:44:d7:57:e3:5a:21:
                    ac:37:29:76:d4:dd:36:38:29:61:c0:2f:5d:0f:b3:
                    78:9f:31:c3:df:2c:27:74:f4:6f:b9:c6:dd:db:1f:
                    74:0e:a5:4c:09:fb:ca:a3:cd:dc:ea:6f:f4:c3:ed:
                    c1:25:8f:31:55:2d:36:45:91:a7:c8:e0:df:ad:36:
                    27:7a:3f:46:e5:7f:7e:cb:08:47:ab:fc:17:99:dc:
                    0e:7f:cb:f1:fa:a5:e2:23:52:45:ac:26:2d:96:73:
                    c9:0a:be:ac:91:77:49:f6:68:6f:1a:12:ed:fc:e6:
                    e7:ce:78:2b:05:5a:22:d4:0b:91:98:19:56:31:65:
                    91:50:65:f2:db:dc:d4:8b:64:ae:68:b0:11:8d:0e:
                    5a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BF:98:3F:A4:E0:1B:8F:90:9D:41:BC:72:2A:9E:14:D3:DE:F0:D3
            X509v3 Authority Key Identifier:
                keyid:9A:B1:30:A9:6B:F3:30:2D:C0:48:68:18:E0:52:35:07:03:4D:3D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/9AB130A96BF3302DC0486818E0523507034D3DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AB130A96BF3302DC0486818E0523507034D3DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67C804332D2C88CDD58274B7AA5F0DFF5B0AD2156A4C399B572EF6942579448E/0/34352e3232342e3134332e302f32342d3234203d3e20323635383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:c0:3d:b5:a2:1b:25:31:2b:89:73:9c:7a:b6:95:0b:b5:80:
         e1:e9:a8:11:f2:4c:cf:44:2e:97:a1:1d:35:70:25:14:40:72:
         27:43:48:02:40:88:1a:c1:df:51:50:8a:5d:7c:59:ca:2c:b0:
         8d:18:ab:9d:1a:40:38:35:cd:db:6c:37:42:d4:e5:7a:e8:29:
         5d:cb:c5:40:08:7c:4a:9c:95:41:ea:a6:1a:58:02:40:83:37:
         f3:96:c7:b5:7f:d1:eb:91:ab:53:14:8c:b7:43:3d:3e:47:29:
         70:38:fd:2d:d7:24:ea:bb:cd:49:d1:60:dd:3d:9b:86:58:04:
         5d:17:46:3d:0b:fa:73:2a:cb:8a:78:0a:9b:99:07:6d:a4:7c:
         a5:eb:f1:81:42:62:51:e6:0d:70:f9:43:4d:1b:a5:12:80:f1:
         bd:01:3f:1f:58:5c:98:c8:ea:e3:85:ad:16:30:c9:a4:49:ed:
         bf:0e:fb:8f:95:15:7c:69:37:8d:63:e8:ae:54:43:df:07:ae:
         84:05:8a:f5:9b:c2:fb:68:f8:7f:96:33:14:91:29:40:2a:4b:
         1d:51:59:8b:b5:9a:48:6a:f5:81:51:d4:e9:40:27:f4:a0:4a:
         9a:46:18:3b:74:a5:e7:6b:ce:9b:92:a7:ac:ca:3d:52:80:80:
         d8:dd:ef:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:52 2025 by rpki-client