Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230392e302f32342d3234203d3e20323635373239.roa
File:                     34352e372e3230392e302f32342d3234203d3e20323635373239.roa (raw, json)
Hash identifier:          d7Afdxd2cErw+La4f1hxJmbYk/nucw4ZwKh8oUr8Ro0=
Subject key identifier:   C5:A5:49:BE:A1:5C:DC:DB:42:BE:12:FF:D9:7D:11:29:4E:B1:1A:27
Certificate issuer:       /CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
Certificate serial:       51C7750028A660570A78503DB2D73161233D277B
Authority key identifier: 3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230392e302f32342d3234203d3e20323635373239.roa
Signing time:             Tue 04 Feb 2025 19:59:42 +0000
ROA not before:           Tue 04 Feb 2025 19:54:42 +0000
ROA not after:            Tue 03 Feb 2026 19:59:42 +0000
asID:                     265729
IP address blocks:        45.7.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c7:75:00:28:a6:60:57:0a:78:50:3d:b2:d7:31:61:23:3d:27:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
        Validity
            Not Before: Feb  4 19:54:42 2025 GMT
            Not After : Feb  3 19:59:42 2026 GMT
        Subject: CN=C5A549BEA15CDCDB42BE12FFD97D11294EB11A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:b2:51:cc:09:1a:1f:6c:a3:da:8a:48:e4:
                    2c:a2:28:25:48:d2:6d:06:a4:9f:2a:02:89:fa:2d:
                    69:b3:16:93:6f:f4:96:0f:da:85:b1:5a:49:d7:1c:
                    ad:34:55:80:7f:a5:50:67:55:09:ce:bd:ce:f7:3d:
                    80:55:0a:38:74:61:72:4d:38:6c:50:ab:1a:02:81:
                    82:8b:c7:16:28:97:b0:97:92:44:c9:83:ea:66:29:
                    32:a4:72:f2:5a:4b:27:ec:94:30:08:a0:28:7e:69:
                    2e:42:b0:85:91:64:e4:b0:c7:a8:91:49:9d:68:0d:
                    90:d3:aa:7b:4f:f8:1e:9d:c8:ce:4b:f8:39:ad:7d:
                    c5:d4:65:4b:85:a4:47:b9:09:a4:16:f3:e3:5f:34:
                    36:39:1e:2c:12:db:89:87:68:96:7a:49:3a:63:30:
                    0e:7f:b0:96:a8:d7:f6:d4:d5:40:19:59:9b:40:e1:
                    3c:b6:14:19:a1:04:2b:92:f0:d5:ee:c4:29:c9:8c:
                    00:4a:6b:57:8a:bd:44:75:9f:c4:ea:be:d3:d3:7b:
                    30:40:72:03:8f:84:e0:61:0e:83:c0:8d:3e:de:92:
                    75:a2:e9:f1:1f:bf:10:1d:0f:88:31:d5:3a:86:e9:
                    06:61:e9:51:15:2c:7c:87:c9:d1:ae:ca:01:ab:85:
                    57:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A5:49:BE:A1:5C:DC:DB:42:BE:12:FF:D9:7D:11:29:4E:B1:1A:27
            X509v3 Authority Key Identifier:
                keyid:3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230392e302f32342d3234203d3e20323635373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:81:ba:c4:24:7a:77:dc:f8:17:ee:73:a0:66:db:e6:29:e3:
         6b:d6:35:2c:7f:f1:74:73:a1:dc:c3:05:b8:0e:ff:03:5b:b9:
         eb:e4:e5:78:f8:18:f8:14:b3:2d:90:33:e7:43:36:82:c4:ca:
         3e:2a:05:01:c4:37:32:2f:a2:e8:1e:04:13:fb:ac:f5:57:89:
         3d:b8:07:5b:cf:1d:74:f8:ef:21:58:04:97:5f:0a:28:4d:6f:
         a6:a1:2a:e3:9a:4a:09:6d:88:65:27:a8:2a:76:d3:cd:2e:47:
         5a:3e:e1:93:d5:fb:7d:20:ab:66:84:76:22:4c:93:4f:a9:0b:
         b2:ff:d0:32:16:be:57:b4:87:0d:82:05:c5:92:62:c3:a5:b8:
         7a:b9:c8:ba:21:2b:bd:8f:2e:a0:19:84:31:18:8b:b2:69:9c:
         a7:ae:21:4c:d3:63:1e:78:24:a2:6c:71:6b:80:31:ee:b9:11:
         76:be:68:14:81:c7:07:32:70:38:bf:be:3d:9d:e6:f4:97:b3:
         b6:20:59:81:01:06:2c:e9:8c:60:62:ae:cf:71:a5:7a:24:48:
         f9:62:13:7a:8e:83:6c:11:71:08:4a:cc:c9:84:fb:4f:e9:7d:
         5b:1e:6c:ec:ef:b3:f3:ca:86:70:2f:52:81:f6:4d:3b:bc:ed:
         57:84:dd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:36:38 2025 by rpki-client