Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/34352e3138382e3231302e302f32342d3234203d3e20323639373836.roa
File:                     34352e3138382e3231302e302f32342d3234203d3e20323639373836.roa (raw, json)
Hash identifier:          jaO/tI4GBwQN4jKdCrifa5AjcfltqP5j1P/wjI3aSFw=
Subject key identifier:   71:C0:8F:6E:11:30:68:64:4C:72:32:A1:F8:85:D0:0B:4F:C3:67:E6
Certificate issuer:       /CN=AF75F7E85911B6D6A42FE6E1822724A7A7950D96
Certificate serial:       7245093A6065D7614022D61C4CFCCEC1724239FB
Authority key identifier: AF:75:F7:E8:59:11:B6:D6:A4:2F:E6:E1:82:27:24:A7:A7:95:0D:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/34352e3138382e3231302e302f32342d3234203d3e20323639373836.roa
Signing time:             Thu 20 Feb 2025 14:10:20 +0000
ROA not before:           Thu 20 Feb 2025 14:05:20 +0000
ROA not after:            Thu 19 Feb 2026 14:10:20 +0000
asID:                     269786
IP address blocks:        45.188.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 08:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:45:09:3a:60:65:d7:61:40:22:d6:1c:4c:fc:ce:c1:72:42:39:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF75F7E85911B6D6A42FE6E1822724A7A7950D96
        Validity
            Not Before: Feb 20 14:05:20 2025 GMT
            Not After : Feb 19 14:10:20 2026 GMT
        Subject: CN=71C08F6E113068644C7232A1F885D00B4FC367E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ac:51:32:27:14:26:f7:10:0f:7b:91:6f:71:
                    b0:90:0c:9f:8a:67:30:27:f6:77:f0:5f:fc:5f:47:
                    91:1f:f1:6c:cf:58:bb:10:1f:6e:bd:ee:9a:c9:34:
                    c1:d0:c6:e4:fa:dd:35:32:52:78:ab:23:8d:08:03:
                    a6:e8:71:a5:93:d2:82:9d:eb:f1:f2:27:7a:b9:7c:
                    01:bd:95:00:98:33:d2:33:85:85:8e:cc:9a:c5:90:
                    d7:df:06:10:0c:1b:40:a8:2d:56:69:58:2b:98:b0:
                    1e:a9:be:20:e4:aa:b3:24:a2:99:e6:03:ea:6e:ca:
                    63:af:82:b1:dc:47:ac:2d:b5:97:e0:97:bc:bb:42:
                    35:17:09:c7:2a:40:2f:25:c8:b0:48:ef:89:79:32:
                    c4:f5:0b:c4:f9:66:4d:a7:d2:1b:53:61:52:83:6c:
                    15:a4:ef:d8:4b:21:6f:cc:7d:fd:04:dd:ab:40:7f:
                    37:14:62:8c:83:b6:08:b2:f4:f8:30:37:f6:53:d3:
                    29:70:de:d1:a5:c7:c1:cc:ed:2e:dc:fc:ba:56:3d:
                    72:56:09:1a:b1:d5:e4:58:42:21:4d:b5:4d:77:cd:
                    49:6c:c9:8f:2b:cd:65:87:e9:aa:7e:47:44:07:f5:
                    d5:bf:76:94:50:f1:a0:a6:f1:f5:ea:35:b9:ae:04:
                    88:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C0:8F:6E:11:30:68:64:4C:72:32:A1:F8:85:D0:0B:4F:C3:67:E6
            X509v3 Authority Key Identifier:
                keyid:AF:75:F7:E8:59:11:B6:D6:A4:2F:E6:E1:82:27:24:A7:A7:95:0D:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/34352e3138382e3231302e302f32342d3234203d3e20323639373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:7b:69:fd:6f:56:60:88:e5:74:55:94:63:93:6e:03:8b:5b:
         a7:99:d0:ee:f9:34:b5:cb:c7:02:f1:f2:7a:d7:f2:33:8e:3a:
         48:82:0c:c8:30:18:42:ed:df:a1:ec:37:4d:0b:1a:71:f7:60:
         78:6c:ce:6b:1c:c6:7c:95:cc:64:c0:8e:6a:5f:d7:99:9c:47:
         dd:10:45:bd:3f:bc:0c:9e:97:f2:b4:21:21:fd:39:39:de:9d:
         65:c0:2a:e1:28:f9:3c:e1:d3:aa:96:b3:ed:08:34:80:d6:6e:
         8b:cd:31:6d:4d:d3:04:7b:27:48:0f:95:df:d4:91:19:4a:99:
         64:0b:37:da:a4:03:76:7d:33:31:ed:13:b6:61:57:66:82:e4:
         95:4d:ff:a0:a8:38:9f:32:0d:21:65:92:dd:19:15:43:6c:b0:
         57:84:b1:cc:6c:61:3c:c5:00:fb:d6:27:5f:1b:47:b1:ef:97:
         62:af:fd:32:5d:82:8e:97:00:e5:43:95:8b:e3:99:96:f4:7b:
         66:50:62:08:2c:d7:d7:23:63:16:39:5a:4c:76:d6:f4:29:2b:
         a4:3c:7a:26:77:e6:8e:e3:10:b9:28:65:d4:0f:c6:24:3d:64:
         ad:05:d5:31:aa:11:6b:d9:83:e7:a5:0e:61:b5:0f:61:da:e6:
         45:ab:c8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:48:10 2025 by rpki-client