Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e3233392e33352e302f32342d3234203d3e20323636373235.roa
File:                     34352e3233392e33352e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          os4UYgWDT3uYNpYbuw5AH8oJ474o7dwoT512GuRPGmg=
Subject key identifier:   F8:5A:E7:2F:5F:37:0C:A5:87:1D:5B:A5:43:EB:12:6A:D2:C4:81:5E
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       7E298F39A9C0F3C6A82D0728C9C5AE34569874F3
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e3233392e33352e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 18 Mar 2025 19:10:00 +0000
ROA not before:           Tue 18 Mar 2025 19:05:00 +0000
ROA not after:            Tue 17 Mar 2026 19:10:00 +0000
asID:                     266725
IP address blocks:        45.239.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 22:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:29:8f:39:a9:c0:f3:c6:a8:2d:07:28:c9:c5:ae:34:56:98:74:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Mar 18 19:05:00 2025 GMT
            Not After : Mar 17 19:10:00 2026 GMT
        Subject: CN=F85AE72F5F370CA5871D5BA543EB126AD2C4815E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9f:c7:5f:4a:ca:46:aa:85:78:73:01:cf:b8:
                    4d:8e:c9:45:17:e7:5a:a2:74:b8:43:3b:62:17:73:
                    83:20:ce:96:95:93:0f:0d:8a:9c:e5:02:8d:b5:70:
                    84:41:a1:1b:dd:06:25:bf:f7:fa:72:e0:ca:4f:9f:
                    e9:4c:54:4e:0e:f2:89:9c:54:18:b7:ed:01:22:fa:
                    c4:7e:3a:51:9a:18:e0:c0:ab:ac:5f:62:0c:b0:95:
                    09:ab:d5:73:4d:1c:bd:c8:cb:eb:bc:ef:98:56:67:
                    7f:35:2b:29:ba:5a:e2:bf:4a:77:89:47:56:d2:ca:
                    01:23:b5:4a:c8:21:d5:59:9e:20:97:7b:23:6a:64:
                    f0:9d:b4:75:5c:44:bf:67:99:91:ae:a2:fa:f0:f7:
                    26:a9:18:a6:5e:f8:66:46:c5:5f:8f:9e:40:83:e0:
                    eb:41:dc:11:71:94:f8:83:33:77:55:cb:bc:11:a7:
                    ca:ee:be:02:47:74:ba:e2:25:1a:dd:9f:d9:65:bf:
                    28:86:5c:c9:3b:62:58:65:14:c9:f4:8d:f9:c8:69:
                    58:bf:32:e1:1c:e7:43:9e:43:dc:29:70:d1:9d:8e:
                    9c:ae:7b:38:ce:99:e3:46:95:3a:8d:e7:dc:fd:f7:
                    0e:fe:97:cb:ab:7d:9b:21:49:1e:e7:a6:e7:c1:ef:
                    22:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5A:E7:2F:5F:37:0C:A5:87:1D:5B:A5:43:EB:12:6A:D2:C4:81:5E
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e3233392e33352e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:b8:b5:47:02:37:d8:f8:cf:9b:8c:ea:83:60:4f:4d:6d:de:
         98:0b:ef:6d:2c:af:24:0f:81:8d:02:8a:8c:28:38:4b:d8:8a:
         20:6b:46:dc:40:a7:df:87:50:ad:dc:c6:06:7c:2e:da:af:bc:
         8a:b5:e1:c5:5b:32:3a:ca:fb:2f:97:4e:63:35:72:e9:1f:65:
         35:d8:e9:c1:d2:9f:50:cc:82:e9:19:8f:74:28:ae:a5:f8:0f:
         de:bc:f5:af:a7:a8:1d:89:6f:29:ad:d8:e2:55:6a:ab:08:c5:
         6e:b5:95:dc:2a:82:39:99:6a:a8:af:d8:7c:63:20:f4:4b:57:
         bb:40:18:9e:34:2e:f4:0f:4c:26:3f:5e:d4:cd:1f:75:92:e0:
         66:26:c1:5b:11:6b:00:48:97:84:68:9b:26:14:d8:8a:66:28:
         90:44:b6:a0:1d:c7:be:45:16:12:5c:3d:5f:74:89:0b:f0:80:
         4c:8d:de:4d:cf:4a:e7:71:57:18:4f:05:21:eb:b9:df:90:b0:
         00:ac:b2:2b:bf:1d:52:75:e9:88:01:36:e6:52:d6:99:95:94:
         91:a2:7d:61:16:f1:69:ec:15:b9:61:85:3d:78:df:b6:de:fb:
         e8:19:2f:6f:b8:b6:23:b6:41:0a:84:20:7d:02:a4:65:a1:49:
         7e:0b:2c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:38:06 2025 by rpki-client