Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e20323033.roa
File:                     34352e36352e3230332e302f32342d3234203d3e20323033.roa (raw, json)
Hash identifier:          a8Qjs2jtwiRUb/g/EOAsCWKUyA1XLv+2r+Gj03e4TaQ=
Subject key identifier:   A3:48:D6:89:1C:31:CE:54:35:4F:40:14:2A:6C:82:C2:DD:BC:DF:AA
Certificate issuer:       /CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
Certificate serial:       4D8059DC1AF63A7EBE0A27DDEDAE88CBAD1D21F0
Authority key identifier: 12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e20323033.roa
Signing time:             Tue 04 Feb 2025 18:38:03 +0000
ROA not before:           Tue 04 Feb 2025 18:33:03 +0000
ROA not after:            Tue 03 Feb 2026 18:38:03 +0000
asID:                     203
IP address blocks:        45.65.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 20:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:80:59:dc:1a:f6:3a:7e:be:0a:27:dd:ed:ae:88:cb:ad:1d:21:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
        Validity
            Not Before: Feb  4 18:33:03 2025 GMT
            Not After : Feb  3 18:38:03 2026 GMT
        Subject: CN=A348D6891C31CE54354F40142A6C82C2DDBCDFAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:14:78:51:95:2a:6a:88:49:dc:e2:f0:24:
                    ba:e8:a6:d3:dd:13:f5:16:a1:89:c6:05:fe:87:e4:
                    1f:c2:ca:eb:33:46:60:aa:3f:c5:be:91:bb:29:cf:
                    fd:d2:14:81:fa:82:90:7e:a8:0d:10:3e:99:09:a7:
                    a1:32:6a:b7:1e:9c:f6:da:4d:a9:fb:92:8c:23:ee:
                    78:ba:71:65:63:81:8d:86:fa:17:96:1e:04:bb:8e:
                    b8:87:32:79:7a:32:79:b2:de:49:88:3a:8f:f7:6e:
                    8d:ba:d4:09:22:7f:28:78:cd:cc:c7:d7:9b:9b:e9:
                    f0:d8:31:e7:96:9b:79:5d:24:79:2f:7f:ef:2e:f8:
                    c6:a0:6e:61:7a:2e:b3:43:5f:8e:74:08:fc:33:11:
                    99:0b:00:c6:cd:3b:ca:e8:24:54:dd:0a:51:bf:d5:
                    ad:d6:18:0d:47:35:0a:38:f7:3b:9f:88:29:f7:6a:
                    6b:fc:df:05:a6:8f:52:0f:a7:7b:92:2d:a3:bb:08:
                    b6:20:5e:17:73:0a:89:ee:52:74:16:52:9a:b4:95:
                    b6:da:db:0b:f2:8e:77:fa:d4:72:86:96:be:ff:98:
                    2b:c7:d0:62:ac:11:c9:2a:d0:37:5a:89:6c:d1:7e:
                    f1:ae:32:ff:bd:c9:53:67:84:63:ef:4f:9e:49:5c:
                    2d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:48:D6:89:1C:31:CE:54:35:4F:40:14:2A:6C:82:C2:DD:BC:DF:AA
            X509v3 Authority Key Identifier:
                keyid:12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:65:4c:c4:9f:22:02:4c:d4:10:a6:51:ee:76:a2:2b:45:ff:
         b5:55:f8:53:1c:2a:33:c6:78:c9:54:9f:79:26:5f:35:0b:d0:
         a9:cf:f7:b7:e3:ac:f7:78:6a:54:7d:0f:85:57:a8:ec:df:fd:
         dd:2c:45:0c:c8:14:c4:73:d5:d8:03:84:c2:c9:f0:3d:b1:30:
         5d:99:5f:2e:e0:93:11:ec:3d:fa:f7:03:66:08:d7:fb:46:e8:
         ad:1d:fe:ff:d4:1f:0c:0e:79:f8:f7:3d:c9:68:87:4e:2c:c5:
         8d:da:fc:a0:5d:f1:6d:ff:e4:88:24:1d:d6:fe:c0:01:63:52:
         73:dd:f4:8d:7b:36:5b:e6:33:db:2d:20:7b:67:68:fc:b3:91:
         d0:6a:23:81:89:b2:c5:a9:be:c7:ca:36:3a:76:c2:eb:91:24:
         88:7d:77:4a:29:64:97:90:d1:8a:9c:b2:96:4d:56:0f:2c:b7:
         76:da:2d:b0:88:a0:8b:b6:55:94:3f:05:cb:29:39:2d:58:b3:
         be:1d:ce:8c:69:11:00:2f:2d:5c:ea:94:f6:af:3c:b9:20:b8:
         79:d1:62:2c:17:e9:ce:60:d0:d0:4a:b6:3d:e4:ba:f2:a7:9b:
         76:cc:c6:ea:0e:62:09:34:55:69:d2:b4:eb:21:77:bc:df:7e:
         7a:32:d4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:00:13 2025 by rpki-client