Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/34352e3232392e37322e302f32342d3234203d3e20323636363938.roa
File:                     34352e3232392e37322e302f32342d3234203d3e20323636363938.roa (raw, json)
Hash identifier:          oC5IfTtFkK7oxOG+HGYWCnuwU9nNwJb8a25Oc8yyDkI=
Subject key identifier:   D3:73:C7:FB:C8:0D:C9:82:17:22:46:FA:F6:84:C7:97:44:20:A2:D8
Certificate issuer:       /CN=C559B04771D8F6B48353C8C4430BDCCE24F336CD
Certificate serial:       7F5F037B457EA6CFBBDA6A7DB4EBAEA307F1594B
Authority key identifier: C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/34352e3232392e37322e302f32342d3234203d3e20323636363938.roa
Signing time:             Thu 06 Mar 2025 18:11:23 +0000
ROA not before:           Thu 06 Mar 2025 18:06:23 +0000
ROA not after:            Thu 05 Mar 2026 18:11:23 +0000
asID:                     266698
IP address blocks:        45.229.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5f:03:7b:45:7e:a6:cf:bb:da:6a:7d:b4:eb:ae:a3:07:f1:59:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C559B04771D8F6B48353C8C4430BDCCE24F336CD
        Validity
            Not Before: Mar  6 18:06:23 2025 GMT
            Not After : Mar  5 18:11:23 2026 GMT
        Subject: CN=D373C7FBC80DC982172246FAF684C7974420A2D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:86:8f:a2:da:5e:cc:f9:96:82:fa:7c:99:e0:
                    7f:e3:15:b7:3e:e6:da:f5:f4:06:b8:db:26:f7:1d:
                    4d:87:eb:a4:13:e3:0a:c2:c0:42:58:ab:21:3c:25:
                    af:5d:40:5d:91:9e:5c:62:69:13:70:18:ea:fd:76:
                    b3:7c:b9:45:84:8a:d6:eb:d8:0a:0d:b3:f0:03:ed:
                    4f:a1:70:b0:3f:9d:9a:76:d6:b1:4b:e7:95:e8:56:
                    b6:6a:fd:39:06:51:5c:48:6c:5e:1e:07:82:c7:8d:
                    58:7d:73:4f:b6:c5:dc:df:82:70:fe:df:44:42:f7:
                    65:2c:8b:32:00:09:f5:72:96:f8:c2:e2:00:54:64:
                    16:34:0c:d2:7f:9d:d2:99:02:7a:79:d9:90:a8:bc:
                    51:51:a9:ad:7c:d9:e1:09:c1:86:9f:15:d0:22:9d:
                    af:5e:de:77:98:8b:18:0e:51:0f:c2:02:5e:e6:b3:
                    a8:9e:79:db:96:cc:2c:8f:86:f2:cd:40:ea:c6:7c:
                    b3:95:b0:ed:d1:f3:7c:83:20:e9:06:ed:c6:28:5d:
                    e9:df:a6:43:de:cd:df:1b:8b:90:21:4c:15:22:02:
                    26:30:83:1a:2a:0b:50:39:e2:58:9a:84:af:a1:87:
                    d1:f0:82:af:fa:c8:1b:e2:57:04:30:a6:ea:0d:50:
                    fc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:73:C7:FB:C8:0D:C9:82:17:22:46:FA:F6:84:C7:97:44:20:A2:D8
            X509v3 Authority Key Identifier:
                keyid:C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/34352e3232392e37322e302f32342d3234203d3e20323636363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:97:85:4b:02:3c:bf:ca:7c:3a:16:02:40:f6:70:9d:70:69:
         1b:17:dc:38:8f:bb:57:db:8b:27:08:04:d2:ed:2e:57:c0:a3:
         40:e6:66:d8:16:17:29:99:e1:46:58:2a:b9:57:85:6d:c7:5e:
         30:84:e8:67:07:d3:15:cf:62:1b:f4:85:15:3f:17:7d:80:d2:
         4d:ef:8a:2f:ab:65:8e:93:ea:5b:8b:8b:0c:f2:af:b6:97:b7:
         31:06:54:78:56:80:ec:f9:ca:4f:44:b8:93:2b:4b:fc:c2:c3:
         53:15:30:f9:d7:5a:ea:d7:b9:b0:aa:73:b2:a2:1b:6f:66:4e:
         62:67:5a:d9:4b:3b:f8:48:14:ff:ca:34:06:cd:60:5a:1a:98:
         e7:09:f8:d6:76:47:cf:31:84:20:e6:08:94:51:8a:fd:23:7e:
         8f:8d:bb:19:56:7a:9a:e8:dc:64:b4:e7:28:1c:28:c0:4e:0f:
         d7:3e:db:2c:28:97:c5:dc:7f:0a:e1:b6:fb:a4:e2:77:92:93:
         ae:25:64:ae:de:25:4f:0c:5d:59:f5:c9:0f:7c:54:50:5a:22:
         03:4d:3c:42:95:e4:de:fb:f7:ba:90:6a:4e:ed:4c:79:84:ea:
         df:d8:d6:fc:7c:1c:ab:a3:11:9a:89:1e:64:21:2e:8b:9b:01:
         32:d0:36:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:10 2025 by rpki-client