Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32332e302f32342d3234203d3e20323635373830.roa
File:                     3136382e3232372e32332e302f32342d3234203d3e20323635373830.roa (raw, json)
Hash identifier:          o8i8LD8AYGG8PWXUXhCdqAkErhsAOjGhyBaxEIBUI0I=
Subject key identifier:   25:F6:20:25:2A:CE:95:C7:73:EE:3B:BE:FB:12:DF:04:F2:46:A9:4C
Certificate issuer:       /CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
Certificate serial:       13D1B0165F844907EFAF752E538324D27C72D609
Authority key identifier: 45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32332e302f32342d3234203d3e20323635373830.roa
Signing time:             Tue 04 Feb 2025 19:57:50 +0000
ROA not before:           Tue 04 Feb 2025 19:52:50 +0000
ROA not after:            Tue 03 Feb 2026 19:57:50 +0000
asID:                     265780
IP address blocks:        168.227.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 14:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d1:b0:16:5f:84:49:07:ef:af:75:2e:53:83:24:d2:7c:72:d6:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
        Validity
            Not Before: Feb  4 19:52:50 2025 GMT
            Not After : Feb  3 19:57:50 2026 GMT
        Subject: CN=25F620252ACE95C773EE3BBEFB12DF04F246A94C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:4b:c1:b6:0a:3d:b7:54:c5:45:d9:64:d2:
                    19:c9:4e:41:48:2e:c5:63:36:40:ac:ce:1b:63:7b:
                    d9:6c:8d:df:63:88:42:23:8f:4d:1d:5b:aa:87:a2:
                    da:b6:11:99:50:53:35:86:f2:f8:c7:ed:cc:81:d5:
                    c5:8c:06:6b:ed:e5:87:a5:d3:57:2f:b7:c3:3d:eb:
                    16:91:08:40:3e:9b:8a:a3:f1:bf:e4:f5:c3:bd:39:
                    e4:c5:d4:33:e8:ee:83:a0:dd:27:3f:81:4f:bd:86:
                    e2:fc:e2:27:a2:ec:d5:1e:9d:d6:e4:d1:55:75:43:
                    66:47:bf:be:f3:16:8b:18:2c:a5:a1:22:4f:dc:39:
                    fb:3a:ee:f6:71:0b:48:05:de:e7:c2:15:38:7d:7b:
                    6e:1b:83:74:57:25:29:b4:9f:9c:e9:cb:b5:b0:e4:
                    19:cc:c3:ac:72:cd:5f:a0:14:b4:4c:63:2a:5e:1e:
                    e7:49:ad:e9:e0:72:21:88:9f:b3:e5:03:2e:98:cc:
                    6f:81:c0:da:33:90:a2:b8:1d:a6:dd:70:8d:98:70:
                    60:54:09:7c:b9:1d:c7:ce:f9:3f:9a:23:13:ae:37:
                    ad:04:3e:a3:97:e8:2f:56:ed:9d:21:68:ca:45:04:
                    3f:60:57:9d:f0:e7:48:c8:aa:9a:91:48:7d:59:e0:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F6:20:25:2A:CE:95:C7:73:EE:3B:BE:FB:12:DF:04:F2:46:A9:4C
            X509v3 Authority Key Identifier:
                keyid:45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32332e302f32342d3234203d3e20323635373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:db:f0:6f:d6:8d:dd:d7:b1:b7:ba:7a:d2:71:1f:cb:41:a9:
         40:4d:02:16:ed:76:4f:fd:d0:26:03:d5:98:34:60:04:91:88:
         41:d2:3a:02:b4:52:d1:6a:10:e3:e3:41:c4:89:99:a3:9d:2e:
         bc:4e:a3:7f:34:d9:ff:e2:b4:bd:56:0a:90:66:cc:5c:a9:b0:
         08:1d:e7:a7:3b:42:55:1f:17:ba:47:46:11:96:fb:31:ad:da:
         79:10:8f:b0:93:60:ff:2d:93:54:66:a9:da:80:42:ac:78:a6:
         1b:0b:cc:49:c0:8f:31:77:e1:84:32:df:22:9d:92:a9:25:79:
         7a:25:b2:9f:8e:da:53:37:02:2f:48:b8:ab:2f:f0:a3:19:4a:
         c8:84:6d:51:cb:a0:cf:80:c6:9f:6d:5a:2d:e2:2e:01:f8:cb:
         2b:38:4c:84:df:21:d6:26:6d:24:94:6e:b9:87:84:6d:81:dc:
         c6:93:49:6d:57:c1:a1:c0:89:3b:31:00:bb:bb:93:8a:60:04:
         08:0a:a4:6c:96:71:ba:d1:76:ba:b7:05:f3:7a:b7:9f:5a:3b:
         e9:39:1e:87:8d:47:7e:7d:07:f0:26:ad:1a:16:a8:ae:a0:0f:
         58:ab:c7:a1:47:65:4c:58:4a:07:df:cb:17:ad:e4:fd:d3:a0:
         1f:a8:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:52:32 2025 by rpki-client