Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88AD7F909BC8A6424A8D0CAA6E65F5596CCDF3F1529458222531D693A1AB37C3/0/34352e3137392e36302e302f32342d3234203d3e20323637393033.roa
File:                     34352e3137392e36302e302f32342d3234203d3e20323637393033.roa (raw, json)
Hash identifier:          oxqq07YaU6xJYi21Jpk/AacxjDNxr31Oyp2vTI2e/ZM=
Subject key identifier:   8E:5D:AE:07:CD:D5:39:BB:C6:BE:4E:EF:FF:37:FA:6E:3B:53:46:D6
Certificate issuer:       /CN=A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B
Certificate serial:       02FA4F9232AA98591C69C448B828C01E40AA22B5
Authority key identifier: A9:E9:7B:DB:D1:E0:16:7A:F7:8D:A6:1D:1C:C8:45:20:5C:D2:D2:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88AD7F909BC8A6424A8D0CAA6E65F5596CCDF3F1529458222531D693A1AB37C3/0/34352e3137392e36302e302f32342d3234203d3e20323637393033.roa
Signing time:             Tue 04 Feb 2025 18:07:20 +0000
ROA not before:           Tue 04 Feb 2025 18:02:20 +0000
ROA not after:            Tue 03 Feb 2026 18:07:20 +0000
asID:                     267903
IP address blocks:        45.179.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88AD7F909BC8A6424A8D0CAA6E65F5596CCDF3F1529458222531D693A1AB37C3/0/A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88AD7F909BC8A6424A8D0CAA6E65F5596CCDF3F1529458222531D693A1AB37C3/0/A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fa:4f:92:32:aa:98:59:1c:69:c4:48:b8:28:c0:1e:40:aa:22:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B
        Validity
            Not Before: Feb  4 18:02:20 2025 GMT
            Not After : Feb  3 18:07:20 2026 GMT
        Subject: CN=8E5DAE07CDD539BBC6BE4EEFFF37FA6E3B5346D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:48:db:80:27:b3:23:55:ad:12:a6:cc:e8:98:
                    c3:4c:9b:1d:85:00:38:f0:cd:55:0d:4c:f2:12:3a:
                    a3:d5:9b:66:58:e3:4d:96:4b:2d:c6:71:bf:07:59:
                    24:d4:99:39:73:97:0d:bb:de:f5:bc:11:41:f3:ce:
                    35:a1:88:2d:c2:0f:4f:38:c7:ca:f9:32:8f:8a:89:
                    67:8c:0d:fb:93:cc:c6:8c:5c:fb:02:46:ac:48:c9:
                    9b:be:16:df:3c:2e:c1:8e:a6:3f:6c:d0:4b:7d:c8:
                    c2:3e:d0:a9:db:9e:d5:aa:8a:df:a8:fa:5a:15:e1:
                    a6:0d:3a:b7:fc:10:94:40:d4:89:c0:aa:e8:1a:07:
                    48:1c:69:4c:74:56:29:2f:37:e9:c7:0d:13:31:4e:
                    06:64:59:5c:ba:4f:3b:01:f3:bc:23:8d:08:03:7b:
                    c7:bb:b0:3f:b8:25:8a:a2:2d:db:a8:1e:16:ef:7d:
                    98:f1:99:48:70:6c:09:9d:73:bb:25:b9:3c:9d:cd:
                    8f:f0:ce:74:7b:c2:08:f3:df:01:ae:84:aa:65:a6:
                    14:21:e8:32:74:f7:1f:bb:9c:d6:90:dc:52:e8:ab:
                    79:55:f9:e5:7d:83:95:95:af:2d:c0:2a:cb:13:01:
                    47:2b:b0:5c:72:34:34:d9:93:d5:20:62:b8:95:1e:
                    c8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5D:AE:07:CD:D5:39:BB:C6:BE:4E:EF:FF:37:FA:6E:3B:53:46:D6
            X509v3 Authority Key Identifier:
                keyid:A9:E9:7B:DB:D1:E0:16:7A:F7:8D:A6:1D:1C:C8:45:20:5C:D2:D2:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88AD7F909BC8A6424A8D0CAA6E65F5596CCDF3F1529458222531D693A1AB37C3/0/A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88AD7F909BC8A6424A8D0CAA6E65F5596CCDF3F1529458222531D693A1AB37C3/0/34352e3137392e36302e302f32342d3234203d3e20323637393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:3d:bd:70:cc:80:5d:f9:b3:7e:f5:86:e5:03:31:f9:0d:73:
         2d:17:8d:62:a8:ef:da:56:7c:b5:36:70:be:6f:76:40:8b:e5:
         c2:80:39:e3:03:02:e1:62:e8:5d:70:0d:31:06:df:3c:47:f4:
         e9:34:cc:75:22:9f:84:33:4b:57:aa:e8:a5:cc:48:2a:b4:c7:
         90:4b:7a:75:b9:3f:b9:05:b2:c4:6b:31:9a:2d:5f:e5:4a:00:
         01:24:f0:23:1a:16:1b:c8:08:86:0d:3c:dc:17:d9:3e:f7:d4:
         d5:e5:7d:e4:ba:8c:00:56:53:2d:8b:07:f2:2c:05:67:b9:5d:
         2c:50:8c:14:11:eb:b6:0b:1a:9b:67:48:39:87:60:3a:a7:b3:
         73:b8:6e:13:31:8f:c9:79:e6:71:e0:2c:84:5b:f5:f5:31:02:
         60:e1:c3:e7:9b:69:d1:64:64:a5:ea:43:d8:a8:e9:fa:40:8c:
         1a:d1:b1:c3:06:80:36:74:02:4c:7f:04:22:24:29:30:f1:bb:
         99:28:7f:90:c1:0e:33:1f:48:27:a5:fe:d6:c8:29:7e:b9:77:
         19:ef:4a:8d:a0:ae:ed:2b:bc:cd:fc:91:05:81:90:76:6b:2e:
         40:90:a8:1c:74:a1:a6:69:4e:a9:ce:38:7f:ac:be:20:a5:c5:
         e1:dc:4f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:54:29 2025 by rpki-client