Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/34352e3136372e32342e302f32332d3234203d3e20323637373238.roa
File:                     34352e3136372e32342e302f32332d3234203d3e20323637373238.roa (raw, json)
Hash identifier:          qhW44X6ReZNTQwDwAEKQTgBEpl8XOv/iYvt23kauQzU=
Subject key identifier:   6F:D4:D5:6F:29:C7:2F:7B:CC:67:D1:0D:33:0F:B4:87:BC:8E:2E:30
Certificate issuer:       /CN=6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE
Certificate serial:       069FDD54F234D75998C75EC722ABEBF7908C5CFC
Authority key identifier: 6D:27:CB:EB:D5:4C:DF:E9:38:A4:1D:20:BF:4B:B8:53:94:04:B0:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/34352e3136372e32342e302f32332d3234203d3e20323637373238.roa
Signing time:             Thu 15 May 2025 19:05:00 +0000
ROA not before:           Thu 15 May 2025 19:00:00 +0000
ROA not after:            Thu 14 May 2026 19:05:00 +0000
asID:                     267728
IP address blocks:        45.167.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9f:dd:54:f2:34:d7:59:98:c7:5e:c7:22:ab:eb:f7:90:8c:5c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE
        Validity
            Not Before: May 15 19:00:00 2025 GMT
            Not After : May 14 19:05:00 2026 GMT
        Subject: CN=6FD4D56F29C72F7BCC67D10D330FB487BC8E2E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8d:99:42:9d:a9:f7:a7:0b:1c:40:9d:47:a5:
                    57:97:ab:3a:78:4f:80:86:19:07:ff:bd:1c:b8:36:
                    49:95:d7:25:bf:70:a6:f0:f2:a6:75:49:17:f2:13:
                    4a:ae:ec:d5:c9:87:43:da:b6:64:98:6b:e8:25:7f:
                    15:f0:ad:d2:34:0b:e2:66:bf:79:de:61:29:49:e5:
                    cb:30:f3:83:a4:1d:e4:e0:78:aa:bb:da:3f:8c:a4:
                    77:ed:6d:da:d2:e2:51:63:f9:45:2a:0f:7e:bd:46:
                    6a:c4:22:8f:75:ab:20:07:e0:04:1c:81:c7:48:13:
                    5b:ef:6e:6a:2e:9b:51:e2:07:73:18:98:01:62:37:
                    ec:6a:56:d8:6b:3f:ef:a7:8f:b1:e4:7e:4e:95:81:
                    39:e4:ae:82:7e:a3:c7:de:89:0d:3c:2e:d6:e2:42:
                    05:5d:38:f0:27:03:b7:aa:aa:6a:84:e6:bd:32:78:
                    bf:1c:77:b1:d3:13:d8:fe:2b:86:f0:f7:91:78:5b:
                    d7:af:ac:e9:b8:a4:a9:03:c7:da:c5:14:94:fa:a5:
                    3c:a7:3d:3a:74:17:72:7f:74:e4:5b:6b:6b:0c:a0:
                    36:f3:97:81:53:cf:06:a8:34:18:d8:cc:5e:91:27:
                    eb:72:7f:ce:ec:51:b2:50:37:52:9b:f3:c5:66:05:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D4:D5:6F:29:C7:2F:7B:CC:67:D1:0D:33:0F:B4:87:BC:8E:2E:30
            X509v3 Authority Key Identifier:
                keyid:6D:27:CB:EB:D5:4C:DF:E9:38:A4:1D:20:BF:4B:B8:53:94:04:B0:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D27CBEBD54CDFE938A41D20BF4BB8539404B0DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9215283AD502C6CA984EC67CBAA5E80070069BA760A375C42AC4728270A13F56/0/34352e3136372e32342e302f32332d3234203d3e20323637373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:47:95:83:39:fa:f6:01:56:a8:bb:36:ec:61:f3:85:d0:69:
         a4:2a:9c:ac:ef:65:fe:46:38:84:bf:24:1b:2e:2f:93:3d:cd:
         38:bf:a5:b2:df:72:7a:07:e1:8e:a7:7f:09:72:2b:88:25:20:
         16:0b:c9:8b:61:c3:70:ed:49:a8:28:0e:32:c7:18:06:26:16:
         25:6e:40:eb:67:ae:1b:63:aa:36:a8:f0:db:42:a2:87:be:46:
         27:e9:4a:db:73:3f:dd:e7:7e:49:3d:6c:8c:d3:f8:95:67:74:
         1e:b4:5b:8a:71:ff:67:49:c6:4e:e8:e6:e5:4a:29:fa:03:f9:
         f4:31:d0:66:01:e5:0c:a2:2b:da:96:0b:6d:a3:dd:50:34:d2:
         90:63:e6:cc:64:16:a0:43:16:77:a2:81:79:cf:23:15:9b:47:
         b9:84:24:5b:7a:74:e1:fd:a2:14:5c:62:19:08:52:9b:f9:01:
         d4:80:67:c0:d4:5c:aa:5b:46:45:1e:ba:83:5a:db:24:16:61:
         09:ff:ae:9f:d7:29:33:b0:8f:89:ba:e1:18:b1:75:a3:bf:47:
         69:6a:aa:3b:73:92:eb:76:86:fd:82:3a:8c:9b:7d:e2:25:5a:
         f6:e5:0f:20:68:92:33:42:02:4c:97:0c:59:04:10:92:d9:be:
         77:f9:05:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:06:43 2025 by rpki-client