Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/34352e37312e31312e302f32342d3234203d3e203634313132.roa
File:                     34352e37312e31312e302f32342d3234203d3e203634313132.roa (raw, json)
Hash identifier:          XUf7dTrVQ7eX2evaU/oBsajrJqN8eSUcltlHBjtRnfY=
Subject key identifier:   35:E0:55:8E:3E:0A:B1:CB:3B:30:78:A2:9B:2A:8A:22:80:2E:58:16
Certificate issuer:       /CN=B156B92173159B61E3CBF80FA51A1B58E6218261
Certificate serial:       1FB0D53E4F6D9A0ACE33D9B8896397D7891E9672
Authority key identifier: B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/34352e37312e31312e302f32342d3234203d3e203634313132.roa
Signing time:             Mon 21 Jul 2025 20:26:03 +0000
ROA not before:           Mon 21 Jul 2025 20:21:03 +0000
ROA not after:            Mon 20 Jul 2026 20:26:03 +0000
asID:                     64112
IP address blocks:        45.71.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b0:d5:3e:4f:6d:9a:0a:ce:33:d9:b8:89:63:97:d7:89:1e:96:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B156B92173159B61E3CBF80FA51A1B58E6218261
        Validity
            Not Before: Jul 21 20:21:03 2025 GMT
            Not After : Jul 20 20:26:03 2026 GMT
        Subject: CN=35E0558E3E0AB1CB3B3078A29B2A8A22802E5816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:8d:70:fc:b4:6f:a0:9e:36:da:ba:94:9a:
                    21:fa:e6:cd:29:cf:da:b0:4a:1c:fa:8f:4d:89:bd:
                    4a:df:6c:b2:d1:74:b4:38:25:9d:58:a1:7b:b4:28:
                    8f:5b:50:a3:4d:61:54:fc:1b:9a:c8:03:50:07:e4:
                    82:0d:40:c5:94:b6:17:d2:3e:38:a5:d8:c2:3a:38:
                    ba:09:e2:4d:94:e9:41:ef:20:e7:89:fd:28:c3:98:
                    03:ee:9a:8b:62:29:90:04:48:1a:4b:d1:2b:79:32:
                    f8:06:19:94:f0:4a:02:0e:96:00:d0:13:af:e9:8f:
                    16:26:24:1b:fc:87:58:a8:bf:44:ea:9d:ba:e2:af:
                    23:c7:48:65:94:d0:90:0d:ed:f7:9e:c3:f4:25:ac:
                    eb:e9:64:5e:f6:8d:1a:af:67:bf:50:15:6f:1f:8e:
                    b8:96:9b:f2:3e:f9:ca:c3:7a:c2:fa:c2:dc:33:ae:
                    db:81:3b:1e:cc:1a:d9:1a:e1:c8:85:d1:b9:89:bf:
                    d7:61:42:71:c4:c7:ac:eb:2c:5c:b8:36:13:01:d7:
                    98:05:40:31:e4:34:ad:8d:c3:db:a4:b6:d2:18:f1:
                    6f:48:81:45:dc:d1:fb:ba:2d:5c:23:09:5f:e6:85:
                    97:3e:c4:ff:e7:8c:05:7f:8f:25:b2:d7:81:ee:9c:
                    58:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E0:55:8E:3E:0A:B1:CB:3B:30:78:A2:9B:2A:8A:22:80:2E:58:16
            X509v3 Authority Key Identifier:
                keyid:B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/34352e37312e31312e302f32342d3234203d3e203634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:39:b4:cb:0e:47:b0:c7:a9:34:2c:30:45:ec:04:c9:53:ec:
         10:92:40:69:92:e6:52:0b:7b:f5:d2:ac:34:af:67:5f:c0:b3:
         13:b3:45:35:63:29:40:18:b1:5d:7e:f9:21:04:95:bd:84:6f:
         43:67:21:7c:af:27:b3:b5:e5:12:eb:d6:0b:75:bc:03:f6:4c:
         be:44:8b:be:11:5a:6b:ed:4c:9c:6e:16:06:dd:b2:d5:2a:23:
         fb:5f:eb:81:c7:03:65:ac:be:d0:8c:41:3d:3a:39:93:82:28:
         5e:c2:49:e8:6b:56:1c:6d:ae:fa:8d:da:30:39:73:ba:40:a9:
         8e:aa:5a:e7:d0:b9:49:ef:b7:d2:87:d6:96:83:99:96:58:4d:
         f8:63:59:17:40:f7:69:22:1e:3a:ea:01:26:22:13:c9:c5:82:
         32:fe:69:c4:33:bf:52:26:53:12:49:8d:b2:0e:ce:b2:75:b1:
         70:9e:b7:3e:cb:a8:c3:c9:e3:bb:9a:9c:f5:6c:12:fb:53:db:
         e1:99:7e:8e:23:2f:5a:f0:36:3f:0d:3e:7a:f8:49:ae:b8:06:
         4c:16:4d:db:ab:c8:37:4c:77:0c:8f:af:5d:d9:99:b5:5a:91:
         61:57:e8:68:aa:e9:63:28:5a:fd:44:0c:c6:0d:46:5b:b5:d9:
         43:b3:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:38:54 2025 by rpki-client