Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138352e302f32342d3234203d3e20323635383531.roa
File:                     34352e3232352e3138352e302f32342d3234203d3e20323635383531.roa (raw, json)
Hash identifier:          9/DjF6F2DqZdtHWwC2KoPPwIsrZaA7krMkup+Sx0Gvk=
Subject key identifier:   77:92:C4:3C:9B:7B:48:E7:86:58:06:E7:07:68:17:39:87:55:6C:6D
Certificate issuer:       /CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
Certificate serial:       0F4C2223232373F64AC9E5A05E5B418F1A716ADB
Authority key identifier: A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138352e302f32342d3234203d3e20323635383531.roa
Signing time:             Tue 04 Feb 2025 18:51:21 +0000
ROA not before:           Tue 04 Feb 2025 18:46:21 +0000
ROA not after:            Tue 03 Feb 2026 18:51:21 +0000
asID:                     265851
IP address blocks:        45.225.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:31:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:4c:22:23:23:23:73:f6:4a:c9:e5:a0:5e:5b:41:8f:1a:71:6a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
        Validity
            Not Before: Feb  4 18:46:21 2025 GMT
            Not After : Feb  3 18:51:21 2026 GMT
        Subject: CN=7792C43C9B7B48E7865806E70768173987556C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:12:54:9f:0c:4a:84:8f:ed:f0:5a:14:75:c2:
                    3d:52:85:59:11:94:67:a8:30:60:65:9e:bf:33:04:
                    66:0a:6e:65:b6:7b:aa:a8:9d:da:aa:63:d1:ec:3a:
                    27:07:98:39:6a:73:4a:ea:16:c4:21:82:c6:07:72:
                    b8:4c:48:7f:37:e4:67:d2:98:a5:8e:07:8a:bb:aa:
                    82:18:54:e9:87:c9:e2:bc:65:ec:5f:6e:e5:03:51:
                    b4:9c:a0:81:16:a8:11:44:1f:3c:be:9b:22:1e:3e:
                    2b:97:73:cd:be:24:ee:90:a1:de:ab:2b:68:d4:68:
                    45:5d:5d:80:1f:35:72:01:35:08:2d:00:28:f8:4c:
                    58:c1:74:db:e9:56:ca:0c:04:6f:8d:b9:55:dc:27:
                    59:40:ba:f4:c5:9c:b7:93:ab:e4:7a:02:bd:8f:e1:
                    1a:49:45:9f:08:ff:2b:5a:b8:e5:57:8e:49:65:08:
                    39:73:03:8a:16:af:df:ac:f3:e8:fc:4c:09:70:ef:
                    b4:f2:a0:01:0a:6b:0a:19:e3:60:f5:70:5d:7d:d6:
                    30:44:38:0c:d0:2c:46:db:33:a0:bf:c7:da:ad:b2:
                    20:0c:56:b7:6e:6b:91:08:e6:03:0c:08:27:7f:2a:
                    d0:a9:0f:9b:b8:5b:00:02:d1:ac:4a:7d:4a:5e:36:
                    8b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:92:C4:3C:9B:7B:48:E7:86:58:06:E7:07:68:17:39:87:55:6C:6D
            X509v3 Authority Key Identifier:
                keyid:A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138352e302f32342d3234203d3e20323635383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:ac:c9:da:97:57:e4:f2:7a:e9:be:de:bd:06:61:48:e8:84:
         5e:76:48:5c:a5:07:1d:76:38:29:79:69:1f:c1:14:c2:e7:b1:
         25:34:c4:d0:49:9a:e6:0f:6c:ac:a3:1f:0e:1c:3a:e0:82:03:
         aa:e1:41:2f:67:ba:fd:6c:f2:4e:b1:19:eb:e5:47:f3:b7:68:
         1c:cd:95:e1:7c:b6:f4:33:b8:64:af:a9:2b:ea:9a:99:a3:77:
         d4:65:a9:80:0f:04:c0:08:89:08:e9:03:07:e8:8c:11:44:45:
         96:e0:a8:87:9c:ea:ca:ac:d9:eb:9d:7b:85:87:ac:8c:43:63:
         3c:27:6a:6f:5b:02:d6:81:f9:52:bc:d7:bb:79:a4:d2:67:66:
         73:34:7f:aa:e4:bb:ea:f2:e3:7d:22:3a:f7:93:e6:4c:df:20:
         9a:e7:97:7a:31:b2:2c:64:7f:92:45:14:99:42:2f:9b:cd:65:
         ec:10:57:17:a6:5a:fa:48:aa:af:2c:3e:97:d7:b9:19:09:8f:
         a7:94:16:aa:ad:20:b7:d6:42:e8:d9:a3:31:1e:70:39:92:b7:
         df:ae:de:aa:2e:06:43:6f:eb:fe:80:95:29:06:28:e1:07:39:
         63:11:a2:75:f5:d0:55:fb:a5:36:8e:c0:90:69:65:a3:30:bf:
         63:69:9d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:01:50 2025 by rpki-client