Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/34352e3232342e3230322e302f32342d3234203d3e20323634363836.roa
File:                     34352e3232342e3230322e302f32342d3234203d3e20323634363836.roa (raw, json)
Hash identifier:          mja8jt+BysK6xbyrukSsbRtrNRS7WVQZ6Jy9qhNXzbE=
Subject key identifier:   6B:74:4C:2F:4E:ED:77:65:4A:DC:7A:57:B4:35:3B:F6:ED:20:A5:2D
Certificate issuer:       /CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400
Certificate serial:       08DBFD0C41A000F8E2D19EAD688E1D19944C139D
Authority key identifier: AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/34352e3232342e3230322e302f32342d3234203d3e20323634363836.roa
Signing time:             Tue 04 Feb 2025 18:12:13 +0000
ROA not before:           Tue 04 Feb 2025 18:07:13 +0000
ROA not after:            Tue 03 Feb 2026 18:12:13 +0000
asID:                     264686
IP address blocks:        45.224.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:db:fd:0c:41:a0:00:f8:e2:d1:9e:ad:68:8e:1d:19:94:4c:13:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA5B7159B79E10B51E1FADEDB4C25C651CE0400
        Validity
            Not Before: Feb  4 18:07:13 2025 GMT
            Not After : Feb  3 18:12:13 2026 GMT
        Subject: CN=6B744C2F4EED77654ADC7A57B4353BF6ED20A52D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:34:47:64:c7:48:d7:e8:62:96:a0:15:4e:ba:
                    10:06:a5:b9:12:11:81:af:5c:83:14:66:ad:27:40:
                    c3:eb:a0:40:91:34:c1:ca:31:c0:73:20:58:c1:13:
                    8e:cf:0a:24:c7:22:db:22:33:14:4b:a1:cb:a2:08:
                    ad:34:8b:26:18:1c:92:b4:73:00:d5:a2:4e:fe:60:
                    9c:79:55:87:39:d2:81:19:30:80:80:a4:27:ea:f8:
                    52:b6:cd:a5:90:c5:45:16:22:3a:da:1f:61:30:f5:
                    cf:7c:63:a1:40:8f:99:be:66:7e:93:ad:7b:d2:88:
                    84:e8:6d:93:d1:2b:07:27:93:ab:67:61:da:79:ae:
                    2a:17:90:fb:0c:f2:af:2b:8e:02:70:fa:dc:3d:90:
                    94:0e:fb:f4:a5:1f:70:42:6d:dc:90:65:c0:3e:47:
                    1f:d3:79:12:93:91:24:e6:3d:7b:26:1b:f1:e6:a1:
                    ad:0f:b3:2f:9a:28:0c:c7:aa:c1:bc:62:15:80:11:
                    1b:af:99:72:f5:60:2a:9a:9b:66:0b:4c:e5:7d:aa:
                    d2:eb:3a:6e:57:73:68:0d:0e:8a:92:f0:89:f0:ec:
                    35:d8:1b:58:76:e1:0d:7f:3b:89:3a:75:c8:78:48:
                    39:6d:be:55:65:d7:07:97:62:82:5d:3a:c5:fc:e7:
                    ab:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:74:4C:2F:4E:ED:77:65:4A:DC:7A:57:B4:35:3B:F6:ED:20:A5:2D
            X509v3 Authority Key Identifier:
                keyid:AF:A5:B7:15:9B:79:E1:0B:51:E1:FA:DE:DB:4C:25:C6:51:CE:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AFA5B7159B79E10B51E1FADEDB4C25C651CE0400.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F1EF22A0EAD297DD59BFA0D9C388596E6983446B133C315BF94A0384F7B76EB8/0/34352e3232342e3230322e302f32342d3234203d3e20323634363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:e1:c3:50:05:59:49:e1:21:e1:50:3c:fb:2c:46:a3:88:35:
         73:3d:d6:37:bf:e5:f9:c6:ce:02:bb:24:02:a8:d0:c5:2c:23:
         ac:49:98:95:3c:af:18:52:6a:ff:99:4f:43:71:27:89:e4:e4:
         b7:ae:29:80:37:b6:0e:20:7e:2b:29:70:dd:34:e4:73:7e:74:
         6c:ad:f0:f7:d1:ba:c1:b2:a8:b3:8d:2e:9e:0b:6a:40:46:c4:
         73:4b:1d:35:e0:9d:7b:07:c9:4d:33:0c:28:38:d6:37:05:b2:
         28:54:89:8c:7a:76:89:44:7f:13:58:d5:70:4a:04:ee:07:fe:
         48:a3:82:b2:18:9e:06:24:d9:34:18:da:08:4c:b3:07:56:3d:
         a9:f9:23:0f:e3:45:21:a6:4d:7e:b3:3d:d0:13:d8:87:90:30:
         e7:6b:2a:2a:4c:80:eb:f5:07:e1:41:8c:97:2c:38:5c:0e:00:
         e6:26:7e:01:bf:65:f5:d4:69:e1:62:a8:f3:d5:b3:59:4e:28:
         b6:bc:c7:db:ed:4e:3d:81:70:72:79:a7:22:59:6e:cc:44:74:
         ae:c1:dd:1f:56:42:0e:4c:e4:5c:d8:63:a6:f7:7f:4a:d2:a8:
         71:9e:34:18:b7:6b:1b:82:13:2b:d2:89:1b:a1:4b:3f:45:12:
         c3:46:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:20:20 2025 by rpki-client