Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/34352e3233302e3230342e302f32322d3232203d3e20323636373433.roa
File:                     34352e3233302e3230342e302f32322d3232203d3e20323636373433.roa (raw, json)
Hash identifier:          PVYzo709P/8gq/K+pbx3eSPMHPlV3yyi/sV1fQ2D8Zc=
Subject key identifier:   EA:E1:D5:6F:4A:6D:72:34:F0:8F:45:C8:74:F4:30:1E:0D:1E:74:04
Certificate issuer:       /CN=27132C0B16F59934A89DA1E369D30BCEC9B7E01E
Certificate serial:       7AEC7F21D2DAACAABFDAAA147160A08EBE411D65
Authority key identifier: 27:13:2C:0B:16:F5:99:34:A8:9D:A1:E3:69:D3:0B:CE:C9:B7:E0:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/34352e3233302e3230342e302f32322d3232203d3e20323636373433.roa
Signing time:             Tue 04 Feb 2025 18:15:17 +0000
ROA not before:           Tue 04 Feb 2025 18:10:17 +0000
ROA not after:            Tue 03 Feb 2026 18:15:17 +0000
asID:                     266743
IP address blocks:        45.230.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 05:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ec:7f:21:d2:da:ac:aa:bf:da:aa:14:71:60:a0:8e:be:41:1d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27132C0B16F59934A89DA1E369D30BCEC9B7E01E
        Validity
            Not Before: Feb  4 18:10:17 2025 GMT
            Not After : Feb  3 18:15:17 2026 GMT
        Subject: CN=EAE1D56F4A6D7234F08F45C874F4301E0D1E7404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:41:06:40:b7:88:3e:2d:59:64:70:87:d2:
                    c9:9b:e7:8f:c5:f2:0e:b1:12:3f:d9:50:53:0a:56:
                    81:28:08:6a:59:61:09:ec:1f:78:a8:d4:17:4a:6c:
                    bb:26:1e:95:df:41:b1:59:ef:3f:c3:0c:96:34:7a:
                    43:11:f6:0f:b6:78:2b:e2:11:ef:ec:89:6a:93:1f:
                    a9:c5:7f:ac:c0:44:01:5e:6c:4d:72:17:c0:e6:c9:
                    e1:eb:95:df:1f:50:33:cb:27:85:74:87:de:a7:e0:
                    33:83:ec:d5:51:d8:a8:22:2c:e0:4b:ac:e2:32:ee:
                    30:e0:74:1f:d5:97:82:6d:73:47:9f:55:95:31:09:
                    fe:5c:37:c2:59:e1:1b:44:50:6f:83:ed:48:53:66:
                    48:72:2a:a9:b5:a7:0b:37:d1:f8:0d:e6:de:67:3e:
                    36:47:d5:c6:ae:0c:5e:83:18:c7:69:8a:c9:89:24:
                    12:47:d8:5d:ce:86:f4:b7:79:7e:ff:c5:84:e0:fb:
                    b0:20:5e:b4:ad:5a:df:11:18:53:e1:8f:56:98:94:
                    38:81:99:f8:c9:61:06:4b:92:81:fc:f1:ab:43:bc:
                    d3:88:e0:19:9a:89:05:ad:f4:5b:16:8b:5b:3a:71:
                    3b:5e:eb:29:2e:8d:87:a9:7e:6c:4a:59:34:37:96:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E1:D5:6F:4A:6D:72:34:F0:8F:45:C8:74:F4:30:1E:0D:1E:74:04
            X509v3 Authority Key Identifier:
                keyid:27:13:2C:0B:16:F5:99:34:A8:9D:A1:E3:69:D3:0B:CE:C9:B7:E0:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/34352e3233302e3230342e302f32322d3232203d3e20323636373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:1e:be:bc:98:07:fc:6b:50:3d:1d:9a:0b:4a:48:7d:30:b9:
         84:10:cc:8f:b6:c7:79:d7:39:ca:59:be:e3:60:b4:15:4c:05:
         85:26:95:a7:56:1f:e0:ce:5f:d9:4f:91:d8:92:4c:61:f0:3f:
         f9:90:35:d0:27:cc:1d:e9:bf:95:97:d8:c9:ff:64:72:ed:c8:
         a3:56:26:e7:5a:70:d1:86:83:03:29:14:f0:80:c8:8e:3f:64:
         a8:3a:2e:14:74:80:eb:e8:1d:fe:41:d7:85:35:d6:1a:c8:10:
         35:14:18:d0:40:38:98:df:d5:00:91:3b:54:0e:ed:83:1f:9f:
         a1:b0:4f:f3:91:39:5a:f3:cb:83:c3:76:aa:00:58:89:04:cd:
         62:f5:8d:29:6c:48:b0:3a:7a:1e:f5:95:85:c4:35:de:e0:db:
         bc:33:bc:75:b7:e5:c6:ba:ef:44:ec:43:c3:b6:47:d5:21:90:
         ad:1f:d6:37:7e:11:3e:c3:21:36:fb:77:32:34:ff:76:59:d2:
         9f:1c:52:33:2a:0f:a6:1e:70:17:fe:84:e6:d1:5b:28:79:dd:
         9e:7c:aa:76:cc:ff:87:21:47:8e:0a:15:4e:1e:1f:ac:cf:b0:
         8d:99:90:35:36:e9:de:a7:70:46:56:fe:85:44:be:e4:e0:80:
         36:01:7f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:08:04 2025 by rpki-client