Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/34352e3138312e3139312e302f32342d3234203d3e20323639373335.roa
File:                     34352e3138312e3139312e302f32342d3234203d3e20323639373335.roa (raw, json)
Hash identifier:          mX5ifOkC7COUW5+fiNTPTIiAvTjMn05NYK4yeFOaN2Y=
Subject key identifier:   6E:ED:12:0C:7E:FF:15:3B:FF:B5:52:61:B9:91:EF:F8:5A:CB:AF:30
Certificate issuer:       /CN=6B10736B719525EEF03A0E2B1890255AD5B6AFB4
Certificate serial:       32AAE012116C6E8AF0CA9960E02DBE3F71D0E00A
Authority key identifier: 6B:10:73:6B:71:95:25:EE:F0:3A:0E:2B:18:90:25:5A:D5:B6:AF:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/34352e3138312e3139312e302f32342d3234203d3e20323639373335.roa
Signing time:             Tue 04 Feb 2025 18:11:10 +0000
ROA not before:           Tue 04 Feb 2025 18:06:10 +0000
ROA not after:            Tue 03 Feb 2026 18:11:10 +0000
asID:                     269735
IP address blocks:        45.181.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:aa:e0:12:11:6c:6e:8a:f0:ca:99:60:e0:2d:be:3f:71:d0:e0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B10736B719525EEF03A0E2B1890255AD5B6AFB4
        Validity
            Not Before: Feb  4 18:06:10 2025 GMT
            Not After : Feb  3 18:11:10 2026 GMT
        Subject: CN=6EED120C7EFF153BFFB55261B991EFF85ACBAF30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:50:b0:4f:f8:77:1f:b2:64:93:4c:bd:af:
                    52:32:a9:ae:0a:d8:cd:18:a0:c6:b6:95:47:f6:16:
                    f9:bc:2c:c1:07:ea:0d:83:19:90:7a:66:13:af:93:
                    af:c3:97:40:4a:1b:40:aa:04:dc:be:b3:4c:05:37:
                    02:96:bb:0b:aa:1d:2d:a0:5c:5d:97:6f:31:7b:98:
                    64:23:15:3c:b1:e7:d7:06:c9:ec:c5:09:0b:46:c5:
                    d6:ea:b4:9f:4c:5a:37:0b:86:7a:f7:34:4d:e4:07:
                    74:92:19:72:d5:b1:36:34:ee:60:94:bf:58:db:66:
                    78:68:4c:40:7a:9d:6f:0a:88:30:33:e4:67:a9:a0:
                    37:1f:f4:8a:47:2b:df:04:d2:41:7d:f4:45:05:c9:
                    2d:e7:b5:92:35:bc:df:f2:f1:7b:41:a6:01:36:3b:
                    cb:e8:45:e5:f9:38:6b:27:0b:ae:b5:37:48:3f:90:
                    63:92:1b:97:63:d8:b5:cb:d4:46:13:73:b2:59:da:
                    22:2d:e2:b7:5e:3b:0c:3c:10:42:84:8a:9d:8c:e7:
                    14:a0:37:11:37:82:1d:4f:cd:69:2b:ae:0b:03:e6:
                    86:ca:4e:fd:b7:ef:75:25:9c:42:61:05:dd:15:64:
                    c8:f4:d9:93:a7:e0:0a:4a:35:b4:43:98:f9:a5:b1:
                    5a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:ED:12:0C:7E:FF:15:3B:FF:B5:52:61:B9:91:EF:F8:5A:CB:AF:30
            X509v3 Authority Key Identifier:
                keyid:6B:10:73:6B:71:95:25:EE:F0:3A:0E:2B:18:90:25:5A:D5:B6:AF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/34352e3138312e3139312e302f32342d3234203d3e20323639373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:1d:6b:55:a0:90:22:26:f3:e4:e0:f7:99:98:c4:31:50:00:
         e7:67:ea:66:49:79:01:0f:9c:df:f8:d2:4b:03:59:05:fa:c0:
         5c:8a:90:1f:61:28:c3:ad:48:a8:01:8e:c2:93:8d:20:84:fc:
         07:d1:75:7b:ef:62:4c:43:3b:75:61:b8:76:5f:02:b7:7d:6c:
         62:ea:66:4c:d3:a2:cf:8f:7f:86:2e:11:2d:bd:7e:9c:da:68:
         98:61:a5:19:0c:9b:2e:07:21:85:4d:6b:15:83:6c:70:e7:40:
         59:c3:4f:3b:06:9a:46:ed:2a:1d:d9:17:71:0d:a2:c3:f9:06:
         7b:44:c6:f9:47:a4:0b:b1:e9:58:87:30:07:35:9c:c7:59:e3:
         26:88:27:e4:dc:89:b6:e7:49:8f:40:bc:e8:ef:00:e0:7b:11:
         3b:65:fc:9d:aa:ec:b4:91:44:4e:64:8f:cd:38:9b:4a:10:22:
         c8:94:01:18:5d:fc:b9:03:92:d6:06:b8:48:b2:e9:2e:5e:ef:
         8b:39:30:c9:3e:21:6f:42:18:c7:a8:18:fc:d0:7f:f4:c6:29:
         92:05:e1:27:01:02:f1:ed:ec:87:86:b6:18:b6:42:3b:4e:3e:
         5a:2e:41:ea:6e:6d:eb:b0:d2:8a:6b:7d:62:21:4d:ff:40:7f:
         2d:f0:ca:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 21:44:06 2025 by rpki-client