Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3131312e302f32342d3234203d3e20323639383433.roa
File:                     34352e3138392e3131312e302f32342d3234203d3e20323639383433.roa (raw, json)
Hash identifier:          aIISWsVWkGYgLiGDxanOFlVJQU8jLUywFYBfspH9/Ic=
Subject key identifier:   58:C1:E9:C7:14:4E:48:FC:23:8A:28:1F:49:5D:D4:C7:07:AD:59:19
Certificate issuer:       /CN=E0013BE61C4781324203A7DB7D11674E5D707D02
Certificate serial:       3960000406428346224E3EE2F1205E3100395FC7
Authority key identifier: E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3131312e302f32342d3234203d3e20323639383433.roa
Signing time:             Wed 05 Feb 2025 17:10:00 +0000
ROA not before:           Wed 05 Feb 2025 17:05:00 +0000
ROA not after:            Wed 04 Feb 2026 17:10:00 +0000
asID:                     269843
IP address blocks:        45.189.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:60:00:04:06:42:83:46:22:4e:3e:e2:f1:20:5e:31:00:39:5f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0013BE61C4781324203A7DB7D11674E5D707D02
        Validity
            Not Before: Feb  5 17:05:00 2025 GMT
            Not After : Feb  4 17:10:00 2026 GMT
        Subject: CN=58C1E9C7144E48FC238A281F495DD4C707AD5919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7e:4e:35:d6:97:25:90:1b:f9:9d:16:87:6a:
                    f1:39:5b:86:e5:e4:83:7a:50:da:58:b0:c9:61:ee:
                    ea:da:a6:e1:16:98:c7:f8:5c:9c:e7:a2:2f:48:a6:
                    6d:08:bb:aa:ef:d3:57:97:2a:13:6c:b3:d7:32:c3:
                    6d:d4:fe:1d:86:3d:9d:dc:53:36:4b:17:81:86:a5:
                    e9:b4:69:3c:13:64:c6:71:c5:b3:93:51:27:b4:d8:
                    46:0e:77:a0:c3:84:5a:f0:e0:9e:8a:ee:3c:1c:bb:
                    eb:d8:7a:a0:51:e1:08:f8:6a:d1:e0:1c:92:0b:47:
                    f1:99:2d:84:9d:a7:8c:0c:52:b3:55:06:60:52:4b:
                    3b:22:72:e5:1b:a2:8b:9e:2c:98:ff:53:be:c0:2a:
                    a7:47:af:b8:0e:db:3f:75:96:c2:f1:6d:43:eb:45:
                    41:eb:8b:5e:54:69:94:aa:e0:f2:a5:de:bc:68:88:
                    47:ff:c4:7f:20:f9:7c:13:1b:6b:4a:fc:4e:a1:27:
                    6d:d1:d9:17:ed:c2:c7:09:bd:93:0f:80:a2:56:cc:
                    26:4b:03:52:14:13:18:eb:56:60:2d:8d:a3:60:d5:
                    08:48:ce:af:d6:7c:e3:7b:90:11:48:db:85:f6:46:
                    99:ec:69:cd:50:34:94:3f:b2:71:1b:de:2e:9b:8c:
                    35:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C1:E9:C7:14:4E:48:FC:23:8A:28:1F:49:5D:D4:C7:07:AD:59:19
            X509v3 Authority Key Identifier:
                keyid:E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3131312e302f32342d3234203d3e20323639383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:f5:fa:77:26:21:02:a4:c3:fb:7c:69:0c:9e:d8:aa:a6:ed:
         15:19:c8:5a:d8:c1:41:16:d1:57:1f:6c:b3:9f:b3:83:cf:3f:
         7d:4c:80:d9:fc:fc:48:2e:df:0f:29:3b:4a:c1:15:f7:ff:37:
         ab:51:22:87:fa:b1:a9:65:d6:9e:37:73:3f:12:fc:53:06:02:
         9d:19:c0:fd:e0:36:0f:da:64:a1:6b:bc:45:1d:e7:b9:a3:af:
         48:c3:98:d3:53:b2:bc:6f:a2:0d:bd:d0:75:ba:f8:99:05:fc:
         7a:97:d8:1d:48:16:c4:05:74:44:6d:db:81:6e:fd:34:42:bd:
         0d:61:fd:63:8e:a2:55:74:e9:82:c6:27:56:f7:39:06:31:ea:
         6f:38:65:e4:71:15:53:db:b6:36:43:19:d7:3b:67:bf:21:d5:
         0a:1d:dc:b1:23:54:cd:37:eb:82:5a:c3:ad:9f:24:df:31:2f:
         1a:d8:ca:40:01:f1:e2:14:ce:a9:bc:71:39:a7:ee:11:a0:a8:
         31:1a:eb:73:53:44:5a:17:9e:dc:3c:ce:73:bb:21:0b:64:3f:
         b2:60:2b:41:f6:fb:81:cb:0c:62:53:97:5f:a2:9c:0d:69:63:
         44:c6:b6:da:81:6a:a5:7a:df:be:4b:6c:95:45:28:ea:50:e6:
         df:2f:6a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:28 2025 by rpki-client