Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/34352e3233302e3230342e302f32342d3234203d3e20323636373433.roa
File:                     34352e3233302e3230342e302f32342d3234203d3e20323636373433.roa (raw, json)
Hash identifier:          TcLfSqMk0BgdFVhoD8xi94xXic1pERWNoHDcpaCuhS8=
Subject key identifier:   B5:F3:46:BC:34:0E:85:37:D5:2A:A2:57:D4:CB:3C:4C:B2:3B:23:0E
Certificate issuer:       /CN=27132C0B16F59934A89DA1E369D30BCEC9B7E01E
Certificate serial:       1D08D3AFC295DE4ACB9EFA880570BF8DB087D00F
Authority key identifier: 27:13:2C:0B:16:F5:99:34:A8:9D:A1:E3:69:D3:0B:CE:C9:B7:E0:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/34352e3233302e3230342e302f32342d3234203d3e20323636373433.roa
Signing time:             Tue 04 Feb 2025 18:15:16 +0000
ROA not before:           Tue 04 Feb 2025 18:10:16 +0000
ROA not after:            Tue 03 Feb 2026 18:15:16 +0000
asID:                     266743
IP address blocks:        45.230.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 05:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:08:d3:af:c2:95:de:4a:cb:9e:fa:88:05:70:bf:8d:b0:87:d0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27132C0B16F59934A89DA1E369D30BCEC9B7E01E
        Validity
            Not Before: Feb  4 18:10:16 2025 GMT
            Not After : Feb  3 18:15:16 2026 GMT
        Subject: CN=B5F346BC340E8537D52AA257D4CB3C4CB23B230E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:59:5f:ef:54:76:ee:52:55:de:1a:7a:8a:
                    1f:f2:b9:a5:f2:b7:e9:b8:6b:22:04:05:27:25:a9:
                    05:8b:ca:63:c7:65:58:57:db:17:88:3c:67:25:26:
                    41:94:bc:2d:20:6a:d0:06:da:96:e3:ca:d2:f9:b1:
                    6f:6b:97:80:e6:64:3b:03:fa:ea:6d:a8:58:85:f6:
                    4e:21:fa:40:dd:d0:df:0d:8d:91:12:12:19:c3:01:
                    38:fb:bc:27:fb:0f:24:e4:e0:bf:42:0d:90:ee:8a:
                    45:21:0f:91:27:a0:b5:3a:d5:68:a0:dd:49:01:94:
                    63:c0:36:ea:41:bf:06:27:b8:7e:9c:e7:d8:c8:d8:
                    dd:85:ce:a0:b5:bf:de:54:e4:b2:eb:e9:d9:0d:37:
                    d3:68:4f:c3:89:f8:f8:d1:63:05:f8:f3:92:7c:66:
                    fa:3a:5c:34:2f:b3:0d:3c:1c:44:d6:07:46:20:23:
                    2a:cf:fe:2c:4d:8a:8e:35:e1:06:92:a7:ed:e9:1b:
                    24:70:0a:38:89:28:16:55:24:58:4a:e2:07:62:8e:
                    11:b4:55:27:73:9e:63:50:f1:37:80:8d:82:76:df:
                    e5:de:a6:33:90:a8:0b:d0:f6:3d:5c:02:49:b5:ad:
                    3d:5d:52:f0:d3:ed:be:64:5a:87:d0:91:75:41:e1:
                    30:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F3:46:BC:34:0E:85:37:D5:2A:A2:57:D4:CB:3C:4C:B2:3B:23:0E
            X509v3 Authority Key Identifier:
                keyid:27:13:2C:0B:16:F5:99:34:A8:9D:A1:E3:69:D3:0B:CE:C9:B7:E0:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27132C0B16F59934A89DA1E369D30BCEC9B7E01E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6D170643D8652D88BD2878DF4D40AE22EF807A14535250D6A903A82E5529AF5/0/34352e3233302e3230342e302f32342d3234203d3e20323636373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:98:0e:fd:52:c5:bb:c8:eb:6c:e0:ad:89:85:2d:e9:83:f3:
         eb:8d:10:1b:25:68:29:40:cf:22:8c:36:c1:d3:50:6d:fa:05:
         2b:5a:b0:e6:d7:d9:21:d5:e9:68:a0:0a:45:c1:6f:67:7e:b4:
         ca:64:ed:79:c3:07:68:0d:1f:5d:e6:04:71:22:b9:fe:35:eb:
         fd:31:89:19:17:35:d0:eb:29:94:f8:05:6a:eb:ba:36:e9:ee:
         32:3a:e6:34:a4:69:e1:3a:68:e7:94:2e:58:03:ff:62:57:54:
         15:82:d6:a1:1d:17:73:39:d7:5d:bd:c0:22:8d:ff:9f:18:41:
         2e:71:8c:e5:28:2a:b5:77:60:bf:e9:10:8c:3d:0b:a4:7d:f8:
         96:15:6d:dd:41:3e:a2:b7:e2:b3:13:34:03:ac:6a:ce:b5:a0:
         df:2c:dd:9f:61:87:30:6a:0e:ae:c6:37:de:45:0f:7a:cf:d3:
         c4:52:3f:e9:09:93:3b:c2:4e:8b:36:c3:1a:22:9f:64:bc:ca:
         f9:79:bc:4c:4c:b7:ca:3d:ee:35:d5:d4:69:15:62:33:99:23:
         d4:73:16:c2:47:fe:70:3c:39:d8:b4:1a:8b:07:c4:05:b5:cf:
         60:f6:eb:9c:d2:3a:6c:3e:32:38:87:65:2e:7a:76:cd:20:11:
         30:de:53:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:08:02 2025 by rpki-client