Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130322e302f32342d3237203d3e20323636373930.roa
File:                     34352e3233332e3130322e302f32342d3237203d3e20323636373930.roa (raw, json)
Hash identifier:          iFWFQYicoBdhKkCXUOpzEAm7aTrvlKXGdF/AhETUAds=
Subject key identifier:   D7:8A:00:9E:24:97:0B:79:50:4D:63:5F:09:9E:5B:EE:89:18:54:63
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       6D718D7E12DEA6398319166C7501568D81EEE226
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130322e302f32342d3237203d3e20323636373930.roa
Signing time:             Tue 04 Feb 2025 18:01:05 +0000
ROA not before:           Tue 04 Feb 2025 17:56:05 +0000
ROA not after:            Tue 03 Feb 2026 18:01:05 +0000
asID:                     266790
IP address blocks:        45.233.102.0/24 maxlen: 27
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:71:8d:7e:12:de:a6:39:83:19:16:6c:75:01:56:8d:81:ee:e2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Feb  4 17:56:05 2025 GMT
            Not After : Feb  3 18:01:05 2026 GMT
        Subject: CN=D78A009E24970B79504D635F099E5BEE89185463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0c:e6:07:f7:76:50:d0:c5:51:e1:43:c9:13:
                    af:44:9f:ee:80:87:c6:36:dd:ac:ae:21:3a:d0:6d:
                    63:89:d4:19:92:55:88:7c:c5:fa:e1:ce:73:f9:f3:
                    09:ca:54:6f:0b:53:a0:82:f2:34:05:62:1f:15:bf:
                    3a:26:fe:85:8c:ad:6c:a8:e0:ea:4d:71:fb:ec:21:
                    d5:17:5b:f2:1c:47:bb:ca:8d:0b:54:85:db:38:7b:
                    d2:96:fa:53:12:3b:a2:71:74:a1:8c:dd:a4:42:4e:
                    ae:d2:a1:ec:14:ff:f3:3d:65:53:b0:68:51:7f:6b:
                    f7:bb:71:2f:28:ab:f5:1e:57:b7:7d:fc:05:be:86:
                    40:79:21:f1:53:83:17:3f:f8:85:26:64:a0:cb:17:
                    9b:de:55:94:59:6f:5f:08:e4:f2:aa:09:19:23:84:
                    fb:84:77:67:18:2a:38:74:ee:20:49:bf:81:a3:37:
                    ca:24:cb:12:1b:85:12:20:9a:c5:88:e1:1b:9c:1a:
                    e7:b6:00:2b:9b:f5:f3:95:63:ae:28:25:ff:e2:04:
                    3b:4a:0a:03:24:c8:e5:2b:35:d3:a3:c0:4c:d2:ac:
                    45:32:a9:63:e5:53:0c:33:75:a6:5f:5c:67:9e:da:
                    3f:99:ce:38:7d:56:f1:db:69:fa:0f:6a:78:e2:b2:
                    78:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8A:00:9E:24:97:0B:79:50:4D:63:5F:09:9E:5B:EE:89:18:54:63
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130322e302f32342d3237203d3e20323636373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:e9:97:b6:84:98:ed:c4:f9:75:f0:a4:41:ba:0e:5d:83:66:
         7b:09:fe:69:27:3c:42:2c:f1:58:ed:02:e0:e1:8d:f2:57:1b:
         4a:0a:f4:6a:df:5e:6b:fe:3d:c3:2c:cd:63:f5:40:d9:a9:67:
         ce:b0:35:1c:0a:2c:22:cd:e2:02:5a:e5:92:cc:40:1c:ec:9a:
         1b:16:8e:0b:95:52:8f:41:2a:5e:9a:ac:8a:06:d9:4a:9b:af:
         26:60:30:e4:af:08:65:8f:59:ce:2c:e7:90:10:63:aa:03:71:
         2b:af:21:34:c2:f7:88:76:13:52:68:dd:9c:99:37:e8:e5:5e:
         af:e9:04:58:63:d2:1a:da:59:fb:78:fa:56:40:7c:cb:e9:d7:
         6c:06:cd:0f:25:9f:73:9e:88:77:79:5f:9a:69:58:91:04:e5:
         bc:9b:9e:cb:fc:07:30:d2:32:63:6f:45:60:a5:14:7b:9e:7f:
         a3:86:65:5c:41:fa:72:8f:1e:ce:b4:48:26:4a:29:a1:4c:d0:
         8d:1d:f0:03:c3:30:44:70:e2:c3:cd:b5:46:29:6a:16:75:bd:
         91:05:6e:22:80:a4:8e:30:74:19:64:49:00:d6:fd:55:67:0b:
         23:e5:a8:31:fc:55:33:a0:42:d5:f7:b6:e0:e8:39:6f:71:a2:
         62:13:b3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:50:24 2025 by rpki-client