Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e20323635373334.roa
File:                     34352e36352e3230332e302f32342d3234203d3e20323635373334.roa (raw, json)
Hash identifier:          QsNeNVn3VQY9Ij5bcc2G7aFsY6vMppiu21CWKcjGlYY=
Subject key identifier:   0B:FA:6F:D2:4A:3A:43:60:1D:DC:B0:5E:7B:ED:64:74:EB:57:57:42
Certificate issuer:       /CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
Certificate serial:       10DE57923BFFF5416A472247FF7E59CA86A69804
Authority key identifier: 12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e20323635373334.roa
Signing time:             Tue 04 Feb 2025 18:38:03 +0000
ROA not before:           Tue 04 Feb 2025 18:33:03 +0000
ROA not after:            Tue 03 Feb 2026 18:38:03 +0000
asID:                     265734
IP address blocks:        45.65.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 20:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:de:57:92:3b:ff:f5:41:6a:47:22:47:ff:7e:59:ca:86:a6:98:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
        Validity
            Not Before: Feb  4 18:33:03 2025 GMT
            Not After : Feb  3 18:38:03 2026 GMT
        Subject: CN=0BFA6FD24A3A43601DDCB05E7BED6474EB575742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d0:ff:49:ff:09:aa:9f:5f:bc:c2:15:5c:d8:
                    66:86:1f:0b:43:d6:d3:a5:98:8b:12:31:8b:fb:b3:
                    b4:6b:1a:fb:ac:76:3b:11:d4:86:21:64:43:aa:e8:
                    6a:4b:36:e9:ed:2b:96:30:53:ee:7a:62:c4:af:a0:
                    fc:17:c0:c7:a3:35:60:80:c0:5f:55:4f:b6:78:30:
                    4f:f0:40:a8:a9:e6:db:23:28:4f:4d:f8:93:92:0c:
                    88:81:4a:ae:f4:b7:29:59:16:f2:f3:f3:f9:4a:da:
                    a0:26:94:b4:71:ba:e8:22:47:8b:ef:e5:07:30:3b:
                    ad:3f:2b:51:8f:13:47:57:bb:b6:d6:43:ed:c2:e9:
                    19:e2:4a:b3:c3:00:4d:d4:19:e1:b0:e7:eb:ef:2d:
                    4e:8e:60:be:a3:68:0a:d8:c6:38:35:14:60:5a:4e:
                    7c:cc:7c:65:fc:8b:b3:a1:a2:80:ff:82:f0:24:82:
                    92:0f:24:33:8d:f7:86:d9:93:28:b4:17:f2:85:51:
                    8b:5d:d9:08:d0:40:ee:ee:8c:c4:d3:9b:5a:4b:d3:
                    f9:6b:47:a3:f6:c2:d7:62:b4:13:fe:f3:f4:80:39:
                    37:66:cf:d0:a9:0a:6f:4d:10:52:af:78:fb:b4:01:
                    45:0e:fb:af:b1:63:42:f6:f4:6b:2f:d4:99:c2:c3:
                    f9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FA:6F:D2:4A:3A:43:60:1D:DC:B0:5E:7B:ED:64:74:EB:57:57:42
            X509v3 Authority Key Identifier:
                keyid:12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e20323635373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:bc:79:a0:ef:14:d9:2c:99:df:74:c4:f0:9c:ac:dd:7c:ac:
         0b:5b:29:52:94:b4:86:eb:b5:0c:9a:e7:c1:3d:2d:6b:22:4a:
         14:df:53:ed:71:9d:7d:d1:8c:89:2a:3f:1f:32:0b:0e:15:d2:
         50:20:fc:5e:0d:39:b9:49:1c:26:81:85:86:4c:6f:87:14:70:
         cd:fa:12:61:1d:bc:38:51:b0:53:c9:eb:3d:ff:22:93:87:33:
         60:16:74:c8:6b:65:67:35:d9:53:e8:80:f8:33:8e:08:22:28:
         be:92:15:17:ff:27:d7:6a:3b:81:77:e7:0f:11:8f:37:18:a8:
         63:54:ce:0c:4c:dc:93:49:74:61:2d:9a:28:9a:dc:85:89:67:
         d1:44:bd:d2:78:3a:ba:17:1b:92:a0:59:9e:41:96:ce:00:5b:
         65:69:83:df:0e:18:28:d2:d5:47:91:ef:8c:8a:2f:b0:5d:e1:
         f0:9f:3c:01:99:42:06:2e:de:8f:a6:3b:64:55:a8:31:59:15:
         df:f9:e4:04:81:2d:e2:f7:25:71:d9:68:27:71:ef:44:7f:62:
         ef:8d:7a:93:c0:2f:09:32:49:b5:6f:a3:cf:ed:e6:ba:ff:14:
         e1:c2:e1:b0:43:d2:6b:ee:7b:d2:5f:1f:60:e9:32:a7:05:1b:
         b4:df:6c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:01:56 2025 by rpki-client