Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/34352e36352e3234382e302f32322d3234203d3e203237383535.roa
File:                     34352e36352e3234382e302f32322d3234203d3e203237383535.roa (raw, json)
Hash identifier:          eGFXlAPltd8ChzpqsrMjMGomBr1ZrqonX89O6NRSHZ0=
Subject key identifier:   74:29:88:07:60:AA:F8:F0:72:7C:7B:B1:3F:84:E1:5F:E7:6C:DA:D0
Certificate issuer:       /CN=2D9B47B31B2096B35C9794693DF659896A6B49CE
Certificate serial:       523043209D2A1831DC2298D2C298798A5D943849
Authority key identifier: 2D:9B:47:B3:1B:20:96:B3:5C:97:94:69:3D:F6:59:89:6A:6B:49:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/34352e36352e3234382e302f32322d3234203d3e203237383535.roa
Signing time:             Tue 04 Feb 2025 18:11:03 +0000
ROA not before:           Tue 04 Feb 2025 18:06:03 +0000
ROA not after:            Tue 03 Feb 2026 18:11:03 +0000
asID:                     27855
IP address blocks:        45.65.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:30:43:20:9d:2a:18:31:dc:22:98:d2:c2:98:79:8a:5d:94:38:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D9B47B31B2096B35C9794693DF659896A6B49CE
        Validity
            Not Before: Feb  4 18:06:03 2025 GMT
            Not After : Feb  3 18:11:03 2026 GMT
        Subject: CN=7429880760AAF8F0727C7BB13F84E15FE76CDAD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:1c:6b:e5:50:bd:fe:9e:6a:67:50:c4:2b:
                    0d:c1:c0:82:cd:89:f8:95:34:a9:2b:fd:9f:58:ed:
                    6d:f0:de:c3:86:12:fa:5e:c6:9f:a0:a7:45:1b:55:
                    5e:e3:97:7f:fe:3f:9e:74:3d:8c:0e:53:9b:ba:be:
                    29:0b:49:88:3e:d2:34:0a:74:78:95:fe:2f:2e:18:
                    d7:c4:a8:dc:3a:94:b7:26:33:d5:7e:e9:fd:e5:31:
                    b3:ad:ad:3f:e0:40:a7:09:88:ba:d2:ff:b2:f8:1a:
                    34:6d:ae:6f:63:ca:4a:e3:da:af:fe:f9:1e:68:01:
                    8a:d6:00:6b:e2:97:9c:0c:73:6e:44:04:59:7c:30:
                    04:74:9f:60:42:cc:57:eb:c9:7b:82:1a:25:29:2f:
                    f2:cd:58:83:8f:c2:3c:01:3e:b0:86:ed:18:ce:27:
                    46:71:65:55:c0:e3:08:c7:0a:2b:e0:55:4a:42:89:
                    64:5a:87:95:16:f4:46:04:37:fa:0b:ba:76:bf:6c:
                    41:d4:2c:45:1d:2b:8a:1a:8f:fd:4a:c1:68:f0:f4:
                    bf:aa:c7:15:5f:e5:84:c1:80:ca:86:a4:6e:97:92:
                    d7:d3:b9:8f:4e:a6:17:ac:df:67:ff:e9:eb:80:03:
                    f6:f0:e6:23:e2:85:dd:c8:b6:22:5d:58:fb:64:c9:
                    c6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:29:88:07:60:AA:F8:F0:72:7C:7B:B1:3F:84:E1:5F:E7:6C:DA:D0
            X509v3 Authority Key Identifier:
                keyid:2D:9B:47:B3:1B:20:96:B3:5C:97:94:69:3D:F6:59:89:6A:6B:49:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/34352e36352e3234382e302f32322d3234203d3e203237383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:72:ca:40:6f:89:29:7e:0f:1a:62:f8:d4:23:ce:a7:3b:cc:
         b6:43:58:99:94:95:af:e1:6f:a6:55:cd:c9:29:29:72:f7:5a:
         db:e5:3a:ba:3d:da:e9:e7:a5:da:04:22:03:29:9d:23:0c:0e:
         31:bf:89:fa:a2:e6:79:bb:32:26:e7:0b:40:a5:b2:58:68:39:
         3a:24:78:a8:22:8b:44:e7:07:80:b5:d3:9a:49:85:dd:d1:2c:
         e3:85:01:5f:fb:24:dc:bb:49:b9:5d:27:75:08:0c:d7:79:02:
         c3:26:73:98:bc:6f:34:b7:7b:71:7b:70:1f:74:c2:76:f8:99:
         1c:fc:d6:08:1e:d9:67:a1:4c:81:19:28:1c:6b:42:b3:ec:c9:
         c1:c9:dd:5c:2b:27:13:96:03:85:4c:43:cd:47:a8:6f:dd:7d:
         c6:e9:f5:c5:8f:98:17:40:0e:6d:ea:ff:75:2b:98:c1:01:5b:
         72:42:2d:94:60:03:9a:15:ba:91:10:6a:c8:c1:76:be:dd:e8:
         15:8b:1b:23:a7:f0:e7:81:0d:05:c4:b6:91:a3:bb:8e:6d:00:
         6a:f0:7b:c5:a7:e2:7d:44:68:81:98:bc:da:bf:52:d2:ca:cd:
         2f:d8:36:db:d0:de:33:9b:9e:c9:4d:a4:dd:50:a1:a9:91:ea:
         bc:68:28:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:01:50 2025 by rpki-client