Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A189BFC92C27DF08C9394FBAF72B04862C5B98380994EDC414B936CCF736BF7B/0/34352e3136392e3134302e302f32342d3234203d3e20323637383131.roa
File:                     34352e3136392e3134302e302f32342d3234203d3e20323637383131.roa (raw, json)
Hash identifier:          qgqHYw+mJ+cCFoo3cnloC/0yFsyqCMYk8yNMH6F4B7o=
Subject key identifier:   7D:27:9A:97:6D:2A:76:79:C3:14:A7:5E:AE:04:9D:D9:1D:3F:69:88
Certificate issuer:       /CN=EDA827CC7A82AE7851CAF29A871B5144E46B1A66
Certificate serial:       7566CFEF5475F5D121F0436AAFBA3D3EA1DE5DC6
Authority key identifier: ED:A8:27:CC:7A:82:AE:78:51:CA:F2:9A:87:1B:51:44:E4:6B:1A:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDA827CC7A82AE7851CAF29A871B5144E46B1A66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A189BFC92C27DF08C9394FBAF72B04862C5B98380994EDC414B936CCF736BF7B/0/34352e3136392e3134302e302f32342d3234203d3e20323637383131.roa
Signing time:             Tue 04 Feb 2025 18:33:25 +0000
ROA not before:           Tue 04 Feb 2025 18:28:25 +0000
ROA not after:            Tue 03 Feb 2026 18:33:25 +0000
asID:                     267811
IP address blocks:        45.169.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A189BFC92C27DF08C9394FBAF72B04862C5B98380994EDC414B936CCF736BF7B/0/EDA827CC7A82AE7851CAF29A871B5144E46B1A66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A189BFC92C27DF08C9394FBAF72B04862C5B98380994EDC414B936CCF736BF7B/0/EDA827CC7A82AE7851CAF29A871B5144E46B1A66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDA827CC7A82AE7851CAF29A871B5144E46B1A66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:66:cf:ef:54:75:f5:d1:21:f0:43:6a:af:ba:3d:3e:a1:de:5d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA827CC7A82AE7851CAF29A871B5144E46B1A66
        Validity
            Not Before: Feb  4 18:28:25 2025 GMT
            Not After : Feb  3 18:33:25 2026 GMT
        Subject: CN=7D279A976D2A7679C314A75EAE049DD91D3F6988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ff:e0:9b:f7:33:3f:55:9a:3d:09:47:5b:09:
                    22:4c:48:65:1d:70:6c:64:0c:9b:87:d4:d2:40:12:
                    af:f6:1f:d4:42:69:eb:c9:f3:2f:99:be:e8:72:12:
                    bd:61:57:10:7c:ff:99:ed:8f:ea:e1:68:44:94:c3:
                    39:10:e4:cf:ae:66:8d:2b:ba:e8:b0:1a:69:e7:a5:
                    9b:38:9f:77:b2:c6:43:8b:08:81:1d:24:d4:ca:54:
                    23:e7:3a:8b:12:d9:9b:73:3d:a1:bb:d9:13:f6:d1:
                    bd:bf:af:ae:c9:da:9f:5c:cc:12:17:28:93:d6:17:
                    e9:0f:66:ce:28:6f:26:f8:bb:94:33:51:d6:e1:7e:
                    15:8e:3b:c2:8f:df:82:2c:e6:65:1e:73:1c:c7:59:
                    89:34:be:e4:37:4d:df:44:ca:27:81:2e:ae:05:38:
                    a4:09:da:d6:d9:9e:14:5f:7b:45:7c:2a:26:3f:df:
                    30:b4:2f:51:6c:6f:72:3e:e1:17:6d:a7:f0:fa:64:
                    1a:c5:1f:45:df:ff:dc:dd:18:8b:22:19:a3:5b:6a:
                    58:aa:bd:3e:9e:ff:bc:bc:d9:84:83:7d:62:68:c1:
                    8f:e8:5f:3b:75:c0:b1:5e:6f:d1:b8:24:ec:f5:49:
                    8b:22:da:b5:85:bc:71:05:63:e8:f9:9c:a7:99:af:
                    b4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:27:9A:97:6D:2A:76:79:C3:14:A7:5E:AE:04:9D:D9:1D:3F:69:88
            X509v3 Authority Key Identifier:
                keyid:ED:A8:27:CC:7A:82:AE:78:51:CA:F2:9A:87:1B:51:44:E4:6B:1A:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A189BFC92C27DF08C9394FBAF72B04862C5B98380994EDC414B936CCF736BF7B/0/EDA827CC7A82AE7851CAF29A871B5144E46B1A66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDA827CC7A82AE7851CAF29A871B5144E46B1A66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A189BFC92C27DF08C9394FBAF72B04862C5B98380994EDC414B936CCF736BF7B/0/34352e3136392e3134302e302f32342d3234203d3e20323637383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:e2:41:00:eb:7b:a7:6a:41:27:9a:64:7b:5c:eb:fa:40:23:
         f5:3b:8b:1f:10:9d:90:36:f2:a4:95:99:13:37:0b:06:85:48:
         7c:c5:df:36:02:b0:47:74:d3:02:46:c4:7a:1a:0c:09:ed:e2:
         7b:13:8f:e7:86:18:ff:4b:8c:16:01:1d:cc:d9:0f:7c:2f:4e:
         23:bc:b9:76:60:5a:97:fb:d8:79:47:a3:ba:c3:55:b8:f5:57:
         03:69:17:b2:b2:b7:a2:47:42:7d:40:b7:a4:93:cc:30:1d:00:
         73:4b:dc:1c:a0:87:9c:cc:6d:d4:ae:c2:65:8a:03:5f:c8:83:
         a8:1f:81:a4:df:89:df:23:88:67:a8:ea:91:b9:d9:3c:f0:f1:
         03:ef:ff:cb:07:d9:63:fd:95:73:4b:d2:f8:cc:65:0f:5e:91:
         0b:0e:0c:90:90:65:fb:3d:79:ef:76:83:7c:03:40:82:b3:db:
         9d:1b:70:18:d7:ea:42:8e:f5:6f:f9:96:91:27:d6:f3:5f:d1:
         e0:ac:a3:20:1e:ed:74:29:94:5f:74:3c:97:4f:a9:31:0a:58:
         98:24:35:5c:c6:52:46:5d:74:d4:e2:29:24:b3:30:3b:24:d4:
         3b:2c:8d:fb:73:4a:f5:ff:98:68:74:80:ce:af:8f:e3:f3:8b:
         38:08:3f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:02 2025 by rpki-client