Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e20323032.roa
File:                     34352e36352e3230332e302f32342d3234203d3e20323032.roa (raw, json)
Hash identifier:          wIMhj2P0aVHJdMG+Z8WHVGdDHbc/Z94nmmxwCnFFfvA=
Subject key identifier:   42:F7:B2:EC:DA:A5:D5:99:65:23:7C:7B:B2:97:22:43:90:E0:F3:DB
Certificate issuer:       /CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
Certificate serial:       0DF00F0ACD24ADBC6571777A1D05B9FD6ECA369D
Authority key identifier: 12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e20323032.roa
Signing time:             Tue 04 Feb 2025 18:38:02 +0000
ROA not before:           Tue 04 Feb 2025 18:33:02 +0000
ROA not after:            Tue 03 Feb 2026 18:38:02 +0000
asID:                     202
IP address blocks:        45.65.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f0:0f:0a:cd:24:ad:bc:65:71:77:7a:1d:05:b9:fd:6e:ca:36:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
        Validity
            Not Before: Feb  4 18:33:02 2025 GMT
            Not After : Feb  3 18:38:02 2026 GMT
        Subject: CN=42F7B2ECDAA5D59965237C7BB297224390E0F3DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bd:28:23:7b:23:d8:69:49:b2:40:93:e1:5f:
                    d5:65:d7:05:9c:07:08:ed:ed:56:da:33:b0:09:50:
                    2d:3c:ea:e4:d5:d6:aa:27:8c:06:6c:67:36:70:9c:
                    c5:9f:c8:49:f2:b5:56:0d:69:28:22:92:2d:88:ff:
                    da:40:20:57:d0:b6:04:0a:1f:26:25:f6:2d:b0:cb:
                    f1:90:8e:fd:00:74:f3:14:e4:bc:1e:89:e0:aa:bf:
                    b3:f7:21:dd:3d:04:f6:62:f5:a9:15:d2:f3:e1:8f:
                    15:08:90:b4:aa:a3:a1:1c:72:54:bd:9f:f9:25:fa:
                    12:0b:34:e9:59:e0:97:40:3d:8b:52:98:0a:99:45:
                    7d:9e:4a:3a:34:df:cd:01:d2:6b:e0:55:47:f3:87:
                    22:8a:6d:de:7e:88:e0:22:74:31:d9:95:0b:1f:6f:
                    8f:a9:39:fc:cb:e2:9f:5a:b1:bc:ec:a8:3c:4a:d6:
                    66:de:26:70:e4:42:9b:05:07:73:9e:b2:df:15:1c:
                    b3:33:94:90:61:55:57:d1:c9:28:81:48:11:96:1a:
                    ac:f6:0e:9f:33:44:5d:fc:6d:10:e7:3f:f4:8f:80:
                    5b:c2:02:0a:a0:85:62:71:9e:06:92:62:e3:01:7f:
                    fa:95:bf:0a:cc:a7:57:27:e5:3a:d3:2f:f7:eb:8e:
                    0d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F7:B2:EC:DA:A5:D5:99:65:23:7C:7B:B2:97:22:43:90:E0:F3:DB
            X509v3 Authority Key Identifier:
                keyid:12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:c2:db:51:5b:15:7c:58:9d:a0:bb:03:dd:a8:68:d5:fa:fe:
         5f:7c:99:80:1b:66:a8:14:5b:80:b5:ec:e8:40:85:77:85:16:
         60:aa:81:fe:61:2c:92:14:3e:61:56:a5:10:ff:d4:27:f5:57:
         8e:0c:81:d5:42:c3:48:20:38:6a:e9:ed:d6:b4:ce:2a:66:b7:
         80:58:96:e0:e2:b3:a9:5e:a1:6d:8a:a9:6b:65:18:fc:72:77:
         be:83:7b:d0:39:2b:c9:b4:99:7a:f9:57:d7:15:77:5c:57:f4:
         f8:42:1a:e3:96:ad:de:c5:3a:80:04:97:56:75:de:7f:ad:32:
         b4:28:e4:fc:c4:d3:93:94:3f:10:b3:5e:ce:dd:40:a2:d9:1b:
         b0:4e:57:84:a6:8e:50:77:81:90:8f:4e:ce:32:00:45:b4:13:
         25:80:34:e7:09:18:3f:65:a8:78:cf:c2:a7:18:40:7b:86:f7:
         ae:e5:38:0b:46:b1:36:26:8f:28:03:04:e3:2c:46:65:3d:bb:
         de:24:8b:9a:a4:75:d4:bb:80:52:c8:57:1b:f6:36:b1:c5:2d:
         86:78:3a:c4:41:4f:d7:af:0e:ea:5b:91:b0:02:e1:77:15:67:
         cc:9b:a5:a0:c1:ca:e0:0e:58:da:79:a2:36:d5:ff:95:7b:b5:
         a2:1a:3e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:50 2025 by rpki-client