Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32342d3234203d3e20323636373235.roa
File:                     34352e36352e3232342e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          c8aVHwtu0Lp8vyXMz3pcLe0C9bV5lqkZBLZdRjD4uak=
Subject key identifier:   11:D4:DA:EB:1E:B7:B5:BF:1F:7B:48:B4:10:C8:F6:CB:64:4C:DD:6B
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       6A357784B89DA17AB1480FB61779B60A2A3D247A
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 04 Feb 2025 18:28:13 +0000
ROA not before:           Tue 04 Feb 2025 18:23:13 +0000
ROA not after:            Tue 03 Feb 2026 18:28:13 +0000
asID:                     266725
IP address blocks:        45.65.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 22:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:35:77:84:b8:9d:a1:7a:b1:48:0f:b6:17:79:b6:0a:2a:3d:24:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Feb  4 18:23:13 2025 GMT
            Not After : Feb  3 18:28:13 2026 GMT
        Subject: CN=11D4DAEB1EB7B5BF1F7B48B410C8F6CB644CDD6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:0a:e8:f9:03:1c:e0:4d:e0:43:89:5d:dc:
                    1e:0c:4c:f1:06:e5:00:3b:6e:7e:4c:9d:05:ed:35:
                    ee:cd:ed:07:f7:ae:5c:70:ec:de:92:26:b4:a7:3e:
                    e4:2c:e9:3b:ff:21:ff:4a:13:da:31:87:15:06:5d:
                    3c:cc:b2:cf:45:1c:c2:0f:ae:0e:fa:29:06:87:71:
                    87:ef:f8:eb:3e:80:03:94:88:d7:8b:71:4e:b8:7c:
                    08:6f:69:55:c6:e3:df:1a:3e:5f:88:27:8e:a9:58:
                    e0:6a:eb:92:17:5f:65:e6:a7:3d:92:36:77:d8:02:
                    3b:96:67:5d:32:2f:a3:ea:7e:ed:71:f8:a3:f0:d8:
                    8e:e1:a6:0b:94:72:f5:19:44:14:8c:9e:78:c6:0d:
                    12:76:8d:50:02:f1:ec:91:17:2a:6d:c1:ee:88:89:
                    eb:98:35:78:4e:43:81:e9:ff:e5:cc:8e:03:b4:32:
                    3b:2a:e5:af:7a:d8:8b:4e:7e:4b:20:46:89:ca:13:
                    ca:b0:f3:29:d8:13:fb:5e:58:c2:0f:a4:8e:bf:bb:
                    e2:d0:76:55:1d:53:04:3e:05:7b:da:54:5b:f7:c2:
                    b1:41:d3:8e:36:80:19:7f:40:14:a3:97:c7:87:ec:
                    35:6d:6e:08:37:07:2b:0e:5f:95:5e:d0:76:f3:75:
                    db:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D4:DA:EB:1E:B7:B5:BF:1F:7B:48:B4:10:C8:F6:CB:64:4C:DD:6B
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:83:00:7a:6a:5e:ae:b8:83:04:a0:1c:dd:be:67:81:31:39:
         c4:d0:33:83:27:d7:03:7c:e8:ca:40:5c:92:28:64:9b:c2:7e:
         03:f0:e0:61:75:44:3c:85:11:fd:d1:98:69:ba:8a:a0:7e:93:
         c3:70:2d:8b:1c:07:6f:60:d4:14:5a:bc:97:69:e6:b8:0c:a1:
         f0:ac:d3:4c:e7:6d:20:08:d8:71:fd:c3:48:57:d4:b3:af:03:
         3f:54:c7:0d:32:f4:0e:49:39:bd:8d:80:54:9a:4c:82:de:2f:
         30:dd:f8:e3:c8:fb:2b:4c:6f:88:ad:5b:e8:42:65:6d:ea:80:
         2d:44:d4:e6:9f:b9:f9:ff:b2:12:65:13:08:7d:8f:e4:41:ff:
         c6:06:12:fc:85:86:f5:3d:72:e2:e3:61:5d:11:44:a5:c0:a1:
         ad:f3:1d:94:2e:8d:ab:41:c7:38:c8:09:84:56:aa:89:4f:86:
         82:86:f3:89:53:84:75:fa:30:74:07:08:9b:e8:72:5a:9f:64:
         bd:ed:c6:5f:fd:6c:a9:84:3c:e7:39:59:6c:9a:61:59:e3:3d:
         c7:73:58:c1:2b:2b:49:05:5b:3b:ae:8e:51:db:ea:b0:31:2c:
         bf:cb:6e:9a:a9:e3:c3:d3:09:b6:01:77:e8:b6:4a:97:42:97:
         54:4d:d7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:45:00 2025 by rpki-client