Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C4B26EC9FA5F0F4A8815E29EA40F1AAE555929C726A20F197BE0D140FF0C757/0/34352e3136352e3135322e302f32342d3234203d3e20323637373135.roa
File:                     34352e3136352e3135322e302f32342d3234203d3e20323637373135.roa (raw, json)
Hash identifier:          A/ylMARsgxkjKg7Go8fHHpZe6px+le6Mm4yG+xui6/Y=
Subject key identifier:   96:2C:73:A4:74:08:DD:B3:5C:B0:A8:60:08:E8:32:4D:A6:42:12:68
Certificate issuer:       /CN=EAB9A1B23DB0944F2F5A17B74DE1E6BBEDBA2D65
Certificate serial:       0E6A52D23DD5E1054A4EBC8D5CD6BA297E4C4107
Authority key identifier: EA:B9:A1:B2:3D:B0:94:4F:2F:5A:17:B7:4D:E1:E6:BB:ED:BA:2D:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAB9A1B23DB0944F2F5A17B74DE1E6BBEDBA2D65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C4B26EC9FA5F0F4A8815E29EA40F1AAE555929C726A20F197BE0D140FF0C757/0/34352e3136352e3135322e302f32342d3234203d3e20323637373135.roa
Signing time:             Tue 04 Feb 2025 18:17:41 +0000
ROA not before:           Tue 04 Feb 2025 18:12:41 +0000
ROA not after:            Tue 03 Feb 2026 18:17:41 +0000
asID:                     267715
IP address blocks:        45.165.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C4B26EC9FA5F0F4A8815E29EA40F1AAE555929C726A20F197BE0D140FF0C757/0/EAB9A1B23DB0944F2F5A17B74DE1E6BBEDBA2D65.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C4B26EC9FA5F0F4A8815E29EA40F1AAE555929C726A20F197BE0D140FF0C757/0/EAB9A1B23DB0944F2F5A17B74DE1E6BBEDBA2D65.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAB9A1B23DB0944F2F5A17B74DE1E6BBEDBA2D65.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6a:52:d2:3d:d5:e1:05:4a:4e:bc:8d:5c:d6:ba:29:7e:4c:41:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB9A1B23DB0944F2F5A17B74DE1E6BBEDBA2D65
        Validity
            Not Before: Feb  4 18:12:41 2025 GMT
            Not After : Feb  3 18:17:41 2026 GMT
        Subject: CN=962C73A47408DDB35CB0A86008E8324DA6421268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6e:00:7c:95:50:fb:22:b3:8e:43:45:c8:63:
                    0c:27:8d:64:e2:ad:af:21:96:cc:dc:2a:90:7e:a0:
                    a2:4e:fc:9a:4e:cc:9c:a3:6c:3b:65:0c:4e:07:ea:
                    7b:6a:63:fd:31:99:b6:a7:79:0a:e2:ac:a3:2d:d7:
                    17:82:49:3d:4a:f6:a9:2b:5a:7a:f3:c6:5e:cb:70:
                    fa:b2:76:9f:28:29:4b:28:67:36:df:ee:dc:fc:48:
                    db:18:41:f5:43:3a:d7:ff:eb:3c:36:ed:af:7b:4a:
                    cd:18:5c:8b:db:13:c3:66:de:d9:cd:c5:25:b7:79:
                    c6:cb:c1:6e:8c:ec:15:34:7c:8c:6c:a5:3d:8c:24:
                    b8:de:a8:83:56:9c:cb:04:c5:e7:1e:ac:5a:d0:0d:
                    92:64:92:a1:ad:9f:b2:87:96:01:f4:6f:d9:11:46:
                    85:09:3e:fa:7e:d1:bd:02:8e:3f:5b:2b:1e:96:a5:
                    73:bf:27:02:ee:29:2d:6a:9c:d1:e7:d5:1a:ae:f3:
                    37:fa:7c:73:dd:74:41:42:19:3f:8d:8f:9f:b5:cb:
                    83:29:bd:fa:b0:78:45:f9:16:c2:69:a0:54:a0:a2:
                    06:59:50:cf:2a:c6:bb:3c:e2:cc:36:13:8d:b3:17:
                    77:76:c0:a7:ca:a3:24:73:90:b9:b7:5c:3d:06:78:
                    b3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2C:73:A4:74:08:DD:B3:5C:B0:A8:60:08:E8:32:4D:A6:42:12:68
            X509v3 Authority Key Identifier:
                keyid:EA:B9:A1:B2:3D:B0:94:4F:2F:5A:17:B7:4D:E1:E6:BB:ED:BA:2D:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C4B26EC9FA5F0F4A8815E29EA40F1AAE555929C726A20F197BE0D140FF0C757/0/EAB9A1B23DB0944F2F5A17B74DE1E6BBEDBA2D65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EAB9A1B23DB0944F2F5A17B74DE1E6BBEDBA2D65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C4B26EC9FA5F0F4A8815E29EA40F1AAE555929C726A20F197BE0D140FF0C757/0/34352e3136352e3135322e302f32342d3234203d3e20323637373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:25:9e:9f:24:77:ad:0b:4d:0d:78:89:bd:0a:81:5e:be:d5:
         19:e7:ec:56:bf:89:d5:f6:b0:ca:d5:85:14:ef:1d:10:bb:63:
         f4:2f:f5:e7:ab:d8:85:fa:18:41:f1:d6:79:55:4b:31:a3:5b:
         e6:67:cc:94:8c:36:a5:7a:72:44:97:4c:d6:9f:ca:5c:ff:3b:
         51:a9:a1:e6:7f:0c:6a:de:61:b1:da:04:85:7e:78:3f:09:86:
         a9:82:4b:24:0b:53:51:f3:ec:e5:82:0d:2f:e5:6a:2e:3b:29:
         9e:23:9a:fd:2d:9a:26:a3:59:65:d2:ba:8d:f9:8f:cf:ca:29:
         32:31:51:5c:6a:fc:44:36:2d:8d:42:dd:7f:d1:a9:74:3a:df:
         7b:a9:0d:de:be:3c:5b:2e:6b:3e:8b:6b:74:38:c6:50:14:cd:
         25:a6:7b:a8:36:18:7c:27:be:f3:9f:1e:f2:45:b0:fb:d3:3e:
         d1:ee:f5:cf:41:47:fe:03:9f:31:67:45:4b:64:24:ad:e8:b6:
         a6:0f:c4:ab:32:10:3d:56:d7:46:7a:79:3d:ae:13:4a:46:e5:
         2f:e4:9f:9d:f9:84:c0:56:60:de:d3:64:f5:84:a7:17:b7:22:
         ff:09:93:73:9d:2c:d2:6b:21:14:aa:eb:32:da:ff:a3:19:cc:
         1e:58:63:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:24:02 2025 by rpki-client