Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137332e31322e302f32342d3234203d3e20323637383233.roa
File:                     34352e3137332e31322e302f32342d3234203d3e20323637383233.roa (raw, json)
Hash identifier:          ZgCHYRdtrqmoXiQXyGrK9sAx9NGmw1ebCUKBSmz5Jkc=
Subject key identifier:   1B:DF:08:8D:43:74:47:1D:82:2E:A2:40:DC:DA:0B:F7:AE:4C:DB:58
Certificate issuer:       /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial:       43B20FC3ED814EC1B93C8F3256B4F2433E4B6FFA
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137332e31322e302f32342d3234203d3e20323637383233.roa
Signing time:             Tue 04 Feb 2025 18:22:10 +0000
ROA not before:           Tue 04 Feb 2025 18:17:10 +0000
ROA not after:            Tue 03 Feb 2026 18:22:10 +0000
asID:                     267823
IP address blocks:        45.173.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b2:0f:c3:ed:81:4e:c1:b9:3c:8f:32:56:b4:f2:43:3e:4b:6f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
        Validity
            Not Before: Feb  4 18:17:10 2025 GMT
            Not After : Feb  3 18:22:10 2026 GMT
        Subject: CN=1BDF088D4374471D822EA240DCDA0BF7AE4CDB58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:39:ec:d7:77:a9:b4:5c:0c:0e:8a:23:1c:5e:
                    d8:df:28:92:c6:a9:73:e2:d2:e1:a0:5a:a3:61:72:
                    2c:79:36:0d:7b:9c:d4:d8:36:8b:eb:33:74:a0:07:
                    df:98:6a:6b:dd:28:bd:43:4c:84:ad:1d:51:00:73:
                    8a:76:d5:05:bc:2f:d0:11:50:e0:29:b2:6c:10:e9:
                    c4:28:b2:8a:44:54:5a:97:55:2c:ee:e1:d3:27:19:
                    e2:13:c7:be:71:1c:64:1d:73:2d:52:8a:68:16:ab:
                    3f:96:3b:fa:02:b2:8f:02:bb:1f:00:f5:6a:a2:28:
                    ff:c5:90:00:0c:35:af:64:e3:95:b4:a5:48:a5:31:
                    91:6a:c6:07:a4:cf:8f:fe:96:da:e4:b0:c3:0c:e2:
                    73:94:05:68:09:a1:00:ae:ec:3f:37:67:f9:a5:7a:
                    39:2a:bc:4a:3a:88:ef:4a:80:25:27:27:c0:3f:ef:
                    32:e6:03:6a:33:09:1d:29:bc:5f:a8:06:c4:69:a3:
                    ab:9e:96:56:f2:df:30:fd:f3:7a:a8:75:3d:2b:ca:
                    7f:02:df:75:0f:52:ee:29:7e:76:72:b2:a8:1b:ea:
                    e9:31:f1:e0:59:41:ad:dd:49:45:8f:9a:a3:d3:a3:
                    9b:65:d7:de:0f:92:b9:24:8b:89:b9:d6:3d:f5:7e:
                    24:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DF:08:8D:43:74:47:1D:82:2E:A2:40:DC:DA:0B:F7:AE:4C:DB:58
            X509v3 Authority Key Identifier:
                keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/34352e3137332e31322e302f32342d3234203d3e20323637383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:d1:56:dc:96:97:bf:3b:0a:b4:eb:1b:75:dc:d1:5e:47:8e:
         c0:ee:2a:06:66:c6:51:c4:47:46:94:34:dc:f8:67:ff:84:61:
         b3:b3:d9:44:84:b0:da:98:79:8b:bd:d4:df:ac:a2:f2:7e:6c:
         d3:0d:9e:d6:33:f6:f0:77:ef:4e:82:64:c0:3f:e4:81:66:f2:
         c2:3b:1c:ca:85:51:86:e4:db:a4:36:a8:8a:38:c5:33:1a:df:
         68:f1:f6:b8:66:6a:67:8c:54:01:fb:49:0f:70:b0:dd:3b:c2:
         e7:ef:0a:86:ef:0d:1a:53:2c:19:1a:1b:ff:60:de:78:f4:c9:
         66:5f:ec:19:a0:e3:f2:80:87:95:ea:3b:b0:4f:86:56:07:f4:
         ca:e0:46:0a:41:3b:de:03:07:33:04:38:98:e8:69:57:03:fb:
         5a:1e:c6:21:de:18:37:b3:85:84:98:1a:aa:d1:ed:d2:31:11:
         26:f7:4e:e6:05:aa:52:0b:88:6d:9c:b3:fa:8b:6a:c4:14:e8:
         85:f8:27:2f:54:fe:75:62:00:ee:ec:89:55:d6:41:66:86:b5:
         39:83:d2:26:f0:8f:28:11:bb:4e:8f:ef:ed:dc:22:57:d2:2e:
         92:a4:12:85:0d:59:82:b1:b9:91:f8:b7:70:98:c6:47:59:36:
         ac:fd:d3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:13:03 2025 by rpki-client