Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/34352e3137332e3138312e302f32342d3234203d3e20323637383237.roa
File:                     34352e3137332e3138312e302f32342d3234203d3e20323637383237.roa (raw, json)
Hash identifier:          L2Kv2nnD4bwQDif7mUHc5gi3vX3pJy1DVnf5dX5lxhc=
Subject key identifier:   3C:CF:26:D2:34:13:A3:D5:B8:64:0C:9F:F8:14:86:AE:42:F7:27:49
Certificate issuer:       /CN=D8F89B0675EFF23A256029EC78234AE7B97F6B52
Certificate serial:       4D44293235F217026CC487415C3F9E3967532C26
Authority key identifier: D8:F8:9B:06:75:EF:F2:3A:25:60:29:EC:78:23:4A:E7:B9:7F:6B:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/34352e3137332e3138312e302f32342d3234203d3e20323637383237.roa
Signing time:             Mon 10 Feb 2025 14:09:23 +0000
ROA not before:           Mon 10 Feb 2025 14:04:23 +0000
ROA not after:            Mon 09 Feb 2026 14:09:23 +0000
asID:                     267827
IP address blocks:        45.173.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:44:29:32:35:f2:17:02:6c:c4:87:41:5c:3f:9e:39:67:53:2c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F89B0675EFF23A256029EC78234AE7B97F6B52
        Validity
            Not Before: Feb 10 14:04:23 2025 GMT
            Not After : Feb  9 14:09:23 2026 GMT
        Subject: CN=3CCF26D23413A3D5B8640C9FF81486AE42F72749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:44:40:23:15:b5:3d:1a:06:0e:1b:ac:68:
                    28:99:7e:41:26:ab:ae:73:08:0e:c1:77:dc:b9:4e:
                    f7:fe:c2:82:17:ce:19:79:6f:b2:42:af:e5:14:c3:
                    ce:94:f5:be:2e:6e:5a:8f:e3:46:c3:4a:19:e0:62:
                    44:f4:75:db:ae:f5:a6:30:b3:e6:49:16:76:ee:8c:
                    dc:cb:1c:ba:ab:be:97:42:53:6b:72:5c:7e:51:3c:
                    1e:38:6b:4f:ba:0a:d7:4d:b3:2a:f1:79:d9:86:e4:
                    1f:74:b2:35:c3:8f:dc:71:29:9d:fe:2f:f9:a9:05:
                    f3:db:0f:3a:f2:70:1a:53:38:d6:8b:f8:c9:8a:25:
                    f2:7e:e4:7b:e2:60:10:2f:bc:71:80:9c:40:2f:25:
                    47:16:9d:45:34:dd:5c:7c:7d:a7:f0:0b:fb:00:0a:
                    c5:88:eb:04:c5:f1:5f:e1:bf:e2:ee:b6:04:6b:fc:
                    59:b7:af:c0:e2:3a:31:03:11:ea:d4:30:c5:7c:5b:
                    4a:9e:ae:a0:63:e6:1c:ed:4d:bf:62:1a:04:15:36:
                    db:69:4a:fc:d6:75:22:92:ef:2d:8c:9a:5c:b4:63:
                    dc:d7:2e:24:77:0c:9c:56:c4:89:8d:ae:9e:4a:83:
                    3b:55:7a:47:b5:88:d0:ec:9d:32:56:af:bc:3e:65:
                    94:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CF:26:D2:34:13:A3:D5:B8:64:0C:9F:F8:14:86:AE:42:F7:27:49
            X509v3 Authority Key Identifier:
                keyid:D8:F8:9B:06:75:EF:F2:3A:25:60:29:EC:78:23:4A:E7:B9:7F:6B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8F89B0675EFF23A256029EC78234AE7B97F6B52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B3DF9A96CB9DB5BCB6C5E0B5391C3D168AFF15B056E256B8869931E39BCEE23/0/34352e3137332e3138312e302f32342d3234203d3e20323637383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:88:ad:d8:2d:48:b5:ed:e0:25:71:83:80:ad:0c:e6:cc:4c:
         a9:80:c6:3b:f6:bc:34:93:19:08:c9:23:ac:88:3b:0f:c2:fd:
         4e:be:90:17:b4:3d:cb:81:57:3f:3a:17:a3:1c:f9:4c:c1:96:
         58:98:f6:e8:f0:33:3b:fb:ab:14:bb:b7:82:00:b8:b0:30:33:
         3c:fa:8a:0a:1f:0e:6c:cf:8b:eb:53:15:39:91:56:df:91:07:
         0d:56:3e:a1:c3:74:04:f4:a6:da:df:0c:93:3e:73:8a:34:31:
         7f:ba:fd:d0:53:8f:ba:08:a7:48:0d:ac:bc:74:1d:ff:75:e2:
         fe:66:59:72:5b:4e:e2:f2:7a:6d:2f:2f:17:6b:b3:f5:cd:03:
         f1:54:03:e8:3f:34:42:4d:f4:c9:85:62:bd:36:f3:0c:1e:9b:
         7b:14:70:04:7d:ae:05:ce:b0:cd:56:e1:df:4c:1c:24:68:3b:
         4d:89:c3:63:ce:bc:af:c7:a2:3d:a4:01:79:f7:16:b2:bf:5e:
         c2:d2:9f:cf:90:4e:9c:60:66:86:5e:46:33:f0:5b:9f:d7:96:
         7e:a4:b3:f6:7f:c5:62:7a:57:84:9e:95:dc:4c:99:f3:07:4e:
         fd:e8:d0:11:56:4d:59:27:f5:9e:f3:57:45:49:f0:c7:ee:40:
         d9:c0:7a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:09 2025 by rpki-client