Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E74B1F5230CAF552B6161B5176207DBCBDD9A5BCE93CF28442077465C2E2A6CC/0/34352e3137382e38362e302f32342d3234203d3e20323637393138.roa
File:                     34352e3137382e38362e302f32342d3234203d3e20323637393138.roa (raw, json)
Hash identifier:          g22J2TREHskVERHNxSecKR32ROk7jkjbRV2kDNR23bU=
Subject key identifier:   AD:79:50:1B:21:B3:45:9F:3E:93:E8:A5:5F:2F:03:67:80:27:82:02
Certificate issuer:       /CN=27546F9D546FDC6043E85AB367A990FC32BA9281
Certificate serial:       784DED9F6C2A66C77F39EBE2EE5A622BCB86B067
Authority key identifier: 27:54:6F:9D:54:6F:DC:60:43:E8:5A:B3:67:A9:90:FC:32:BA:92:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27546F9D546FDC6043E85AB367A990FC32BA9281.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E74B1F5230CAF552B6161B5176207DBCBDD9A5BCE93CF28442077465C2E2A6CC/0/34352e3137382e38362e302f32342d3234203d3e20323637393138.roa
Signing time:             Tue 04 Feb 2025 18:04:45 +0000
ROA not before:           Tue 04 Feb 2025 17:59:45 +0000
ROA not after:            Tue 03 Feb 2026 18:04:45 +0000
asID:                     267918
IP address blocks:        45.178.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E74B1F5230CAF552B6161B5176207DBCBDD9A5BCE93CF28442077465C2E2A6CC/0/27546F9D546FDC6043E85AB367A990FC32BA9281.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E74B1F5230CAF552B6161B5176207DBCBDD9A5BCE93CF28442077465C2E2A6CC/0/27546F9D546FDC6043E85AB367A990FC32BA9281.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27546F9D546FDC6043E85AB367A990FC32BA9281.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4d:ed:9f:6c:2a:66:c7:7f:39:eb:e2:ee:5a:62:2b:cb:86:b0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27546F9D546FDC6043E85AB367A990FC32BA9281
        Validity
            Not Before: Feb  4 17:59:45 2025 GMT
            Not After : Feb  3 18:04:45 2026 GMT
        Subject: CN=AD79501B21B3459F3E93E8A55F2F036780278202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:37:d0:8f:09:37:cd:1d:96:6d:8c:7c:a0:
                    5f:14:5e:3c:ec:bd:19:2f:03:a4:df:a5:cd:01:b1:
                    28:68:9f:14:59:4f:01:db:a7:21:b2:b9:19:30:c1:
                    bb:09:e4:ca:f4:42:5d:fa:03:1b:bb:78:ef:dd:9c:
                    e8:7c:d7:e8:dd:64:9e:fe:0d:ec:e5:45:2b:79:ff:
                    7d:dc:c2:91:e4:e8:cb:9f:1a:f1:c4:7e:bf:92:75:
                    17:63:79:b7:dc:a9:48:0d:d1:99:11:10:2a:e3:03:
                    b2:db:13:cf:54:17:0d:f3:84:ce:bd:28:3b:b5:e9:
                    d9:67:ef:6a:be:4d:94:ce:e4:37:74:07:74:4f:f9:
                    58:07:8f:58:a5:d1:6d:a1:51:bb:0b:33:ae:b4:f8:
                    9a:bc:85:7c:9b:22:d0:9a:11:aa:14:89:93:d5:37:
                    96:20:39:0b:03:81:1e:2f:c7:a0:06:73:70:56:ad:
                    c3:2e:9b:c8:42:a0:09:ae:a2:17:fb:41:cf:60:d9:
                    4d:e0:97:4b:b2:f4:63:e8:72:98:3b:d2:b9:aa:76:
                    e6:e9:cb:c7:71:85:13:87:7d:4e:fd:f0:6d:77:a9:
                    a5:e2:10:21:10:27:36:d9:78:ad:c1:cc:b5:37:dc:
                    ca:af:6a:90:a5:b1:f1:94:3b:28:27:0a:35:64:91:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:79:50:1B:21:B3:45:9F:3E:93:E8:A5:5F:2F:03:67:80:27:82:02
            X509v3 Authority Key Identifier:
                keyid:27:54:6F:9D:54:6F:DC:60:43:E8:5A:B3:67:A9:90:FC:32:BA:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E74B1F5230CAF552B6161B5176207DBCBDD9A5BCE93CF28442077465C2E2A6CC/0/27546F9D546FDC6043E85AB367A990FC32BA9281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27546F9D546FDC6043E85AB367A990FC32BA9281.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E74B1F5230CAF552B6161B5176207DBCBDD9A5BCE93CF28442077465C2E2A6CC/0/34352e3137382e38362e302f32342d3234203d3e20323637393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:84:3d:99:c6:49:1b:97:54:26:4a:e2:cf:54:a3:35:6c:6d:
         ab:df:82:3d:96:80:53:a0:0d:03:5a:53:46:20:3c:53:18:11:
         c3:a1:6f:11:04:f5:04:60:fc:ee:42:2f:bc:c3:dc:a3:c9:98:
         15:b4:f6:53:64:c5:58:9e:56:fa:d7:19:0f:90:07:d3:dd:f0:
         be:c2:eb:ee:e1:f0:18:d0:78:6d:37:72:79:3a:85:6c:e2:7d:
         4d:56:54:a9:77:23:b2:b4:59:a9:16:47:39:63:10:cc:95:f8:
         bf:c6:3c:2f:6b:ec:99:14:e4:0b:da:cd:b9:dd:52:71:6d:71:
         a0:6a:99:20:16:7e:41:35:00:50:d9:a7:7c:12:d5:e9:02:88:
         44:16:f9:84:c4:81:83:a9:6b:88:e4:09:2c:58:5c:55:ea:9f:
         71:10:97:71:26:fb:72:5a:7b:b4:4a:83:1b:1c:a7:73:88:8b:
         4b:53:62:fb:a3:81:15:26:9f:ca:e4:93:85:c5:d7:a5:9a:ec:
         81:5e:f4:85:f9:4d:cf:a6:9e:34:09:e3:c6:a0:d7:30:aa:62:
         54:82:17:e8:ad:07:da:7b:62:91:02:e1:5f:d8:15:21:e4:a5:
         40:3b:8a:df:6b:71:3f:e5:aa:1d:7a:6a:b1:f2:de:cb:b1:f8:
         42:a9:92:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:54:44 2025 by rpki-client