Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32302e302f32342d3234203d3e20323635373830.roa
File:                     3136382e3232372e32302e302f32342d3234203d3e20323635373830.roa (raw, json)
Hash identifier:          M9Qkg5geEbJh8VegDZTgDdNe4aB2wqkMl6bPwuR/iWg=
Subject key identifier:   5E:E6:67:81:00:90:4B:5A:E5:5F:24:41:FB:09:52:0A:F4:04:81:1E
Certificate issuer:       /CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
Certificate serial:       3AA7556BDE8FFEE157496B5A0F6A62F7D3D48B71
Authority key identifier: 45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32302e302f32342d3234203d3e20323635373830.roa
Signing time:             Tue 04 Feb 2025 19:57:50 +0000
ROA not before:           Tue 04 Feb 2025 19:52:50 +0000
ROA not after:            Tue 03 Feb 2026 19:57:50 +0000
asID:                     265780
IP address blocks:        168.227.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 14:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a7:55:6b:de:8f:fe:e1:57:49:6b:5a:0f:6a:62:f7:d3:d4:8b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
        Validity
            Not Before: Feb  4 19:52:50 2025 GMT
            Not After : Feb  3 19:57:50 2026 GMT
        Subject: CN=5EE6678100904B5AE55F2441FB09520AF404811E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:be:9f:9c:85:b6:b7:20:55:27:0a:e3:79:
                    c9:a9:18:d2:2c:8d:ca:6a:39:94:4c:66:45:41:f0:
                    4d:f9:39:c4:dc:6b:14:41:91:7f:ae:02:16:70:3e:
                    49:58:70:f3:8f:bb:51:ee:e7:75:4a:f8:84:f8:5e:
                    54:61:c1:46:9c:d1:f3:6c:d8:38:14:33:dd:6e:f2:
                    85:0f:1e:7d:a0:54:87:de:72:46:8a:b8:73:0d:21:
                    46:71:4a:2a:7b:01:44:8a:53:e7:77:3b:25:0f:40:
                    79:6c:13:ab:7f:d6:63:ae:9b:74:37:bf:ce:11:ef:
                    b8:7d:ed:78:69:6a:ee:43:4b:1e:4a:5c:a3:07:28:
                    84:66:13:be:d0:c7:54:a7:5c:b3:7a:02:5c:4d:8b:
                    6b:21:1d:74:36:19:29:0a:35:85:d7:6a:4a:c4:e3:
                    ec:e1:cd:ff:6c:0b:ef:fa:10:f1:42:ca:02:1f:51:
                    de:2e:13:1a:31:7e:d5:67:a5:6c:3a:81:f6:4c:94:
                    d8:4a:fa:f0:ac:56:e2:d6:9f:4f:26:ed:55:ae:4a:
                    ad:b5:ea:ba:8a:8c:9d:5a:b3:54:a4:c5:24:2f:ff:
                    75:6a:d6:85:f1:dd:3b:21:39:37:83:21:da:31:6c:
                    4b:9c:73:9c:f7:87:41:f5:74:eb:76:e5:77:4b:3c:
                    3b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E6:67:81:00:90:4B:5A:E5:5F:24:41:FB:09:52:0A:F4:04:81:1E
            X509v3 Authority Key Identifier:
                keyid:45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32302e302f32342d3234203d3e20323635373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:b4:86:22:b9:bd:c0:a8:e9:33:a1:39:ff:19:ad:1e:b3:29:
         c6:9f:f7:97:bc:1c:54:d4:b3:f8:12:56:d3:65:ff:90:68:b0:
         a3:d6:16:db:6c:c2:68:a3:c7:02:56:b2:81:10:ab:cf:29:4b:
         1b:49:ca:17:a9:0c:76:89:ef:ce:c4:d2:61:63:ec:1f:f1:20:
         2e:d6:c0:4f:9f:a1:66:0c:99:3f:0e:70:01:41:48:21:58:af:
         78:93:4f:ca:79:11:22:8b:92:78:9b:03:39:80:b8:c2:45:34:
         e9:a6:4f:49:4a:13:de:5c:7c:eb:a3:5f:6d:7f:dc:2c:9c:d0:
         e5:68:45:77:d3:1f:23:4c:fc:ab:18:54:24:0e:05:81:2f:b0:
         6c:78:2e:9f:28:6f:b7:78:b7:c6:d8:cb:38:56:ac:82:dd:bb:
         d3:9d:8c:89:72:ed:f6:35:34:f3:a7:1e:30:01:94:ad:44:8f:
         b1:ca:eb:72:35:3b:48:39:87:4b:a4:13:20:9f:3d:f9:f8:34:
         61:37:12:e6:ba:fe:f1:eb:1d:99:40:75:be:13:76:c9:7f:3d:
         bd:c1:d2:46:69:c2:39:8e:e7:d3:79:a7:33:47:85:c4:d9:5e:
         b0:b5:08:a2:85:3a:7c:65:68:1f:7f:a1:44:61:d7:28:e5:4c:
         aa:2b:2a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:57:09 2025 by rpki-client