Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/34352e3138312e3139302e302f32342d3234203d3e20323639373335.roa
File:                     34352e3138312e3139302e302f32342d3234203d3e20323639373335.roa (raw, json)
Hash identifier:          RB13bGxwDfX8Mmv4312gCmTDkGiOYPiU8ME9xEWlkms=
Subject key identifier:   6D:90:15:47:AB:1C:8B:D4:73:E9:F2:8B:C0:C4:1D:44:7D:79:4B:A6
Certificate issuer:       /CN=6B10736B719525EEF03A0E2B1890255AD5B6AFB4
Certificate serial:       4036660CF9214393EFBD067CA10319C28E015484
Authority key identifier: 6B:10:73:6B:71:95:25:EE:F0:3A:0E:2B:18:90:25:5A:D5:B6:AF:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/34352e3138312e3139302e302f32342d3234203d3e20323639373335.roa
Signing time:             Tue 04 Feb 2025 18:11:09 +0000
ROA not before:           Tue 04 Feb 2025 18:06:09 +0000
ROA not after:            Tue 03 Feb 2026 18:11:09 +0000
asID:                     269735
IP address blocks:        45.181.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:36:66:0c:f9:21:43:93:ef:bd:06:7c:a1:03:19:c2:8e:01:54:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B10736B719525EEF03A0E2B1890255AD5B6AFB4
        Validity
            Not Before: Feb  4 18:06:09 2025 GMT
            Not After : Feb  3 18:11:09 2026 GMT
        Subject: CN=6D901547AB1C8BD473E9F28BC0C41D447D794BA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:52:27:1e:1e:3b:e8:26:f4:94:bf:eb:4f:
                    a6:9e:e4:b7:d2:a7:62:06:40:66:ce:c8:1f:4b:1d:
                    11:b1:7c:89:70:62:65:0e:6e:2b:c0:9b:2c:7a:4b:
                    57:63:0b:ed:b0:07:8c:db:a2:7c:19:12:ac:e4:c0:
                    7d:2a:e9:0f:12:39:ee:1d:c0:1b:e8:30:fb:1c:a8:
                    03:cf:09:47:d3:c7:e4:68:18:a7:01:36:14:ee:d8:
                    13:e2:15:fb:cc:24:d7:04:b6:d0:0c:37:af:03:91:
                    33:41:c3:54:8a:ec:da:e0:43:ef:66:9f:a7:dc:0d:
                    ef:d4:2d:52:46:ef:24:07:77:fc:81:c2:66:ec:6c:
                    c8:da:f1:55:8a:5f:cc:9a:22:4e:82:4a:f9:4e:23:
                    35:11:70:9a:f6:2b:32:e7:b1:1a:ca:f3:90:1f:b9:
                    20:a3:a1:39:46:0a:0c:7c:f5:20:75:46:a4:4f:5d:
                    e5:89:31:9d:24:f1:ee:93:97:dc:27:59:b2:2f:f9:
                    f2:39:fe:06:bb:f6:c6:40:8a:ce:23:ef:28:40:f5:
                    b7:31:df:70:69:78:a0:24:20:58:81:69:09:04:74:
                    2a:44:4f:d3:f6:e7:6b:d6:ef:21:a8:ea:e4:31:64:
                    33:d5:60:d0:1e:33:d6:3f:eb:a7:46:ef:e7:b3:1d:
                    34:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:90:15:47:AB:1C:8B:D4:73:E9:F2:8B:C0:C4:1D:44:7D:79:4B:A6
            X509v3 Authority Key Identifier:
                keyid:6B:10:73:6B:71:95:25:EE:F0:3A:0E:2B:18:90:25:5A:D5:B6:AF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/34352e3138312e3139302e302f32342d3234203d3e20323639373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:fe:5b:3e:b9:48:c0:55:a6:cc:f8:99:a6:d3:e2:04:a6:4f:
         2e:f7:75:ed:42:a5:f8:c8:ed:e6:fa:8b:1a:77:68:0f:70:b1:
         6d:07:a0:17:98:2b:4c:de:91:f1:c7:6a:f9:9a:a9:ba:1b:9f:
         8b:6f:9e:3f:2d:45:7d:50:18:b1:c2:a4:57:b2:a2:fe:55:4e:
         3d:43:f3:4b:49:11:92:b4:30:f2:34:bf:15:64:22:fd:1c:2d:
         76:4c:bf:d8:4f:fa:6f:69:82:d3:26:89:22:73:5d:91:2e:38:
         01:3a:cc:69:f8:29:f6:9a:cb:83:39:ce:7c:84:f2:1d:ff:51:
         49:bc:a6:e0:93:d8:e8:6b:f8:bb:e2:19:28:3d:99:79:94:a0:
         46:80:c5:45:b5:ed:95:43:92:6f:f6:79:f7:89:8c:36:75:c9:
         d4:f7:ea:21:84:be:2e:a6:e3:d4:db:6b:26:e1:30:c0:43:11:
         9a:cf:1b:a7:84:48:90:06:35:16:88:f4:dc:46:a7:ba:3e:5d:
         48:7d:6c:22:c9:41:f1:4b:43:9a:c2:37:20:8d:6c:ae:c3:b6:
         d6:28:79:fe:2c:d6:ab:9d:65:27:c9:91:e6:b8:3e:1c:6b:61:
         18:d5:a6:ab:d0:ca:e9:65:68:9b:8d:d8:95:45:5b:af:6e:e9:
         02:7f:aa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 21:46:55 2025 by rpki-client