Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/34352e3137322e3134332e302f32342d3234203d3e20323634383030.roa
File:                     34352e3137322e3134332e302f32342d3234203d3e20323634383030.roa (raw, json)
Hash identifier:          +7CYaRgHClMlGumQO6A7nf5Pp5OF9l00C8Zm/IwsIGc=
Subject key identifier:   9E:A4:8D:D3:F0:1A:3E:77:D3:1C:12:40:4F:E8:86:B1:93:83:AB:A2
Certificate issuer:       /CN=A452CC0A52E6766C48F9C7DF2D4337A911BA64D1
Certificate serial:       228DF52E2046EFDD766EF5417F91749E7866B487
Authority key identifier: A4:52:CC:0A:52:E6:76:6C:48:F9:C7:DF:2D:43:37:A9:11:BA:64:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/34352e3137322e3134332e302f32342d3234203d3e20323634383030.roa
Signing time:             Tue 04 Feb 2025 18:29:01 +0000
ROA not before:           Tue 04 Feb 2025 18:24:01 +0000
ROA not after:            Tue 03 Feb 2026 18:29:01 +0000
asID:                     264800
IP address blocks:        45.172.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8d:f5:2e:20:46:ef:dd:76:6e:f5:41:7f:91:74:9e:78:66:b4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A452CC0A52E6766C48F9C7DF2D4337A911BA64D1
        Validity
            Not Before: Feb  4 18:24:01 2025 GMT
            Not After : Feb  3 18:29:01 2026 GMT
        Subject: CN=9EA48DD3F01A3E77D31C12404FE886B19383ABA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:38:d4:f2:3f:ba:b2:7f:ec:ca:97:02:2e:f6:
                    63:01:6b:30:2a:93:17:3f:3e:5e:ec:fc:4f:0e:8f:
                    92:d3:e8:ff:60:87:64:a0:ae:29:58:6f:5a:b2:65:
                    4e:15:69:8d:63:a9:0e:14:5a:69:94:4c:83:5d:af:
                    5b:8c:0c:09:14:74:6e:c1:e7:d2:13:db:79:f3:17:
                    c5:d4:08:1e:a8:30:8b:5f:67:18:84:c5:23:dd:2f:
                    d7:3a:31:49:e8:05:5a:5d:69:9d:0c:6a:6a:6c:3b:
                    33:e8:02:84:c2:83:f6:d7:0d:e2:d3:cf:c3:47:b6:
                    95:be:fa:56:25:0a:c3:fc:dd:30:d7:c8:4e:ad:4e:
                    d3:ee:66:2e:7f:84:6a:08:5a:cf:00:d2:05:f6:7b:
                    99:76:a8:df:6e:47:2c:f6:7c:4f:1a:57:34:93:8f:
                    41:92:c3:db:10:44:81:a0:97:e9:31:75:18:d5:ad:
                    bd:2c:46:68:ce:cb:70:c1:7a:df:e6:4b:08:de:2a:
                    df:eb:10:e7:7b:38:13:f0:13:5c:17:67:30:8c:74:
                    39:54:a2:fc:4e:a9:f3:c4:6f:be:5e:91:c9:88:a2:
                    ac:a3:0d:de:c7:84:a0:f3:e7:0a:66:58:80:ae:de:
                    44:9f:a7:94:5c:d8:57:94:2d:c0:3d:c0:a6:ed:42:
                    78:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A4:8D:D3:F0:1A:3E:77:D3:1C:12:40:4F:E8:86:B1:93:83:AB:A2
            X509v3 Authority Key Identifier:
                keyid:A4:52:CC:0A:52:E6:76:6C:48:F9:C7:DF:2D:43:37:A9:11:BA:64:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/34352e3137322e3134332e302f32342d3234203d3e20323634383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:1d:90:9d:ab:36:d1:2f:b0:cf:13:55:ef:c1:c4:f2:55:23:
         16:d4:50:28:7d:cc:8c:00:cc:c9:34:26:4a:46:2e:09:d1:84:
         ef:c8:8b:c8:ef:a5:84:28:55:85:a4:a3:e9:fa:2d:bc:5e:4e:
         90:40:e7:ca:f3:1c:10:d4:e6:1b:50:c0:99:f7:34:ab:79:5f:
         74:16:2a:8e:4b:0d:23:0b:69:8c:ac:a9:66:a5:fd:ff:8a:a4:
         60:56:89:95:22:66:13:b7:f8:57:0e:5f:ca:64:92:8d:60:38:
         f8:32:6a:3b:5f:61:b3:6a:83:b0:26:b0:1d:79:dd:68:45:03:
         fc:0d:bf:bc:c9:59:c6:66:c7:02:5d:72:46:de:0c:11:0b:c3:
         ef:67:d8:60:cb:bb:45:46:e1:0d:a4:b2:71:6b:d6:f6:46:7b:
         59:39:07:4e:60:95:fb:6e:d9:0c:cf:70:d7:38:a7:85:d9:37:
         1a:97:ea:26:d8:f4:21:7e:ea:23:53:24:b3:e7:01:bf:f4:76:
         43:64:e4:d9:13:9f:b5:c8:c2:7b:b6:ab:55:72:c1:dd:ba:bc:
         ef:c5:e4:f9:de:47:41:b9:da:1b:a3:42:7a:23:22:ab:14:61:
         bd:b4:cb:c4:c4:bc:6c:4c:fe:ff:3e:24:c6:fe:40:63:0f:8f:
         d9:e3:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:23:17 2025 by rpki-client