Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e203237393437.roa
File:                     34352e36352e3230332e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          1HvMsT6XmdgDbJoaREB0cRPZzPmPgfvBePB8YLM92qU=
Subject key identifier:   BD:14:BB:6B:B6:F3:89:7C:89:54:40:9B:9F:95:F5:DF:2E:4D:F9:B3
Certificate issuer:       /CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
Certificate serial:       7E7731506DF47F27ECF10C6C482E2941F329B384
Authority key identifier: 12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:38:01 +0000
ROA not before:           Tue 04 Feb 2025 18:33:01 +0000
ROA not after:            Tue 03 Feb 2026 18:38:01 +0000
asID:                     27947
IP address blocks:        45.65.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 13:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:77:31:50:6d:f4:7f:27:ec:f1:0c:6c:48:2e:29:41:f3:29:b3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
        Validity
            Not Before: Feb  4 18:33:01 2025 GMT
            Not After : Feb  3 18:38:01 2026 GMT
        Subject: CN=BD14BB6BB6F3897C8954409B9F95F5DF2E4DF9B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:72:ba:c8:ee:8b:7d:1a:dc:87:8c:79:2c:
                    19:b9:33:1e:9b:4d:59:50:bf:a9:e6:e5:dd:0f:9b:
                    00:61:56:f2:80:6c:72:cf:a1:99:c4:33:85:b9:ce:
                    fd:f8:46:1a:95:51:4e:26:82:4f:cf:07:58:3b:5b:
                    ca:81:d7:4a:0e:d0:03:97:0f:2d:e0:d5:20:5c:1f:
                    b9:21:19:f0:93:8e:47:29:d5:7d:c9:60:c9:44:9a:
                    42:2e:25:b2:5b:b8:04:4d:ff:f2:02:9b:ca:29:d8:
                    2d:4d:a1:f7:bd:16:6d:d1:a3:04:77:2b:d3:9b:44:
                    46:de:2b:dd:e6:a2:41:fc:18:e7:08:2e:14:fe:85:
                    8e:78:d0:5e:b9:60:af:df:b3:a4:a7:5a:11:1b:37:
                    b8:ad:52:70:20:43:df:12:eb:66:6e:d3:df:87:df:
                    f1:2c:2b:69:d9:d2:fc:30:55:d9:fd:b8:fc:1e:16:
                    f7:68:78:d8:f5:2e:3b:1f:76:2b:1d:38:cd:64:03:
                    15:45:4d:e9:e9:41:0c:76:3d:a2:06:de:97:67:1c:
                    1b:db:b3:96:97:6b:20:39:3e:34:4e:bb:50:7c:81:
                    1b:21:e2:bd:69:02:be:d9:13:b5:2f:92:aa:7a:91:
                    6d:2d:b9:cf:26:27:22:85:7d:58:e7:a1:20:1f:8f:
                    f0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:14:BB:6B:B6:F3:89:7C:89:54:40:9B:9F:95:F5:DF:2E:4D:F9:B3
            X509v3 Authority Key Identifier:
                keyid:12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:b9:5e:b7:b7:2b:3b:4b:5b:9d:ee:d4:fd:16:5f:bb:cd:75:
         1b:1b:c4:f4:1e:ed:7f:ce:e6:ee:8c:9f:b5:23:81:6b:29:ae:
         de:17:6e:67:e0:db:1e:f9:7c:84:be:dc:73:c6:48:c6:01:ba:
         0d:c6:73:a2:47:d9:45:e4:b9:b1:f0:a2:8a:16:9c:e4:47:fb:
         43:38:30:ff:0e:ef:f4:f8:f5:d3:1c:70:f4:86:f5:58:86:06:
         43:09:fa:cb:4a:0c:7e:bd:3f:72:2d:31:53:05:da:10:4d:e5:
         ee:d1:c3:04:dd:fe:4f:a8:78:1d:8b:64:2a:62:72:54:15:d1:
         be:3f:68:ec:6e:50:2b:3d:02:16:45:a0:46:68:52:59:52:01:
         f9:b7:71:3c:2f:32:29:dd:a3:55:1e:19:70:63:82:aa:40:ea:
         e7:63:23:49:86:38:41:eb:7d:64:84:91:9d:b7:bb:29:da:5b:
         1e:72:cf:77:53:64:99:b0:12:d5:fe:aa:38:ab:aa:5b:eb:93:
         03:fe:4c:a4:00:40:8c:01:7c:81:49:10:98:06:5a:e8:4a:5f:
         38:f3:30:10:06:eb:68:c0:e3:f3:ab:16:d0:e5:7a:21:ad:87:
         ed:84:47:b2:bd:21:94:0a:7b:50:fa:1d:0a:90:64:69:fd:e2:
         b5:46:48:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:55 2025 by rpki-client