Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138372e302f32342d3234203d3e20323635383531.roa
File:                     34352e3232352e3138372e302f32342d3234203d3e20323635383531.roa (raw, json)
Hash identifier:          pdZcKOU6AuNSJy/nzOpaaD3u8sc0THK5yqjK9E7a1M0=
Subject key identifier:   0A:FA:09:73:D8:4B:25:82:03:3B:DF:4A:DF:44:1D:5B:39:AD:91:44
Certificate issuer:       /CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
Certificate serial:       4185F6A201C98A3D74DEB835FBECB6F1E10C7D5B
Authority key identifier: A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138372e302f32342d3234203d3e20323635383531.roa
Signing time:             Tue 04 Feb 2025 18:51:22 +0000
ROA not before:           Tue 04 Feb 2025 18:46:22 +0000
ROA not after:            Tue 03 Feb 2026 18:51:22 +0000
asID:                     265851
IP address blocks:        45.225.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:85:f6:a2:01:c9:8a:3d:74:de:b8:35:fb:ec:b6:f1:e1:0c:7d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
        Validity
            Not Before: Feb  4 18:46:22 2025 GMT
            Not After : Feb  3 18:51:22 2026 GMT
        Subject: CN=0AFA0973D84B2582033BDF4ADF441D5B39AD9144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:a0:53:8e:20:61:ba:b7:51:fc:97:70:da:
                    ba:7e:b2:11:50:25:d2:68:7b:45:63:15:8a:ad:ea:
                    17:4c:cf:4f:b3:c2:ff:b2:a1:7b:f5:ef:9c:a3:cd:
                    6d:ce:85:f2:9c:33:2c:6a:2d:83:96:f1:12:8c:83:
                    c6:80:17:a6:7d:c0:15:dd:5d:04:0f:02:6a:d1:01:
                    26:2a:2a:a5:0d:75:43:ab:13:e8:24:dd:56:1a:44:
                    7a:76:ae:31:87:ef:2e:37:a3:88:fe:a8:dd:8d:89:
                    d3:6e:da:af:01:fe:98:b2:dc:c1:a9:f9:47:94:db:
                    fb:60:9f:49:36:1b:53:42:9d:94:b8:0c:73:83:b5:
                    2b:46:9a:85:7a:49:b4:dc:a2:17:36:e7:6b:39:ca:
                    18:ad:a9:cd:87:a5:2f:67:7c:85:bd:f5:f7:8e:51:
                    5f:a5:92:72:02:6c:72:f1:2a:26:60:c8:ed:0c:b0:
                    50:a4:38:8f:0c:4b:ae:c2:43:ee:48:ed:b3:08:82:
                    fc:19:8a:2e:06:f9:a2:6c:60:4a:63:8f:73:3a:e9:
                    cf:8b:fb:20:52:2c:02:b6:c2:37:b1:23:6a:39:41:
                    8f:fe:08:52:cd:75:02:f1:b3:bc:44:61:43:8e:27:
                    e9:87:2a:c5:60:f2:3d:82:5b:1c:07:47:00:3c:04:
                    1a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FA:09:73:D8:4B:25:82:03:3B:DF:4A:DF:44:1D:5B:39:AD:91:44
            X509v3 Authority Key Identifier:
                keyid:A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138372e302f32342d3234203d3e20323635383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:1e:61:49:9e:78:c9:c8:9f:2b:9a:5a:27:8b:d6:3b:8a:51:
         ab:34:16:09:c2:ce:b6:f2:9f:10:c1:9a:10:2a:70:e9:6e:93:
         9c:a3:20:be:ac:4f:f7:31:fd:9a:ae:03:73:eb:5d:80:18:fb:
         e8:17:e4:82:d0:13:63:4d:fe:57:42:15:e6:d2:c5:46:3d:e5:
         fd:67:85:95:77:a7:ae:6b:d8:0d:06:b3:82:17:6f:09:28:ba:
         1b:95:ea:7f:17:32:fc:22:49:e5:21:7d:15:9f:27:8c:63:4c:
         01:a3:6e:bc:c7:ea:2f:7e:2c:0f:99:85:33:70:db:3a:f7:51:
         2e:2b:44:71:8f:0b:de:8e:fb:54:d4:5d:35:01:6b:f9:a9:9f:
         02:24:e7:6a:90:83:8e:82:4e:a4:8b:28:5f:3e:53:fe:27:8e:
         ae:1a:1b:3f:16:8b:63:b3:a9:b1:33:d8:8d:d0:06:5f:38:24:
         fc:fc:0b:ec:3f:5d:f4:53:b7:22:6a:39:af:1e:9b:08:47:0f:
         9c:aa:45:41:a9:57:c6:b5:b2:3c:32:3f:41:2a:b1:d3:38:d0:
         c5:b4:ad:94:eb:89:0d:17:07:d5:f4:f3:14:0d:84:07:c6:99:
         26:79:44:e3:6f:db:b7:24:4e:d6:37:bd:12:7e:b4:e2:64:19:
         81:8f:ea:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:19:29 2025 by rpki-client