Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/34352e3137332e372e302f32342d3234203d3e20323632313931.roa
File:                     34352e3137332e372e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          FclSADNhOpYCdn7qqhvb7Ew/czXwRbhLppNih2BDmb8=
Subject key identifier:   8B:D9:3B:73:0E:79:A9:F5:AB:C6:40:17:27:37:37:4C:7B:8F:5E:C2
Certificate issuer:       /CN=43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8
Certificate serial:       0650C8EF518FCFCE9796B07B20D67C3FFD5FFBCD
Authority key identifier: 43:DD:90:FB:D3:6B:CA:09:CE:09:DC:8B:32:72:A6:9B:0F:97:D5:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/34352e3137332e372e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 19:57:51 +0000
ROA not before:           Tue 04 Feb 2025 19:52:51 +0000
ROA not after:            Tue 03 Feb 2026 19:57:51 +0000
asID:                     262191
IP address blocks:        45.173.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:50:c8:ef:51:8f:cf:ce:97:96:b0:7b:20:d6:7c:3f:fd:5f:fb:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8
        Validity
            Not Before: Feb  4 19:52:51 2025 GMT
            Not After : Feb  3 19:57:51 2026 GMT
        Subject: CN=8BD93B730E79A9F5ABC640172737374C7B8F5EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:a0:50:49:2c:98:8c:5e:da:75:d6:54:8e:
                    69:ff:c2:f1:40:98:15:9a:56:5d:0e:ea:10:01:c2:
                    e7:a4:05:86:9a:06:3e:40:a9:44:3c:e5:29:6c:f3:
                    a6:fa:1d:a4:e8:6a:36:66:64:32:ae:a5:bf:6f:70:
                    cc:01:ee:a0:dc:48:0d:39:be:42:e0:f9:b9:58:af:
                    47:ff:c9:4d:bf:07:70:65:2c:38:ed:69:c4:8f:c1:
                    53:13:9e:8c:ad:6e:46:fc:53:ab:7b:45:e1:b7:64:
                    76:3b:fa:71:2f:24:af:93:a7:b3:98:b8:da:01:c0:
                    96:37:41:6f:70:96:74:f2:db:f6:48:4b:c6:46:48:
                    34:a7:be:57:e4:ee:38:6f:9c:a9:56:ac:54:b9:df:
                    f8:0a:eb:fb:a8:8a:57:94:33:7b:85:76:8b:a5:aa:
                    a5:39:14:2e:74:8e:5a:72:e4:c2:fa:05:bf:ca:6e:
                    07:67:5e:9d:7d:c5:f9:4f:31:db:0b:19:25:16:5c:
                    18:f5:57:da:b1:4b:c6:c5:71:c7:b8:ac:71:68:0c:
                    6f:dc:ec:23:48:21:17:fa:7c:51:d1:08:15:aa:8e:
                    20:4e:d7:80:24:c9:27:b1:47:aa:53:ad:a2:1a:a5:
                    af:d6:b8:7c:87:b2:c6:d1:b9:a9:c6:d8:4b:a6:29:
                    02:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D9:3B:73:0E:79:A9:F5:AB:C6:40:17:27:37:37:4C:7B:8F:5E:C2
            X509v3 Authority Key Identifier:
                keyid:43:DD:90:FB:D3:6B:CA:09:CE:09:DC:8B:32:72:A6:9B:0F:97:D5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/34352e3137332e372e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:fa:8c:90:5a:7e:6e:8f:56:41:40:b4:f0:f3:19:e9:fb:0f:
         1c:de:bb:6c:ed:b4:a4:08:21:78:c7:88:f4:ef:36:3a:4c:c5:
         73:3f:7b:ef:7e:3c:f6:cc:8f:40:05:ee:38:50:45:02:5d:1c:
         7c:06:2c:58:5d:67:bb:41:52:3c:0a:49:3d:2a:e7:44:a6:80:
         70:90:9a:b2:7b:13:2d:83:0c:91:b6:ff:23:d2:ec:4e:38:c9:
         fc:d4:00:7f:6a:90:54:67:1d:64:7d:0c:fd:de:30:33:30:d7:
         d8:5d:da:36:d2:28:13:2c:64:96:af:88:95:75:d8:fb:d6:24:
         76:ec:2a:86:74:0d:c3:33:84:9c:dd:a0:83:a5:24:28:74:a3:
         f6:a8:76:a8:59:b7:b4:09:10:22:d1:0f:a4:b3:c5:87:2d:51:
         2d:de:32:2b:9c:bd:41:86:32:bd:87:8a:88:e7:61:02:6e:e8:
         d8:e3:27:2f:1c:91:fc:75:e0:35:b0:a3:64:2e:d1:6e:e5:ab:
         7e:78:68:0c:4e:21:a5:6f:9d:32:7b:a3:c6:ee:86:55:9d:e0:
         34:d6:2c:e3:3b:7d:9f:16:e8:f6:db:92:b1:52:00:ab:f0:3a:
         d1:49:c4:86:0a:c4:f4:15:48:86:8e:be:c0:4a:cb:93:0d:43:
         fa:1a:33:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:27:55 2025 by rpki-client