Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/34352e3232372e31392e302f32342d3234203d3e20323635383639.roa
File:                     34352e3232372e31392e302f32342d3234203d3e20323635383639.roa (raw, json)
Hash identifier:          jBh9lz5bBCWOaKMT76jTbm4gp1mZve/4VpSWPUn0XAo=
Subject key identifier:   6E:96:55:83:29:EC:C8:EE:11:69:2E:C4:CC:52:A4:09:C7:83:1E:42
Certificate issuer:       /CN=E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2
Certificate serial:       05C63E766B625C8E3007515EEACBB24F32310E6D
Authority key identifier: E7:6D:7E:4B:B5:C0:67:85:FC:4F:DE:5D:20:63:A4:21:FC:05:10:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/34352e3232372e31392e302f32342d3234203d3e20323635383639.roa
Signing time:             Tue 04 Feb 2025 18:29:09 +0000
ROA not before:           Tue 04 Feb 2025 18:24:09 +0000
ROA not after:            Tue 03 Feb 2026 18:29:09 +0000
asID:                     265869
IP address blocks:        45.227.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c6:3e:76:6b:62:5c:8e:30:07:51:5e:ea:cb:b2:4f:32:31:0e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2
        Validity
            Not Before: Feb  4 18:24:09 2025 GMT
            Not After : Feb  3 18:29:09 2026 GMT
        Subject: CN=6E96558329ECC8EE11692EC4CC52A409C7831E42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:2c:bc:51:36:89:45:e1:15:15:50:fc:30:
                    18:cd:23:7d:1e:0b:71:db:9c:50:d4:70:e5:e1:ae:
                    78:90:aa:7a:cb:4b:58:b5:cb:96:52:e9:9b:cf:e6:
                    69:d2:bf:06:dd:64:09:1b:47:b5:89:92:39:99:4d:
                    fe:8e:d6:80:57:e7:2f:23:7b:3c:a2:26:e7:e0:61:
                    9d:be:b8:d0:7c:9e:20:3d:4d:7d:ac:8e:60:c7:3a:
                    6e:a4:60:16:4b:1d:d9:5c:a0:0b:ed:35:3a:fb:59:
                    0c:00:7d:5b:f1:17:e7:58:e1:58:14:e7:40:bc:08:
                    05:fa:ef:0f:0e:e8:f4:c7:06:32:df:e0:20:a1:1b:
                    8e:a5:15:da:86:c8:aa:6e:9a:ff:c9:2c:18:da:9c:
                    0a:b4:92:16:34:0c:a3:10:41:c3:93:35:b6:1f:0d:
                    8a:0b:35:fe:79:f6:39:79:bc:46:f9:88:3e:35:ad:
                    10:02:4a:24:b5:a1:ae:ee:41:1f:9f:9b:3e:9c:fa:
                    a9:29:09:ca:54:c8:b1:fd:63:4e:7d:86:b8:08:4d:
                    29:51:d0:0e:d3:3b:f5:30:40:58:63:c2:40:f8:6c:
                    92:8a:ed:12:75:7c:e7:c5:e5:b8:d4:d2:3d:38:32:
                    c1:6f:8f:db:07:bf:34:14:0b:39:3e:05:48:d2:26:
                    c1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:96:55:83:29:EC:C8:EE:11:69:2E:C4:CC:52:A4:09:C7:83:1E:42
            X509v3 Authority Key Identifier:
                keyid:E7:6D:7E:4B:B5:C0:67:85:FC:4F:DE:5D:20:63:A4:21:FC:05:10:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/34352e3232372e31392e302f32342d3234203d3e20323635383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:4b:dd:0c:88:27:c3:6a:8c:73:b3:ac:d6:19:03:1f:bd:9f:
         0a:c2:66:dd:5b:ed:2d:e1:a1:0a:51:fc:be:45:c1:2d:2d:4d:
         d8:d6:24:fb:b8:13:ea:63:e4:2b:a6:45:e0:dc:9a:68:25:86:
         00:f3:9e:0e:f1:30:b8:b8:7d:3c:6b:9e:6f:99:46:a7:e6:98:
         01:63:bf:ce:5b:9a:d1:fb:d8:5f:ef:4c:95:2d:d0:50:d6:c3:
         ee:55:a6:61:27:b5:d5:fd:c8:a9:55:fc:49:90:5d:7b:b1:c2:
         c1:26:62:eb:8e:56:49:b2:61:8f:23:85:b5:9b:a7:53:6b:61:
         3e:8c:ac:07:7c:d5:6d:bc:8f:f7:06:a3:1b:c2:6c:b2:96:e8:
         a6:01:4e:d7:64:04:04:72:2c:1d:3b:db:3d:9f:f4:20:b2:6d:
         f5:be:4b:c9:6b:35:58:ba:38:a5:ee:c4:c7:4b:09:cd:35:11:
         fa:79:3b:8a:11:61:32:a8:6f:c9:c1:2f:5b:82:d9:9e:c2:2f:
         9c:10:4c:83:40:26:30:1f:0f:46:79:5c:fe:a7:49:6d:d3:07:
         e2:ed:41:97:df:bd:5e:98:1b:4d:db:33:f8:f6:55:78:a3:02:
         42:e3:3a:53:76:34:35:85:35:17:a2:f6:dd:c4:68:3e:9c:12:
         35:c2:45:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:19 2025 by rpki-client