Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e31302e302f32342d3234203d3e20323635383139.roa
File:                     34352e362e31302e302f32342d3234203d3e20323635383139.roa (raw, json)
Hash identifier:          e3ECLXtjnAAQOwUHHcQiSb1qzzMWRv8A0E7prhX1Soo=
Subject key identifier:   2C:7C:2D:4B:89:0F:C4:43:06:6A:D0:78:66:53:EF:E2:0E:F2:63:0F
Certificate issuer:       /CN=16423C98CF2548839D74EFD9FB7304F4DAB4AE75
Certificate serial:       4E1E5154E9E1CD3DD2F43FA038BA1CE443DCD8AC
Authority key identifier: 16:42:3C:98:CF:25:48:83:9D:74:EF:D9:FB:73:04:F4:DA:B4:AE:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e31302e302f32342d3234203d3e20323635383139.roa
Signing time:             Fri 31 Jan 2025 23:55:01 +0000
ROA not before:           Fri 31 Jan 2025 23:50:01 +0000
ROA not after:            Fri 30 Jan 2026 23:55:01 +0000
asID:                     265819
IP address blocks:        45.6.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.crl
                          rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1e:51:54:e9:e1:cd:3d:d2:f4:3f:a0:38:ba:1c:e4:43:dc:d8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16423C98CF2548839D74EFD9FB7304F4DAB4AE75
        Validity
            Not Before: Jan 31 23:50:01 2025 GMT
            Not After : Jan 30 23:55:01 2026 GMT
        Subject: CN=2C7C2D4B890FC443066AD0786653EFE20EF2630F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f2:1b:15:a2:50:ce:b4:07:39:3b:d7:26:c4:
                    d2:dd:48:69:0d:78:ea:ac:7a:70:7a:4b:e2:83:27:
                    94:ec:6a:7a:c1:8f:57:10:a1:bf:97:2e:6d:db:a6:
                    33:27:1e:59:17:87:e2:86:76:43:f1:37:25:a1:bc:
                    88:36:03:f4:c6:ab:14:95:87:8a:3b:31:9c:dc:2b:
                    42:c3:3f:a5:3a:91:dc:ae:e6:17:b3:f0:a0:a6:95:
                    aa:a8:7c:7c:5c:2c:02:4c:25:0e:e6:1f:0a:5c:52:
                    f6:e6:a1:4f:ac:8b:61:85:90:e1:78:ed:c0:9a:ef:
                    27:96:ce:8c:70:21:eb:55:4f:af:79:3e:17:72:43:
                    28:a0:67:82:33:ed:8e:2a:35:77:62:69:85:ed:9e:
                    45:4a:9c:74:46:f5:a9:87:b9:2d:ee:bf:f4:d0:f2:
                    9e:1b:1c:88:d5:6e:0d:35:34:b8:84:87:0e:39:1b:
                    35:45:aa:d1:f2:ae:bb:10:7d:31:90:c5:3f:59:9f:
                    5c:ac:3c:1e:7a:e6:63:e9:65:21:0f:8c:c3:c8:ba:
                    80:93:39:34:a5:d2:dd:08:33:4c:67:ec:eb:64:02:
                    35:bf:83:b1:77:f5:db:ee:ab:55:c6:ce:94:fe:9b:
                    50:5b:9a:52:4e:12:08:0a:1e:da:9d:e4:8e:b5:43:
                    0f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7C:2D:4B:89:0F:C4:43:06:6A:D0:78:66:53:EF:E2:0E:F2:63:0F
            X509v3 Authority Key Identifier:
                keyid:16:42:3C:98:CF:25:48:83:9D:74:EF:D9:FB:73:04:F4:DA:B4:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e31302e302f32342d3234203d3e20323635383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:df:2c:fd:09:b2:bb:b4:03:05:78:a6:6a:0b:c6:9a:ed:64:
         0b:6d:bb:ee:c2:59:aa:9e:3d:09:18:da:65:fc:d5:19:56:b0:
         7a:85:13:c6:ba:e1:0f:25:2e:47:b7:ee:1f:69:a3:c1:13:4a:
         5c:23:0b:10:21:5d:38:63:24:a1:8b:9c:db:24:76:9f:1f:6a:
         2f:7c:e2:e1:5c:6a:0c:f4:d9:bd:af:51:ab:45:99:50:a9:47:
         eb:da:57:5a:17:fc:a5:63:5f:4d:9d:24:29:15:5b:fa:6a:5f:
         85:b5:90:85:3d:fa:ec:2b:02:cd:bf:41:7b:d8:9e:5d:c1:b7:
         ce:d2:13:87:02:5d:49:fc:e9:4e:19:a5:c6:d1:da:01:f5:62:
         5e:75:91:2b:89:3d:d8:28:35:8b:45:cd:fe:92:5b:22:ec:fd:
         67:56:4c:17:82:74:3c:5f:9a:c9:1c:10:8b:82:a0:bf:35:09:
         21:44:fc:36:71:da:ca:be:71:91:2e:a0:60:2b:02:73:fa:b8:
         1e:6f:1d:db:82:41:14:3f:b7:98:fe:5b:ea:2c:54:65:36:27:
         2d:99:ab:8c:bd:45:41:3a:5e:a9:16:52:77:13:79:ca:3c:50:
         6b:01:15:e8:19:ed:91:e4:62:d4:d8:7f:c3:08:8e:b8:7a:ab:
         12:80:a6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:41:58 2025 by rpki-client