Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/34352e3138352e3138372e302f32342d3234203d3e20323639383131.roa
File:                     34352e3138352e3138372e302f32342d3234203d3e20323639383131.roa (raw, json)
Hash identifier:          M6JSvA5KnACCeWG3GwwUYsxfJjOD6WIj+9ROAFBNRBc=
Subject key identifier:   2A:39:F5:5B:AD:89:22:BB:F3:C6:92:1B:91:EA:AC:9B:20:44:96:12
Certificate issuer:       /CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
Certificate serial:       189181A63397A51E35CE81EBF92E0257550BE5D1
Authority key identifier: 1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/34352e3138352e3138372e302f32342d3234203d3e20323639383131.roa
Signing time:             Tue 04 Feb 2025 18:36:06 +0000
ROA not before:           Tue 04 Feb 2025 18:31:06 +0000
ROA not after:            Tue 03 Feb 2026 18:36:06 +0000
asID:                     269811
IP address blocks:        45.185.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:91:81:a6:33:97:a5:1e:35:ce:81:eb:f9:2e:02:57:55:0b:e5:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA
        Validity
            Not Before: Feb  4 18:31:06 2025 GMT
            Not After : Feb  3 18:36:06 2026 GMT
        Subject: CN=2A39F55BAD8922BBF3C6921B91EAAC9B20449612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:16:e1:40:37:24:01:87:7d:7e:49:b9:ae:52:
                    16:01:3c:f6:86:b8:1b:2e:a4:98:02:98:97:c5:7c:
                    c3:01:74:b1:46:fe:f6:16:f1:b1:e6:31:dd:8b:b5:
                    6b:58:f4:ac:9e:6c:53:0e:8a:f3:f6:e1:af:fa:11:
                    26:71:26:26:92:64:46:af:f2:82:df:55:2c:51:8f:
                    db:62:d2:c0:d4:4d:2e:a9:80:e9:0b:e2:6d:fc:3b:
                    11:6e:32:de:77:5d:07:30:9c:19:0d:d5:fa:04:4c:
                    02:5c:43:92:6f:a2:ac:ff:2f:85:4e:fb:3a:58:11:
                    38:a1:93:bc:55:93:57:8a:7d:c2:84:66:c0:c8:04:
                    d9:e0:71:93:61:34:ad:61:68:55:4e:d6:fc:ca:a3:
                    a5:2d:01:ac:57:a8:1b:13:76:9e:4d:c5:e7:86:cf:
                    b8:b6:c9:1e:35:34:2a:59:6f:8b:1f:7b:16:a7:e7:
                    c6:04:d9:c4:f8:1f:e1:db:1c:60:95:ef:fe:be:e8:
                    fe:5f:c0:0f:8b:2a:ac:88:2a:1b:08:61:31:73:b0:
                    20:2b:a1:88:99:be:98:24:09:16:77:ef:8a:99:b2:
                    ca:75:4d:4a:13:73:4c:96:64:8a:e4:e1:e4:57:2f:
                    8f:d1:b9:ee:03:d0:ab:1b:78:2a:c9:f5:26:c5:09:
                    51:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:39:F5:5B:AD:89:22:BB:F3:C6:92:1B:91:EA:AC:9B:20:44:96:12
            X509v3 Authority Key Identifier:
                keyid:1C:EB:8F:E2:FD:B0:54:93:C8:86:0A:C2:CE:BC:2F:63:CF:00:CD:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CEB8FE2FDB05493C8860AC2CEBC2F63CF00CDAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99CC17FBDD8747189C0E4FC193FA08E0070B6CF0E1A0218CAC618A2D0200C4EF/0/34352e3138352e3138372e302f32342d3234203d3e20323639383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:1e:1c:40:4a:ac:66:c9:cf:c4:70:a5:43:67:18:15:86:8e:
         03:a8:58:48:f4:02:fd:c4:2d:cd:b5:09:96:65:8a:15:f3:f2:
         2a:0c:8a:bd:70:16:b5:af:f7:79:09:8c:20:9a:ed:aa:23:3a:
         1a:a8:13:89:54:86:14:bc:26:7e:3e:a8:37:fb:c6:eb:67:e4:
         94:8f:9b:2b:78:36:b5:f6:38:1a:b1:f3:85:f8:5c:75:19:2a:
         fd:1e:f2:4e:b0:f9:3b:ac:5e:fa:06:41:3b:af:eb:17:76:70:
         28:92:24:b5:a8:69:4f:60:f0:1e:a0:62:ff:ae:e0:5a:97:0e:
         12:5d:b2:af:c0:81:eb:de:de:b0:35:c2:ab:b0:e0:21:cf:89:
         53:e9:96:20:9a:56:7f:d2:c9:4f:3c:43:57:24:f8:af:52:75:
         f5:14:1e:da:63:ba:7d:a6:20:90:4d:65:e2:0b:88:2f:8a:42:
         bd:e4:fe:3d:a6:9f:25:05:85:1e:cc:62:bd:c7:fc:99:a1:cd:
         53:26:59:9f:99:d8:c7:66:d0:a1:ca:b4:c4:ff:6d:a6:17:af:
         24:bd:35:cc:72:73:f0:81:c9:b7:de:d3:24:49:1b:c3:1a:41:
         94:6a:f6:68:b9:e0:49:01:94:86:ac:e4:ff:16:a0:26:65:70:
         ae:21:ac:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:09:51 2025 by rpki-client