Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF920849F867E075F36455A1C5E2E324FAE1BBB1D62C605A67DECCFFC3BA1CB/0/34352e3232372e3133302e302f32342d3234203d3e20323636373738.roa
File:                     34352e3232372e3133302e302f32342d3234203d3e20323636373738.roa (raw, json)
Hash identifier:          cJNxR5l++R0Blqt2UcvPENiHrLOVRk3qLnDa694JeA0=
Subject key identifier:   B9:51:DE:95:91:EB:22:46:2F:3D:23:28:2D:54:1E:9F:FC:3B:4E:87
Certificate issuer:       /CN=950C360CB6EA8B2E8A8F400061E45C4BA9C2FD33
Certificate serial:       70B40A3D1D229CEE940551AEBF059BB65F30CF2E
Authority key identifier: 95:0C:36:0C:B6:EA:8B:2E:8A:8F:40:00:61:E4:5C:4B:A9:C2:FD:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/950C360CB6EA8B2E8A8F400061E45C4BA9C2FD33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DFF920849F867E075F36455A1C5E2E324FAE1BBB1D62C605A67DECCFFC3BA1CB/0/34352e3232372e3133302e302f32342d3234203d3e20323636373738.roa
Signing time:             Tue 04 Feb 2025 18:12:38 +0000
ROA not before:           Tue 04 Feb 2025 18:07:38 +0000
ROA not after:            Tue 03 Feb 2026 18:12:38 +0000
asID:                     266778
IP address blocks:        45.227.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DFF920849F867E075F36455A1C5E2E324FAE1BBB1D62C605A67DECCFFC3BA1CB/0/950C360CB6EA8B2E8A8F400061E45C4BA9C2FD33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DFF920849F867E075F36455A1C5E2E324FAE1BBB1D62C605A67DECCFFC3BA1CB/0/950C360CB6EA8B2E8A8F400061E45C4BA9C2FD33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/950C360CB6EA8B2E8A8F400061E45C4BA9C2FD33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b4:0a:3d:1d:22:9c:ee:94:05:51:ae:bf:05:9b:b6:5f:30:cf:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950C360CB6EA8B2E8A8F400061E45C4BA9C2FD33
        Validity
            Not Before: Feb  4 18:07:38 2025 GMT
            Not After : Feb  3 18:12:38 2026 GMT
        Subject: CN=B951DE9591EB22462F3D23282D541E9FFC3B4E87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a6:9c:45:72:04:c3:37:21:b5:6f:34:24:78:
                    a8:66:94:3b:3f:85:7d:cb:1b:99:00:20:26:12:d2:
                    cc:36:60:11:56:0a:98:9f:0c:09:67:8a:e4:8b:64:
                    0f:f6:6e:05:28:84:d3:5f:a4:51:62:c7:e0:29:1b:
                    5d:3e:a9:89:6e:af:c2:f3:a1:29:6a:20:37:33:fc:
                    88:b3:81:ad:9a:3c:58:e6:3f:3b:62:58:03:98:3e:
                    d7:73:ff:bc:94:3e:0b:fb:ca:62:8e:a0:67:16:61:
                    ff:c2:ba:39:d4:67:fe:87:1a:16:cd:85:d4:46:2c:
                    56:f6:f9:e1:83:9f:9f:ba:06:9f:f1:e9:83:29:1d:
                    ce:c3:ee:7b:26:7b:bf:58:59:a1:f0:a4:a7:8f:24:
                    3e:2a:50:34:d4:d0:b6:a4:8e:de:62:e8:b0:3b:6f:
                    0c:c2:6a:04:b4:27:73:e8:3c:e2:68:91:61:73:50:
                    89:ed:d8:c3:c4:78:5e:12:a8:95:24:36:eb:0c:e3:
                    3e:ac:ee:2a:5f:2d:41:2a:89:07:bf:2d:ad:cb:8c:
                    d7:4c:dd:9f:57:33:1a:f5:45:d6:6e:98:52:25:be:
                    8e:86:77:e0:a3:14:e1:89:02:40:15:cb:b1:d9:11:
                    a7:15:05:e0:c3:34:be:a7:b8:1c:51:ea:e3:92:30:
                    1a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:51:DE:95:91:EB:22:46:2F:3D:23:28:2D:54:1E:9F:FC:3B:4E:87
            X509v3 Authority Key Identifier:
                keyid:95:0C:36:0C:B6:EA:8B:2E:8A:8F:40:00:61:E4:5C:4B:A9:C2:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DFF920849F867E075F36455A1C5E2E324FAE1BBB1D62C605A67DECCFFC3BA1CB/0/950C360CB6EA8B2E8A8F400061E45C4BA9C2FD33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/950C360CB6EA8B2E8A8F400061E45C4BA9C2FD33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF920849F867E075F36455A1C5E2E324FAE1BBB1D62C605A67DECCFFC3BA1CB/0/34352e3232372e3133302e302f32342d3234203d3e20323636373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:5c:fb:d9:b6:f1:f6:fc:d2:97:94:a8:51:80:93:40:b4:a8:
         5a:0a:83:9b:b2:7b:3b:6a:47:d6:1c:b3:72:67:86:c0:62:70:
         ac:dd:28:91:b4:c7:a7:73:54:25:9b:0e:2b:95:4b:05:70:8d:
         0e:7f:ae:b0:c2:81:a7:13:87:a7:97:13:05:c7:8a:4c:42:78:
         10:25:60:19:67:70:22:cd:82:dc:27:a3:af:cf:86:3c:74:b1:
         58:c6:e9:4e:56:fa:14:b9:c2:ad:eb:68:e3:1d:97:0d:b5:83:
         0e:a0:80:28:e9:13:17:6a:7d:97:ad:00:c7:4e:d6:a9:7c:8a:
         25:74:ad:f6:a2:1b:99:68:99:d1:f9:f5:b5:49:53:22:03:c7:
         5c:37:04:ef:62:00:f2:ba:c6:c7:b2:42:5b:c8:d9:82:d6:fe:
         f2:67:ec:ec:a7:09:02:8f:ab:d0:30:6b:59:ea:2b:49:f5:a1:
         f9:1a:af:af:24:3d:8d:95:13:b2:10:93:56:ce:6d:ca:93:72:
         fc:40:eb:7c:88:cb:88:15:be:e9:b5:0e:34:be:22:1b:b6:59:
         76:29:51:df:b3:30:78:38:39:59:8a:f4:de:7f:dd:70:08:76:
         55:cd:3f:32:b4:f5:0f:a2:ce:da:b3:45:95:6e:a1:1c:46:bb:
         7f:e8:87:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:25:47 2025 by rpki-client