Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36372e302f32342d3234203d3e20323636373535.roa
File:                     34352e3233332e36372e302f32342d3234203d3e20323636373535.roa (raw, json)
Hash identifier:          3XrRAKXcTp9rXMj4aZt1iQOcU+cjc5qffLIZtptHbgk=
Subject key identifier:   8A:F2:99:28:12:98:0A:49:36:6D:BD:A6:21:D7:B8:0D:53:9F:C9:41
Certificate issuer:       /CN=17444832D4DFC5B5F0EDB45E0DD0380E36A684B7
Certificate serial:       2E008E518E8889316EF7C3A78104F47115CBCC14
Authority key identifier: 17:44:48:32:D4:DF:C5:B5:F0:ED:B4:5E:0D:D0:38:0E:36:A6:84:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36372e302f32342d3234203d3e20323636373535.roa
Signing time:             Tue 04 Feb 2025 18:52:38 +0000
ROA not before:           Tue 04 Feb 2025 18:47:38 +0000
ROA not after:            Tue 03 Feb 2026 18:52:38 +0000
asID:                     266755
IP address blocks:        45.233.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:00:8e:51:8e:88:89:31:6e:f7:c3:a7:81:04:f4:71:15:cb:cc:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17444832D4DFC5B5F0EDB45E0DD0380E36A684B7
        Validity
            Not Before: Feb  4 18:47:38 2025 GMT
            Not After : Feb  3 18:52:38 2026 GMT
        Subject: CN=8AF2992812980A49366DBDA621D7B80D539FC941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:80:5d:f1:b0:87:7b:7a:59:50:91:67:26:2e:
                    dc:22:e2:55:42:85:f3:3b:fe:cc:6d:08:0e:36:88:
                    94:b8:b3:a5:35:8e:3b:3e:ab:91:73:fd:5f:00:06:
                    d5:0d:85:1f:3a:25:42:c8:91:06:62:14:e4:9e:d7:
                    8c:d7:d9:1c:9a:aa:0e:6a:be:0a:f8:b1:0a:e7:12:
                    88:d0:37:1e:83:83:df:82:53:36:f6:15:d3:f6:a7:
                    28:5c:e2:d0:ca:f8:aa:05:3b:7d:1c:fa:7b:98:6c:
                    b8:5b:e5:1a:2e:9d:6f:1a:7b:e6:c6:29:c7:0d:96:
                    b9:b2:a3:55:e1:a5:0a:72:3c:02:2c:f5:0c:08:88:
                    27:5e:15:24:18:b3:90:9a:07:3e:d3:15:15:62:d0:
                    30:ca:54:c8:d4:d8:40:8b:c7:d7:4b:c2:3e:52:3c:
                    0b:ca:da:84:9d:cf:93:07:fe:50:ea:ce:8a:32:9b:
                    af:76:53:fb:65:a8:78:84:9c:c2:12:a7:bc:44:68:
                    59:c3:fb:ae:1c:aa:be:91:26:6b:e4:53:82:c9:ec:
                    d2:30:1f:d6:9a:b3:aa:9d:53:d3:c0:9d:36:8a:5b:
                    e7:b0:7c:5c:c4:16:61:5d:57:c1:4e:a9:c1:48:ea:
                    5a:9e:b6:56:36:bc:85:ff:52:15:14:ca:42:4d:41:
                    f2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F2:99:28:12:98:0A:49:36:6D:BD:A6:21:D7:B8:0D:53:9F:C9:41
            X509v3 Authority Key Identifier:
                keyid:17:44:48:32:D4:DF:C5:B5:F0:ED:B4:5E:0D:D0:38:0E:36:A6:84:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36372e302f32342d3234203d3e20323636373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:75:80:20:7e:5a:85:a9:af:cf:75:6e:1e:92:42:1d:31:ea:
         2c:26:12:82:05:6c:7c:e5:3f:5e:67:0f:2d:33:3f:1a:a6:6e:
         93:27:89:1e:27:f8:15:b6:0c:91:c7:85:36:66:26:08:bf:8a:
         1b:84:df:5f:f0:2b:d6:d7:5c:91:4f:4f:8e:1b:d7:4b:63:c4:
         2c:fc:c1:34:38:36:84:9b:e1:e5:69:f1:91:14:d4:d4:72:cf:
         32:a7:a8:dd:a0:da:6f:af:65:53:72:54:78:2d:1c:a1:9d:3c:
         3c:5e:b9:74:47:2b:21:04:23:be:f3:46:1f:4a:3d:6d:38:25:
         01:f6:18:c3:9b:6f:cd:e8:c4:b5:ba:3c:10:a7:4b:0a:43:79:
         66:fd:d2:be:4e:f7:66:a4:0c:ac:67:12:6f:d5:19:77:74:3d:
         11:63:e7:71:2c:16:5f:57:7a:d8:4f:a6:72:62:e2:30:c4:7d:
         42:9e:15:a9:9e:80:b8:f9:25:9c:9e:85:9e:6f:5a:14:53:91:
         6f:bd:b9:7b:70:1c:db:8e:90:3d:48:67:49:ae:64:9a:21:9d:
         f4:0c:90:12:b9:29:a9:46:88:01:7b:f2:3a:1e:69:12:00:ca:
         08:5a:66:e6:6e:3e:90:d8:92:03:2f:b7:89:e9:1f:89:fa:39:
         39:a3:23:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:11 2025 by rpki-client