Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/34352e3233312e35342e302f32342d3234203d3e20323633373739.roa
File:                     34352e3233312e35342e302f32342d3234203d3e20323633373739.roa (raw, json)
Hash identifier:          E0Mh8FBeSh4faUMZKXN5xlGEzQ+/XgKE00o/BnPc6U8=
Subject key identifier:   7F:63:F3:33:D7:28:F3:A9:2D:BD:BC:D6:A0:CF:69:7E:E0:0D:7F:E5
Certificate issuer:       /CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
Certificate serial:       19E3CCA9283E0DCA0CE40DAA3BD3DF14418882AC
Authority key identifier: 20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/34352e3233312e35342e302f32342d3234203d3e20323633373739.roa
Signing time:             Tue 04 Feb 2025 18:14:05 +0000
ROA not before:           Tue 04 Feb 2025 18:09:05 +0000
ROA not after:            Tue 03 Feb 2026 18:14:05 +0000
asID:                     263779
IP address blocks:        45.231.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e3:cc:a9:28:3e:0d:ca:0c:e4:0d:aa:3b:d3:df:14:41:88:82:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
        Validity
            Not Before: Feb  4 18:09:05 2025 GMT
            Not After : Feb  3 18:14:05 2026 GMT
        Subject: CN=7F63F333D728F3A92DBDBCD6A0CF697EE00D7FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:56:bf:f7:5b:fe:2a:be:aa:63:b4:e5:51:6d:
                    b0:46:74:90:0a:e3:18:3e:d1:e7:6b:4b:0b:f2:de:
                    6f:54:66:62:48:94:ed:7c:51:cb:47:21:33:bd:3c:
                    39:12:41:66:cb:1d:cf:7d:a2:84:b1:0d:22:08:e2:
                    b7:54:e4:9b:1a:2c:fc:b5:ba:8b:d7:8f:f6:0e:93:
                    35:16:fd:e0:6f:1a:ad:ea:4d:6b:ac:65:6a:73:3a:
                    5b:cd:af:fa:8a:ac:12:22:26:26:ab:24:6c:d3:b9:
                    49:2e:ca:6b:66:e0:43:d8:f1:6b:39:3a:4a:c9:4e:
                    87:af:a6:4b:11:e6:b6:54:e2:36:b8:cb:ca:30:9a:
                    db:70:89:31:87:d3:45:5c:28:96:10:c0:7d:a1:c1:
                    b8:06:56:99:a6:bb:4d:f9:ed:c4:5d:50:9d:2d:54:
                    27:f1:3e:ae:a2:68:7a:09:c4:4d:6d:9e:fd:97:03:
                    0c:69:5e:c6:80:ba:50:68:88:30:79:e7:f0:32:47:
                    db:99:25:0a:90:31:1b:11:65:58:69:a4:6f:93:21:
                    d9:2a:e2:7d:84:28:6f:95:54:ef:cd:7b:9f:31:21:
                    5d:77:19:a5:7a:12:42:d5:63:50:df:55:00:c4:41:
                    e5:37:b8:c9:5e:e4:98:07:1c:b6:01:3a:88:cc:9c:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:63:F3:33:D7:28:F3:A9:2D:BD:BC:D6:A0:CF:69:7E:E0:0D:7F:E5
            X509v3 Authority Key Identifier:
                keyid:20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/34352e3233312e35342e302f32342d3234203d3e20323633373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:ee:36:c6:e8:97:8f:32:de:1c:8c:1e:ff:ba:08:e8:49:51:
         2e:71:3b:ad:46:ba:ce:15:68:ea:19:2a:cb:19:c2:69:1b:02:
         a4:3e:95:70:61:aa:84:7e:79:61:1a:e3:47:a9:e3:29:2c:e1:
         ab:33:48:19:84:ae:b3:5c:d6:3f:91:01:24:95:b9:0e:aa:76:
         12:a3:b4:ce:d4:82:69:46:17:6f:47:13:4a:88:88:18:c6:59:
         49:f2:bd:f9:65:bf:83:67:4d:6f:75:83:8f:5a:9d:7f:6e:7f:
         64:6e:83:0b:6e:66:70:2e:c6:8e:a8:77:88:43:6c:bb:8d:73:
         4c:c8:da:e4:26:6f:59:d7:c6:00:12:be:64:28:4a:1c:73:8c:
         e7:a8:98:55:e6:6d:83:ef:71:61:24:ff:03:29:f1:d7:be:fc:
         3a:cc:00:c9:65:11:75:1c:a9:b1:19:bf:63:a3:39:fa:48:59:
         1b:c1:7c:51:96:a3:d7:ff:dc:94:c2:0a:9b:8b:eb:c6:d3:80:
         a6:bb:a6:06:e3:d1:50:d8:ff:24:62:30:76:d5:38:cf:ed:1f:
         a4:bc:73:e1:7b:60:d6:8c:e0:08:a3:e8:61:a4:28:84:ac:18:
         20:af:1b:c0:fa:fb:af:b9:a7:4a:f1:b9:7e:3e:23:bd:b9:7e:
         17:17:18:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:36 2025 by rpki-client