Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/34352e3137392e3139382e302f32342d3234203d3e203634323331.roa
File:                     34352e3137392e3139382e302f32342d3234203d3e203634323331.roa (raw, json)
Hash identifier:          NgnV7WjTg8GevTpx1BQjAioRmGXbJnRgTO+BZUDGjyM=
Subject key identifier:   A3:A0:0A:4A:DC:BC:67:1C:FF:50:83:9E:A4:6D:18:50:FE:6A:D2:E0
Certificate issuer:       /CN=BAA5C366DB5F0C6DCA61A19157D44E0271E62268
Certificate serial:       0B85A081FDD080FCE07336B205B40560541AD59A
Authority key identifier: BA:A5:C3:66:DB:5F:0C:6D:CA:61:A1:91:57:D4:4E:02:71:E6:22:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/34352e3137392e3139382e302f32342d3234203d3e203634323331.roa
Signing time:             Wed 11 Dec 2024 16:05:00 +0000
ROA not before:           Wed 11 Dec 2024 16:00:00 +0000
ROA not after:            Wed 10 Dec 2025 16:05:00 +0000
asID:                     64231
IP address blocks:        45.179.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 05:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:85:a0:81:fd:d0:80:fc:e0:73:36:b2:05:b4:05:60:54:1a:d5:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA5C366DB5F0C6DCA61A19157D44E0271E62268
        Validity
            Not Before: Dec 11 16:00:00 2024 GMT
            Not After : Dec 10 16:05:00 2025 GMT
        Subject: CN=A3A00A4ADCBC671CFF50839EA46D1850FE6AD2E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:b3:e5:d7:8e:0f:44:9c:e0:de:d7:da:2b:
                    6b:96:74:1d:c8:4c:6e:3e:13:90:6f:b3:1c:f5:8e:
                    85:ab:c6:88:36:5a:38:12:be:a4:cd:96:58:75:34:
                    ac:e4:31:a2:f5:41:0f:ab:ab:45:d3:a0:1c:dc:60:
                    a4:0f:98:07:e3:6a:1c:b8:64:6d:08:95:a7:85:30:
                    06:b5:4f:b6:61:41:67:2c:3e:92:aa:e9:3b:b0:18:
                    f8:91:1d:b4:a2:72:b1:dd:65:95:97:46:d7:2e:25:
                    82:3d:cf:ec:b0:17:47:c4:63:c4:13:56:57:df:7f:
                    b0:f7:91:92:77:29:4a:ec:3c:00:65:b4:83:fe:85:
                    6e:ff:51:7b:f3:3f:07:40:58:68:5a:10:76:6a:32:
                    8b:47:27:75:11:fa:e5:8e:6a:52:4f:b9:dc:70:6b:
                    7b:2b:be:64:b2:e3:b9:a8:07:b2:79:3b:8c:8d:3c:
                    c5:4d:6a:4e:36:db:90:36:11:35:3d:22:85:52:58:
                    8d:c7:8f:02:32:50:de:54:72:44:b5:e9:76:4d:c6:
                    c1:e7:83:70:67:57:fe:6b:9c:87:f0:cd:21:b7:26:
                    90:de:10:06:33:66:16:aa:81:22:35:da:53:4f:a4:
                    65:9d:88:9c:ae:e4:1c:96:68:ca:6b:07:a5:2a:30:
                    70:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A0:0A:4A:DC:BC:67:1C:FF:50:83:9E:A4:6D:18:50:FE:6A:D2:E0
            X509v3 Authority Key Identifier:
                keyid:BA:A5:C3:66:DB:5F:0C:6D:CA:61:A1:91:57:D4:4E:02:71:E6:22:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAA5C366DB5F0C6DCA61A19157D44E0271E62268.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DF24B1373A88050190CFDDFB4CADD89EC3D8587FB5E23DC8000D5F21E559904/0/34352e3137392e3139382e302f32342d3234203d3e203634323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:aa:d1:7c:d2:e3:3a:8e:2e:e2:c8:8e:bf:8c:76:c8:e8:1f:
         9c:8b:af:94:ec:04:a0:ec:19:b8:8f:59:ae:3e:55:13:cb:38:
         38:6c:74:bb:b0:35:3e:39:f5:30:3d:e6:3f:7f:23:44:6f:df:
         1a:5c:50:6e:a5:ed:f5:2a:25:b0:33:0a:c3:75:0c:f4:2a:c0:
         80:21:78:4f:be:4f:c9:5e:72:67:c5:4c:3f:d8:d3:90:c5:fa:
         48:72:c5:fe:4c:d8:41:bc:c9:63:c5:84:83:c6:a5:ff:4c:f7:
         77:96:29:4c:25:64:75:5c:53:81:15:5c:85:cb:99:57:52:27:
         cb:62:20:e3:6a:23:50:c8:23:52:2f:0d:02:93:f6:cb:d4:b3:
         e0:12:91:fc:63:d1:64:93:a3:b6:44:2e:7b:6c:10:d5:d2:09:
         01:12:4c:6e:d9:8d:db:65:97:4a:29:1f:0e:b8:22:2f:ac:35:
         72:32:8e:3e:0a:c6:7a:53:16:b7:0d:86:43:bd:5a:90:7b:f9:
         b2:da:70:1b:e8:c9:67:3c:a8:ff:e9:8f:11:bc:7f:4c:a6:54:
         86:ac:31:cd:bb:03:f9:ac:ff:2b:95:d9:3e:9b:60:a0:5c:d1:
         38:4d:e9:fe:27:94:d6:c5:58:8d:53:12:9a:99:1c:3d:2d:c3:
         ab:1c:8c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:30 2025 by rpki-client