Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/34352e3138342e3130322e302f32342d3234203d3e20323639373931.roa
File:                     34352e3138342e3130322e302f32342d3234203d3e20323639373931.roa (raw, json)
Hash identifier:          ApKUtC6YqkixXW7J8GU5AuN5qFRN9QUZ+sQzQv8F9W4=
Subject key identifier:   2A:08:4F:0E:E0:39:D3:16:FF:29:E8:C2:C7:45:75:55:F1:FF:3E:27
Certificate issuer:       /CN=B1584F435951195F9A1F345DE3A71C0FFAED9417
Certificate serial:       4B04C21168EA0C37E8DEADF1C9DFED2CD1022ED7
Authority key identifier: B1:58:4F:43:59:51:19:5F:9A:1F:34:5D:E3:A7:1C:0F:FA:ED:94:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/34352e3138342e3130322e302f32342d3234203d3e20323639373931.roa
Signing time:             Tue 04 Feb 2025 18:29:04 +0000
ROA not before:           Tue 04 Feb 2025 18:24:04 +0000
ROA not after:            Tue 03 Feb 2026 18:29:04 +0000
asID:                     269791
IP address blocks:        45.184.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:04:c2:11:68:ea:0c:37:e8:de:ad:f1:c9:df:ed:2c:d1:02:2e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1584F435951195F9A1F345DE3A71C0FFAED9417
        Validity
            Not Before: Feb  4 18:24:04 2025 GMT
            Not After : Feb  3 18:29:04 2026 GMT
        Subject: CN=2A084F0EE039D316FF29E8C2C7457555F1FF3E27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:92:96:f9:fe:36:8f:b4:de:f6:8a:7c:e3:1d:
                    99:ee:c0:48:da:e6:ad:c9:57:8d:95:86:1a:72:b8:
                    d0:38:d8:dc:01:ad:2d:90:a4:99:e7:bc:5f:ca:bf:
                    3b:b2:3a:e2:6d:8d:a3:18:a3:5c:0a:f6:76:9e:dc:
                    5d:4f:f3:1a:b3:5d:90:f4:e5:bb:21:a1:f0:a8:b9:
                    23:d3:73:2f:b8:77:53:af:73:c8:5d:3d:41:ef:40:
                    77:90:d3:9e:6a:f1:a5:8e:8a:ab:c2:bf:c0:b2:3e:
                    ad:30:f1:1d:8b:00:3c:0b:6f:36:1b:f6:54:fc:d6:
                    24:e9:ef:57:f5:32:0b:ca:3c:22:52:b2:4d:91:08:
                    2d:79:b5:91:f2:44:87:a2:f5:ba:3e:4c:9f:31:3e:
                    41:86:75:5c:c2:5e:b8:eb:e1:ce:0b:8f:8c:95:ab:
                    9b:6e:ad:bc:35:c1:a9:57:6e:5b:8c:0e:ef:11:88:
                    68:d4:ba:1e:fe:d1:90:55:e2:78:e0:ff:e7:2b:db:
                    f2:61:01:14:06:59:ee:54:f9:07:ac:e1:cc:88:ab:
                    9f:c3:5c:87:83:2d:a9:1f:0d:35:58:86:5e:49:3f:
                    67:8c:4a:2a:f8:1a:55:d1:40:f1:9d:de:a0:45:a7:
                    88:06:aa:d5:18:99:78:9f:3d:30:aa:43:98:37:f6:
                    9a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:08:4F:0E:E0:39:D3:16:FF:29:E8:C2:C7:45:75:55:F1:FF:3E:27
            X509v3 Authority Key Identifier:
                keyid:B1:58:4F:43:59:51:19:5F:9A:1F:34:5D:E3:A7:1C:0F:FA:ED:94:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1584F435951195F9A1F345DE3A71C0FFAED9417.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A59CF620A65B79C6CFCDD929FFE39B48A3CBF52DDB92C6B536AEE34C648130F9/0/34352e3138342e3130322e302f32342d3234203d3e20323639373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:e3:3a:f6:83:ce:5c:3a:89:64:90:fa:b5:dc:ba:e7:a3:ab:
         6c:60:79:dd:f7:e4:12:5f:a5:5e:f4:32:7a:17:21:35:ef:3c:
         29:71:7d:6f:89:55:e4:51:b7:19:e0:80:13:65:e5:50:7f:e1:
         d5:45:e0:a7:de:c4:a9:03:0b:7a:27:7f:1d:f5:62:f3:d7:55:
         53:d7:60:1c:4f:0f:63:74:15:55:ef:0e:c4:26:51:dc:bc:d7:
         9e:80:d2:78:d4:27:86:b9:0b:0d:27:f3:a3:a6:d3:0b:03:82:
         38:51:b0:48:7c:4c:67:78:ac:f5:55:e9:c8:40:4b:5c:b4:7c:
         c4:f2:c1:98:1a:d6:fb:42:03:0b:c0:53:46:9e:54:2d:55:fc:
         5e:d0:33:1b:5b:32:63:a2:81:bc:34:35:90:e7:a2:5b:ec:3d:
         b5:00:64:79:de:d9:2a:40:f2:b6:89:4c:58:37:c2:d9:07:bb:
         1d:b7:36:82:b8:ca:4e:3a:62:3d:a4:9e:cb:e9:82:05:d6:02:
         9a:c0:3f:52:17:9b:1d:03:60:6d:0d:9a:0e:ef:10:09:16:f0:
         a9:ad:2f:93:99:fe:f1:28:bd:ae:f9:60:4f:78:df:cd:d7:0d:
         fd:c6:68:64:46:cf:17:da:24:6f:40:dc:b3:15:d0:95:b7:a4:
         d9:e9:73:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:13 2025 by rpki-client