Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e32382e302f32342d3234203d3e20323637373532.roa
File:                     34352e3137302e32382e302f32342d3234203d3e20323637373532.roa (raw, json)
Hash identifier:          BpK9k1lJp05Edi2+919DuALrQQBiuIj4hF4uhlQ7SQY=
Subject key identifier:   C1:90:D5:CE:35:88:87:8D:E8:FE:B5:DB:4C:0B:03:F9:18:FC:45:E3
Certificate issuer:       /CN=FD07AFBCC3FFB625EEA674F938508F1BC3309E00
Certificate serial:       5B02D39F38B2E8ECB0C97E417656ADDDEE5F81DC
Authority key identifier: FD:07:AF:BC:C3:FF:B6:25:EE:A6:74:F9:38:50:8F:1B:C3:30:9E:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e32382e302f32342d3234203d3e20323637373532.roa
Signing time:             Thu 28 Nov 2024 22:15:00 +0000
ROA not before:           Thu 28 Nov 2024 22:10:00 +0000
ROA not after:            Thu 27 Nov 2025 22:15:00 +0000
asID:                     267752
IP address blocks:        45.170.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:02:d3:9f:38:b2:e8:ec:b0:c9:7e:41:76:56:ad:dd:ee:5f:81:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD07AFBCC3FFB625EEA674F938508F1BC3309E00
        Validity
            Not Before: Nov 28 22:10:00 2024 GMT
            Not After : Nov 27 22:15:00 2025 GMT
        Subject: CN=C190D5CE3588878DE8FEB5DB4C0B03F918FC45E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:eb:f8:cc:2e:17:0b:b5:62:40:0b:1b:a6:10:
                    0e:96:ec:70:a0:67:db:d8:92:1c:3d:b6:f0:7a:1a:
                    ba:7c:aa:e7:24:ee:dc:b5:f0:d3:cc:44:8f:df:19:
                    4f:e2:e1:78:d5:70:8a:5a:33:f3:2f:e5:af:3e:69:
                    e0:f7:12:a4:fc:59:e5:99:01:55:4d:93:1d:9a:bf:
                    76:19:cf:89:fe:3e:c9:eb:81:ee:fe:f4:ac:84:6e:
                    ea:ad:dc:03:43:0f:c2:20:9b:62:33:0d:da:5e:96:
                    b9:df:3a:50:6d:2f:87:a3:3f:71:cf:a4:51:5b:e6:
                    34:a9:a9:39:d0:47:c5:74:f4:d4:97:ed:e8:52:c3:
                    e4:af:f6:63:38:5e:ad:11:a9:d3:c5:65:5f:14:7b:
                    c9:dc:5c:6d:af:34:99:e3:fd:04:8a:45:54:62:00:
                    4d:c5:32:7b:94:04:2b:b0:f5:03:d7:5f:56:f6:e7:
                    23:cb:c9:c3:f3:32:20:e4:4b:6e:89:ea:8b:85:de:
                    b6:e7:e2:69:04:dd:43:c5:79:76:75:f3:c5:e1:9b:
                    c9:d0:6d:d6:5e:ef:fd:2f:98:06:f8:3b:a8:f3:9e:
                    52:b7:9e:42:07:8c:a7:59:e5:ed:c8:40:5b:8b:95:
                    9f:98:31:ee:65:9a:eb:7b:dc:95:f9:ca:a9:03:51:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:90:D5:CE:35:88:87:8D:E8:FE:B5:DB:4C:0B:03:F9:18:FC:45:E3
            X509v3 Authority Key Identifier:
                keyid:FD:07:AF:BC:C3:FF:B6:25:EE:A6:74:F9:38:50:8F:1B:C3:30:9E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD07AFBCC3FFB625EEA674F938508F1BC3309E00.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC04E185702D3C0A5B877618487C0BC2BC2FDE4131C57806A2BB3439C7DE55E/0/34352e3137302e32382e302f32342d3234203d3e20323637373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:64:32:91:62:50:49:4c:4b:1a:33:eb:cf:a9:ce:47:36:c5:
         30:bc:dc:11:ad:ca:66:24:9f:fb:0c:36:a6:46:ba:d1:81:6c:
         8b:41:bc:35:a6:fe:89:e0:6d:97:b1:4a:c1:07:ab:70:2e:f5:
         3f:7b:f4:b3:11:59:52:1b:02:c0:ed:46:88:88:70:af:3c:e2:
         86:71:c1:8b:2d:70:1e:6e:81:67:b2:0e:27:9f:5e:ae:56:33:
         a9:94:00:0e:e6:2e:c4:7a:59:1d:c0:96:60:b4:96:da:3f:8b:
         dd:0f:11:5e:1e:4f:b9:9c:9b:76:c6:17:1a:6d:5c:24:61:1f:
         3b:a6:8e:0a:f8:fe:bd:a5:7f:4f:e8:ad:df:48:80:c8:bd:28:
         e6:7d:26:a9:9b:a4:73:65:fc:8b:b8:dc:ca:d2:a9:c6:77:25:
         32:7c:f1:a4:56:00:96:af:98:1c:83:7d:44:8e:81:82:b0:74:
         7c:78:1a:3a:98:31:32:82:87:bb:2e:f4:43:36:cc:2b:fa:5e:
         95:f4:b4:67:40:b6:82:e2:f5:31:96:a0:c9:ac:87:c4:35:f6:
         78:8d:89:74:15:0b:f6:49:6e:ee:df:1a:4a:40:52:a7:70:83:
         29:46:17:7e:46:25:48:28:2d:79:b9:e4:45:ab:cc:97:30:23:
         9d:78:03:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:17 2025 by rpki-client