Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232372e302f32342d3234203d3e20323636373235.roa
File:                     34352e36352e3232372e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          fwDczfLkO8CZekhI3IWswHKaY2TuBNZvrdssmDMJCn0=
Subject key identifier:   6D:FD:70:8B:92:80:57:F3:54:AA:D0:25:42:F9:1F:F9:21:F7:85:D6
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       4FE225840090E660CF03F2AE4A4312BA7B0390A5
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232372e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 04 Feb 2025 18:28:14 +0000
ROA not before:           Tue 04 Feb 2025 18:23:14 +0000
ROA not after:            Tue 03 Feb 2026 18:28:14 +0000
asID:                     266725
IP address blocks:        45.65.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e2:25:84:00:90:e6:60:cf:03:f2:ae:4a:43:12:ba:7b:03:90:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Feb  4 18:23:14 2025 GMT
            Not After : Feb  3 18:28:14 2026 GMT
        Subject: CN=6DFD708B928057F354AAD02542F91FF921F785D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:47:42:47:68:11:3a:01:3a:f3:99:40:fd:c0:
                    bc:e0:6c:69:f3:bf:b0:dd:13:8c:d5:2e:c5:a2:39:
                    ee:9a:d3:c0:ff:b2:ac:1f:a7:2e:f7:d8:99:bd:d0:
                    c3:86:0a:4a:6d:a2:4b:a0:70:a9:8b:a8:0a:fd:7a:
                    f8:55:5c:ce:80:be:19:67:f1:4c:cd:ca:67:6f:de:
                    30:86:97:49:d0:84:e6:cf:7d:a9:34:ed:5e:f6:43:
                    d4:c3:0c:37:e0:77:e6:aa:13:ce:14:43:6f:1b:c0:
                    23:c8:6d:f4:15:88:fb:34:e7:74:33:a6:e4:77:1a:
                    56:53:61:27:a8:0d:b7:23:4a:4a:72:5d:c2:6d:de:
                    70:ec:f3:3a:63:68:61:f8:2a:1d:d9:ba:64:ae:38:
                    eb:5a:91:de:76:10:97:fe:37:e1:58:76:b2:92:da:
                    d8:fc:8a:35:7f:cd:4f:a0:3e:f2:ac:cd:97:ea:92:
                    bc:ac:14:17:67:08:17:9f:c6:c8:83:03:6c:8f:f9:
                    0d:97:38:a4:1b:8c:42:ae:2f:7c:e7:7f:8d:3c:b8:
                    60:a0:68:e0:7d:77:a6:45:d0:3b:c8:f0:66:57:dc:
                    e2:5d:0e:9d:67:35:96:fa:ea:02:97:aa:93:5a:39:
                    55:a9:a5:56:5e:32:2a:a2:6e:b3:98:88:d1:12:48:
                    f7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FD:70:8B:92:80:57:F3:54:AA:D0:25:42:F9:1F:F9:21:F7:85:D6
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232372e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:22:bf:e6:89:e5:ab:b8:56:94:ed:5e:04:15:92:c3:5a:53:
         c4:6b:51:23:f8:47:cc:38:1e:7b:30:4e:2a:53:a5:c4:b3:69:
         f8:b1:e5:9d:4c:f0:d2:33:66:dc:35:bb:5e:d0:58:df:69:f5:
         5e:42:63:13:7e:ec:46:a4:97:67:e0:07:f3:d9:0a:95:e3:86:
         90:c3:37:6f:a5:02:0b:36:a4:79:59:cf:14:c4:d7:a2:69:c3:
         f1:db:da:f4:4e:fa:d2:f3:c0:76:57:2e:c3:f4:bd:be:3e:26:
         95:b0:11:ff:19:c9:bd:27:e4:9b:f1:00:45:d2:83:d5:e8:4e:
         cb:b7:6c:b2:14:b0:07:d2:69:8e:bb:42:d2:9d:0f:e5:21:2a:
         8e:73:34:fe:67:f7:f7:42:9d:ba:7a:dd:1b:a6:74:f2:f0:2d:
         79:ef:90:b8:cf:ae:d8:a5:e0:7f:91:21:31:76:9a:3c:a9:5b:
         f4:59:5f:7f:26:0b:20:3a:4b:27:82:9e:ad:58:8e:d0:e0:cc:
         39:db:5d:aa:86:35:91:b7:ff:f7:f0:5d:30:61:3b:8a:90:f3:
         2b:38:a1:09:cb:c2:cb:9f:04:3f:aa:c2:5d:8c:b4:b3:0f:99:
         53:d3:ac:16:18:f8:3d:55:d4:09:ba:82:5a:9e:a5:16:71:b5:
         3d:e7:59:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:22:19 2025 by rpki-client