Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234332e302f32342d3234203d3e20323635363135.roa
File:                     34352e3139302e3234332e302f32342d3234203d3e20323635363135.roa (raw, json)
Hash identifier:          gpWLu6a1NG+nJlb+xCU4JL/ULiR9iM3wdFMcAbgl+eQ=
Subject key identifier:   CC:C6:6D:D5:8D:16:9F:11:66:7C:65:20:52:E5:A1:54:FD:FD:B8:6A
Certificate issuer:       /CN=B51B463646421D5ECF9038E8B33EAF99E6E4D824
Certificate serial:       61DE93802531E1B2617A4A43FB9940A2F852CD4C
Authority key identifier: B5:1B:46:36:46:42:1D:5E:CF:90:38:E8:B3:3E:AF:99:E6:E4:D8:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234332e302f32342d3234203d3e20323635363135.roa
Signing time:             Tue 04 Feb 2025 18:35:36 +0000
ROA not before:           Tue 04 Feb 2025 18:30:36 +0000
ROA not after:            Tue 03 Feb 2026 18:35:36 +0000
asID:                     265615
IP address blocks:        45.190.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:de:93:80:25:31:e1:b2:61:7a:4a:43:fb:99:40:a2:f8:52:cd:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B51B463646421D5ECF9038E8B33EAF99E6E4D824
        Validity
            Not Before: Feb  4 18:30:36 2025 GMT
            Not After : Feb  3 18:35:36 2026 GMT
        Subject: CN=CCC66DD58D169F11667C652052E5A154FDFDB86A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cf:30:4c:39:ca:d1:67:50:bb:a6:b3:11:ed:
                    52:54:88:69:b2:e2:64:51:40:e6:fe:84:dd:4f:5c:
                    01:af:11:57:c7:c2:49:57:75:9d:7e:44:eb:66:86:
                    d9:c1:8d:d8:fb:2f:f8:6a:4f:3e:cc:8f:00:e9:41:
                    f0:30:e7:87:0b:b4:52:0c:68:23:6f:43:03:dd:a5:
                    f2:a4:21:4a:d0:79:35:ad:06:e3:0e:69:29:51:e3:
                    aa:36:61:a3:14:99:73:77:29:38:c1:f8:d3:d9:93:
                    32:16:c5:a1:48:34:6b:d9:ab:9e:47:a0:7c:a6:30:
                    a7:4f:50:19:57:5c:7b:88:11:34:7c:e1:24:08:46:
                    29:78:7a:cd:ef:b6:f8:72:6e:9b:f9:ca:da:83:3e:
                    87:74:01:f4:4a:a2:ad:ff:f2:f7:1d:8a:81:f9:a8:
                    98:9b:d5:0f:f3:13:3d:b7:eb:c5:9a:84:e3:0a:a1:
                    3a:83:7a:fc:5c:eb:f1:f6:3f:97:1d:7a:1d:b3:fe:
                    39:f3:23:2a:1e:02:17:b6:e2:64:e7:59:a5:c0:c9:
                    29:bd:09:80:0c:c8:6f:ee:c9:e9:67:d1:f9:93:b7:
                    15:01:11:16:6a:a0:71:d3:3c:7a:16:f5:84:25:e0:
                    4a:76:28:01:fe:88:3e:e3:d3:ce:bc:4e:6a:15:30:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C6:6D:D5:8D:16:9F:11:66:7C:65:20:52:E5:A1:54:FD:FD:B8:6A
            X509v3 Authority Key Identifier:
                keyid:B5:1B:46:36:46:42:1D:5E:CF:90:38:E8:B3:3E:AF:99:E6:E4:D8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234332e302f32342d3234203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:13:31:90:ae:d4:56:b2:30:30:bb:82:11:41:2e:95:0b:4c:
         dd:48:dc:3f:fd:7f:e5:06:1c:ae:9e:db:3d:b4:13:d7:9e:2d:
         c3:ee:c7:ee:36:4b:01:70:2e:ee:16:3d:64:c1:90:b4:bb:12:
         b4:32:96:e8:53:c2:5e:a1:39:cd:b3:a8:a2:cb:f3:8e:32:98:
         f2:94:36:d9:53:8c:26:d0:ec:80:45:a9:bb:5a:f5:78:3b:17:
         62:4b:15:22:ef:82:49:60:0f:cb:d5:8c:82:e8:f4:c3:41:ca:
         99:ad:76:99:82:be:ed:a6:cb:b1:7f:9b:45:06:6b:49:d5:b9:
         fa:6f:36:a3:c5:31:54:0b:9f:3d:bf:c6:74:bf:8a:6a:dd:c3:
         2d:32:7e:44:5b:ef:89:37:76:d6:ce:67:b5:6d:9b:00:39:9b:
         ed:46:41:13:e2:0b:4b:e9:0a:ea:06:da:49:00:c1:75:9c:1b:
         a4:ef:97:c6:6c:4e:76:39:ac:72:18:6d:3a:b0:bb:78:70:4c:
         d0:3a:c4:80:61:5d:f4:27:4a:97:57:6a:8d:9a:a1:78:83:0f:
         53:c2:a6:bb:8a:9a:38:0f:77:c3:4e:31:2a:3f:d2:45:59:8f:
         1f:3d:55:4d:09:db:5c:9b:98:11:7a:a7:2c:45:2f:d9:c7:b7:
         63:e4:13:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:52:50 2025 by rpki-client