Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36342e302f32342d3234203d3e20323636373535.roa
File:                     34352e3233332e36342e302f32342d3234203d3e20323636373535.roa (raw, json)
Hash identifier:          3oYMpTsqa69RC9nTdkfMFjDmSaQFEa13QZE4yfCm/jM=
Subject key identifier:   80:63:37:A1:6A:E1:93:6E:4B:4A:55:68:94:70:14:B0:61:87:8F:3C
Certificate issuer:       /CN=17444832D4DFC5B5F0EDB45E0DD0380E36A684B7
Certificate serial:       4DEEFB79873CFCFFF8A08520F9945B02FC3A4800
Authority key identifier: 17:44:48:32:D4:DF:C5:B5:F0:ED:B4:5E:0D:D0:38:0E:36:A6:84:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36342e302f32342d3234203d3e20323636373535.roa
Signing time:             Tue 04 Feb 2025 18:52:39 +0000
ROA not before:           Tue 04 Feb 2025 18:47:39 +0000
ROA not after:            Tue 03 Feb 2026 18:52:39 +0000
asID:                     266755
IP address blocks:        45.233.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ee:fb:79:87:3c:fc:ff:f8:a0:85:20:f9:94:5b:02:fc:3a:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17444832D4DFC5B5F0EDB45E0DD0380E36A684B7
        Validity
            Not Before: Feb  4 18:47:39 2025 GMT
            Not After : Feb  3 18:52:39 2026 GMT
        Subject: CN=806337A16AE1936E4B4A5568947014B061878F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7d:3f:b2:48:89:1e:d7:d3:55:9f:85:05:c1:
                    28:93:ab:ac:f4:d0:ee:93:1c:2a:55:0e:f1:ea:cd:
                    47:60:b0:03:6d:3f:d4:12:38:d6:69:ff:b1:68:68:
                    d5:42:09:be:0d:4f:d3:f1:f3:cf:96:ca:76:ee:ab:
                    66:ba:6d:fc:4e:a7:0b:93:a8:6f:61:db:f4:99:ad:
                    cb:48:38:f4:6c:3b:06:cd:6b:d4:ae:0b:7e:94:7a:
                    a0:cd:ca:8d:6f:46:93:71:1b:4b:47:73:f3:61:c5:
                    cd:a3:47:f7:a4:6d:67:ea:01:6c:2d:83:10:4c:de:
                    78:f3:ce:67:0f:0f:e8:b6:e7:bf:5f:4c:89:07:db:
                    cd:b9:00:57:d4:0f:0e:25:81:ba:42:7a:a2:f4:e3:
                    a7:58:8c:7f:7f:ea:9b:1c:49:8e:c7:33:e8:ef:f5:
                    98:45:bb:26:33:b0:54:8d:e9:48:9d:fc:33:9c:82:
                    6d:3c:db:26:e8:77:2c:be:78:ea:fc:cd:6f:bc:fe:
                    7d:21:24:5d:3e:f6:2e:57:e1:60:d9:31:1f:b5:5d:
                    f3:ee:c6:6e:e5:8b:ef:ff:62:6c:a0:bf:96:5d:23:
                    79:2b:af:f8:e0:23:51:50:29:3a:81:94:0a:09:61:
                    3e:aa:cc:0d:71:42:d7:89:07:ce:e3:98:0c:02:4f:
                    f8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:63:37:A1:6A:E1:93:6E:4B:4A:55:68:94:70:14:B0:61:87:8F:3C
            X509v3 Authority Key Identifier:
                keyid:17:44:48:32:D4:DF:C5:B5:F0:ED:B4:5E:0D:D0:38:0E:36:A6:84:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36342e302f32342d3234203d3e20323636373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:75:2b:1b:68:e1:70:6c:8f:df:02:77:4f:3b:74:21:08:6b:
         8b:a8:46:15:41:6a:6d:33:07:cd:ec:25:e0:5c:4d:8e:10:8e:
         7f:53:07:39:ed:9f:39:49:d1:98:06:7b:7e:76:46:14:46:63:
         c3:ed:d3:cf:a4:27:47:b9:85:08:68:b3:33:0f:df:30:ca:7e:
         01:bd:a5:6b:ea:05:ee:6d:84:94:64:19:d2:d7:6e:46:d4:9e:
         e8:11:a8:59:73:84:a3:b4:6c:8e:76:82:93:d3:1c:28:8b:1b:
         fc:49:6e:10:da:25:52:26:9c:e1:c3:19:3b:9f:35:48:07:69:
         36:5e:ac:e4:31:00:8b:14:4f:43:e2:3d:2d:ef:c2:21:fc:6e:
         69:bc:a8:28:5f:e1:ca:b7:f2:ed:51:16:dd:fd:85:a5:4c:55:
         06:ee:92:e9:e9:77:86:7e:c7:8a:4d:55:44:32:96:77:d4:eb:
         23:67:84:e2:01:1d:4d:fd:a8:b2:cf:6d:21:5f:23:34:25:d2:
         7c:1a:34:f3:f9:df:5e:2d:f2:c1:14:dd:3b:47:ee:07:88:67:
         0d:89:98:91:6e:6d:1c:eb:21:fa:c2:1a:8f:84:27:07:bb:71:
         b0:48:f9:c4:86:57:4f:ac:e0:01:2a:66:12:49:92:83:e5:2d:
         59:34:4f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:54 2025 by rpki-client