Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/34352e3233392e3130372e302f32342d3234203d3e20323733303734.roa
File:                     34352e3233392e3130372e302f32342d3234203d3e20323733303734.roa (raw, json)
Hash identifier:          DvP46AxDwcxo2Qi0v6dCXo3f0TNmpHB9fffLAOb9CpI=
Subject key identifier:   16:13:FD:39:0C:4C:39:67:C9:80:88:0A:77:59:BD:CD:57:C7:94:D5
Certificate issuer:       /CN=A4EAE61F1B8952AFAD5693A1FC168A752D346DF1
Certificate serial:       58D888F8C344ADDFA431A38382C20C66407512A8
Authority key identifier: A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/34352e3233392e3130372e302f32342d3234203d3e20323733303734.roa
Signing time:             Tue 04 Feb 2025 18:05:53 +0000
ROA not before:           Tue 04 Feb 2025 18:00:53 +0000
ROA not after:            Tue 03 Feb 2026 18:05:53 +0000
asID:                     273074
IP address blocks:        45.239.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d8:88:f8:c3:44:ad:df:a4:31:a3:83:82:c2:0c:66:40:75:12:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EAE61F1B8952AFAD5693A1FC168A752D346DF1
        Validity
            Not Before: Feb  4 18:00:53 2025 GMT
            Not After : Feb  3 18:05:53 2026 GMT
        Subject: CN=1613FD390C4C3967C980880A7759BDCD57C794D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:05:5c:f3:98:6a:07:48:3c:2e:24:b1:66:26:
                    0f:96:15:96:b1:0e:f7:d1:17:dc:c9:c6:97:8e:90:
                    85:15:39:2b:a1:92:9f:83:49:c6:04:86:7d:44:ae:
                    75:ae:08:d4:ab:5b:e4:c2:85:b4:43:10:83:1f:fe:
                    fc:79:f2:a2:e0:b0:6b:08:b2:ad:cc:87:6b:8f:0d:
                    6e:53:a6:f8:8d:ec:c1:2f:6a:9b:80:a6:9c:53:d8:
                    14:4c:0d:e7:76:4c:b8:d2:9b:2f:80:ae:18:6c:f9:
                    a8:c1:c5:bc:35:78:55:b5:62:d6:70:d8:ec:06:fb:
                    87:89:42:6f:93:2a:54:5b:6c:6a:ab:4a:68:b2:a7:
                    c1:49:15:b7:7a:04:b8:6f:7e:b7:e5:d5:f4:49:f9:
                    1b:c1:08:17:55:a7:b8:f8:65:84:3b:67:1d:42:f2:
                    3f:cb:fb:4f:01:67:aa:5c:74:fb:35:16:3e:bb:9b:
                    31:e4:f4:5d:66:dc:49:f9:ca:75:53:0e:13:ea:16:
                    d8:cd:67:4d:35:a4:ec:32:d8:86:55:98:a7:72:c4:
                    77:6f:0e:c9:8f:c5:3e:30:4e:16:4a:73:b2:63:0e:
                    a3:68:27:b4:91:11:6f:23:a8:3c:53:31:06:54:4c:
                    8b:3f:29:a3:49:8f:26:e5:c1:f7:b2:e8:d7:70:9b:
                    f5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:13:FD:39:0C:4C:39:67:C9:80:88:0A:77:59:BD:CD:57:C7:94:D5
            X509v3 Authority Key Identifier:
                keyid:A4:EA:E6:1F:1B:89:52:AF:AD:56:93:A1:FC:16:8A:75:2D:34:6D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EAE61F1B8952AFAD5693A1FC168A752D346DF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FAD551EA17A5757AB68EFB2A65B5C86C48572DB8D1C268B850B06A9BCBDA3E1F/0/34352e3233392e3130372e302f32342d3234203d3e20323733303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:72:ec:af:04:38:a2:d5:22:36:0a:e0:5b:71:41:c7:88:f5:
         d1:3f:18:ea:67:a3:8a:06:ad:9e:40:75:3c:ab:3c:5a:54:54:
         d4:dc:22:93:38:fa:56:2f:7a:a8:a7:95:c8:a7:5d:57:4d:7c:
         23:4b:d5:eb:1d:db:6d:75:47:8f:79:a4:fb:ef:68:71:47:13:
         1d:91:79:f3:d0:9b:f2:c0:04:bb:3f:59:a2:9c:60:80:85:82:
         c5:74:e4:ae:60:04:08:a3:10:54:88:53:be:bf:b8:05:d0:5c:
         23:8b:04:c9:5d:c3:5f:1b:17:55:e5:fb:97:c3:fd:e2:c8:84:
         d6:72:d3:eb:c9:71:79:b6:a4:92:97:69:23:14:74:02:67:06:
         82:f0:98:65:69:44:b1:94:55:23:de:45:bd:6e:67:32:45:90:
         57:49:7b:50:e4:fe:7d:14:50:fa:cb:cb:b2:89:14:f9:66:b4:
         ca:df:c5:b6:c5:13:a2:32:17:f7:56:d8:79:ef:23:3d:4b:3b:
         0f:f7:b5:be:6b:20:e5:2c:5f:43:fa:3a:11:d9:e7:1a:24:81:
         6e:16:69:f3:99:64:00:5b:28:b7:0c:bb:14:03:c3:9f:b5:02:
         6c:ed:c7:a4:51:23:c6:1f:0b:df:a1:ee:58:35:17:fc:ad:48:
         b0:e7:04:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:05:28 2025 by rpki-client