Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130332e302f32342d3234203d3e20323639373939.roa
File:                     34352e3233332e3130332e302f32342d3234203d3e20323639373939.roa (raw, json)
Hash identifier:          Oz6q48LWZ0dENmB+q1O/TTNinOkcQlFoOi/v45Cbgas=
Subject key identifier:   13:AD:45:93:D2:92:77:AF:E8:42:A3:32:B7:FB:23:9D:A4:B2:C7:FF
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       6EA5CE91DA486F1EB1ECD75BCB0CEBF54E2A8471
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130332e302f32342d3234203d3e20323639373939.roa
Signing time:             Tue 04 Feb 2025 18:01:07 +0000
ROA not before:           Tue 04 Feb 2025 17:56:07 +0000
ROA not after:            Tue 03 Feb 2026 18:01:07 +0000
asID:                     269799
IP address blocks:        45.233.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 20:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a5:ce:91:da:48:6f:1e:b1:ec:d7:5b:cb:0c:eb:f5:4e:2a:84:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Feb  4 17:56:07 2025 GMT
            Not After : Feb  3 18:01:07 2026 GMT
        Subject: CN=13AD4593D29277AFE842A332B7FB239DA4B2C7FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d0:58:a6:32:37:e6:57:f2:8e:a1:c5:3d:af:
                    60:2c:7e:b8:00:11:ae:41:06:36:1b:25:31:ad:a1:
                    17:69:cc:bb:24:d5:ac:18:b4:40:4f:6a:72:61:23:
                    f0:b3:39:bf:50:f9:30:ee:24:d2:8e:27:28:f1:63:
                    2b:2b:79:b9:82:99:d1:53:9b:2a:80:84:12:76:b5:
                    f0:09:21:05:03:04:20:80:05:f0:02:27:cf:dc:03:
                    4f:62:c1:3b:ee:a8:59:ed:c5:a2:75:54:16:14:c3:
                    3f:53:1d:2f:b2:6e:56:fd:81:c2:7e:ee:83:21:f2:
                    56:87:01:fe:16:72:79:68:4d:0f:f9:ba:70:42:28:
                    a9:1f:27:d2:96:18:83:bb:1c:b4:68:8c:71:da:ab:
                    32:7b:88:2e:ad:e4:e4:fa:7f:2d:ef:ea:6c:9c:d8:
                    71:b0:2f:24:d2:0b:aa:26:f6:1a:b0:63:77:04:bc:
                    6c:b9:bd:bd:1f:8a:78:14:f0:d1:e9:a8:ba:3c:0f:
                    f5:cc:6d:f6:06:e6:d0:4f:6d:70:38:2c:0d:21:0a:
                    7a:a4:41:c7:bc:37:38:7a:03:6e:11:af:1e:a6:ad:
                    a0:e2:0e:59:c1:ad:9d:7a:4c:e6:88:22:b0:a9:bc:
                    e4:b1:79:49:7d:d0:f3:76:58:be:d6:84:f9:4e:57:
                    7e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AD:45:93:D2:92:77:AF:E8:42:A3:32:B7:FB:23:9D:A4:B2:C7:FF
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130332e302f32342d3234203d3e20323639373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:78:81:fc:81:cb:57:94:8c:a8:e8:61:2c:8f:7d:b3:8a:82:
         8e:22:47:d5:71:44:22:86:9e:3e:12:df:94:05:f0:7a:a8:49:
         5e:d8:1f:7c:49:e4:f4:a8:cc:53:b2:c9:de:ef:6e:e9:01:a7:
         3b:af:9c:13:0e:28:3c:5c:da:8e:ba:f6:df:fd:59:f4:c7:29:
         60:f6:0f:f2:2b:d1:70:36:55:e3:88:71:4d:ce:72:1c:76:e1:
         75:8c:ce:0b:8b:fb:37:74:28:90:4e:8c:cb:03:7c:3e:a1:ed:
         91:bb:81:7d:a4:c7:7c:67:69:e7:ec:8f:5e:09:cd:4f:01:96:
         7d:3f:78:21:16:37:c0:27:73:09:b5:b3:fb:ad:a7:f6:f9:4f:
         ca:71:7b:4b:0f:57:e0:d4:2e:55:9a:ed:4e:83:84:65:97:d6:
         e0:73:38:ef:86:4a:3e:e8:f7:69:ce:41:ce:6d:31:8a:ea:a1:
         03:9c:f3:75:c5:81:b6:49:4f:56:2f:ce:f0:bd:a0:10:a5:78:
         b6:01:40:2b:b3:5b:1c:e0:38:90:7b:f5:63:22:3b:4d:73:81:
         6d:4c:ab:79:e7:b8:f1:91:f0:87:20:09:ac:aa:de:de:cf:7e:
         13:6a:1b:7c:d2:ac:94:64:04:cf:2b:df:25:bb:ff:bd:c8:b7:
         34:9e:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:57:16 2025 by rpki-client