Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F799DAC8FA9400E3C99DE217D3AD6DD339A4CA0412769AF70ABCA56EE5CEC2E9/0/34352e3233342e3135372e302f32342d3234203d3e20323636373839.roa
File:                     34352e3233342e3135372e302f32342d3234203d3e20323636373839.roa (raw, json)
Hash identifier:          eDLLwOc47jfElxmMZdsmRBLs/sNrVbiS4jaRQU6snNk=
Subject key identifier:   8F:06:50:03:F5:C4:38:5B:A5:AA:91:03:44:BE:05:E6:F2:69:53:B4
Certificate issuer:       /CN=E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB
Certificate serial:       1226BCF26F523FBB1633051EAE01749687C6ED54
Authority key identifier: E8:84:A6:78:8F:56:7F:A5:F2:EF:3E:8C:0B:A4:B2:B5:E3:DF:37:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F799DAC8FA9400E3C99DE217D3AD6DD339A4CA0412769AF70ABCA56EE5CEC2E9/0/34352e3233342e3135372e302f32342d3234203d3e20323636373839.roa
Signing time:             Tue 04 Feb 2025 18:18:24 +0000
ROA not before:           Tue 04 Feb 2025 18:13:24 +0000
ROA not after:            Tue 03 Feb 2026 18:18:24 +0000
asID:                     266789
IP address blocks:        45.234.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F799DAC8FA9400E3C99DE217D3AD6DD339A4CA0412769AF70ABCA56EE5CEC2E9/0/E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F799DAC8FA9400E3C99DE217D3AD6DD339A4CA0412769AF70ABCA56EE5CEC2E9/0/E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:26:bc:f2:6f:52:3f:bb:16:33:05:1e:ae:01:74:96:87:c6:ed:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB
        Validity
            Not Before: Feb  4 18:13:24 2025 GMT
            Not After : Feb  3 18:18:24 2026 GMT
        Subject: CN=8F065003F5C4385BA5AA910344BE05E6F26953B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:eb:7d:8e:a9:32:c7:27:57:df:36:b0:e4:
                    0c:32:15:62:30:1e:5e:9d:92:cb:b4:7c:3b:c3:b1:
                    24:be:38:76:ca:29:33:a7:b7:bb:88:7e:eb:03:b4:
                    cf:9e:6b:5c:8a:5b:2e:45:81:0e:fc:68:01:28:15:
                    e8:d7:88:b9:b0:43:72:ac:ff:13:be:37:41:33:87:
                    eb:d7:bb:e6:21:14:87:0f:08:55:7b:26:a2:36:3f:
                    91:1a:23:b4:5c:9a:ed:8a:ce:71:51:a7:07:5c:a0:
                    7b:08:f9:c6:27:f8:22:72:da:76:2b:d9:30:a7:77:
                    a3:35:18:dc:72:dc:e5:51:44:a4:4c:94:48:44:9f:
                    65:7f:19:db:9e:7b:b8:84:0b:a6:61:f0:e7:b7:7b:
                    9d:ab:1e:6e:68:17:33:ba:d9:61:36:29:13:c4:b6:
                    6e:d4:1c:44:d7:b4:39:f1:88:89:5a:7d:7f:e6:2e:
                    75:77:43:1e:51:3e:08:c4:e9:f1:db:e2:c1:b2:9c:
                    59:4a:83:20:cb:a0:7d:0d:90:48:58:b7:ca:f5:4f:
                    fa:a3:f2:6a:cc:33:07:b4:02:a9:f6:6c:1b:7f:ee:
                    62:09:e9:40:79:c1:4c:d8:c5:12:f4:01:a7:38:ab:
                    27:c0:4e:1e:36:98:50:d5:e6:10:40:f7:14:3c:f4:
                    20:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:06:50:03:F5:C4:38:5B:A5:AA:91:03:44:BE:05:E6:F2:69:53:B4
            X509v3 Authority Key Identifier:
                keyid:E8:84:A6:78:8F:56:7F:A5:F2:EF:3E:8C:0B:A4:B2:B5:E3:DF:37:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F799DAC8FA9400E3C99DE217D3AD6DD339A4CA0412769AF70ABCA56EE5CEC2E9/0/E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E884A6788F567FA5F2EF3E8C0BA4B2B5E3DF37AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F799DAC8FA9400E3C99DE217D3AD6DD339A4CA0412769AF70ABCA56EE5CEC2E9/0/34352e3233342e3135372e302f32342d3234203d3e20323636373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:f9:e4:88:76:97:4c:b2:16:60:1e:78:45:c2:3a:d3:4a:be:
         39:f2:df:fb:aa:62:51:5e:c1:44:c9:98:e0:5b:70:0c:3d:46:
         48:6d:8a:25:51:8b:e0:77:85:45:c1:1d:e5:97:f8:cc:d2:ac:
         1f:d6:f5:94:43:30:16:2c:96:13:fd:a8:61:10:89:29:0b:6e:
         b2:4a:e4:80:5a:7d:73:e0:23:fb:f5:ff:e7:bd:b4:e7:83:5d:
         a7:d3:e3:0e:c0:93:a2:cb:bd:4a:2d:17:ff:91:4b:b3:5c:e6:
         25:f5:67:75:94:0a:26:90:3b:f9:66:e8:85:dd:0a:80:d8:03:
         94:c4:46:06:f0:3b:fa:58:bf:3d:83:a7:e2:16:10:5a:68:9a:
         62:ed:2b:10:89:52:0e:be:d9:1b:ad:33:99:82:e0:c6:68:9f:
         97:ce:3e:b4:35:f9:b8:ac:3a:9c:3a:4f:82:19:67:e5:18:e1:
         4b:3d:91:db:97:c0:19:9e:8b:0e:e5:b3:d8:07:44:99:8c:1a:
         b4:3e:28:08:21:cf:86:aa:b5:88:bd:b1:39:20:98:39:9c:5e:
         84:c5:28:49:89:26:36:ac:9c:7c:c3:07:ff:ec:eb:0c:6b:0e:
         58:22:1f:c4:71:4b:74:f3:7c:d9:83:90:9c:e1:21:a6:8d:28:
         34:66:8e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:36:42 2025 by rpki-client