Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33332e302f32342d3234203d3e20323636373931.roa
File:                     34352e3233362e33332e302f32342d3234203d3e20323636373931.roa (raw, json)
Hash identifier:          RhcWIbuBem1TbvKzM2x9FGy/2KlH/EvjlCJTUFCZaLE=
Subject key identifier:   AF:F5:D8:C0:57:55:6F:76:39:72:98:07:7F:F9:6F:1F:E2:C9:66:01
Certificate issuer:       /CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
Certificate serial:       02490BE98B40C27413FF56887ECF5805D1C4CECE
Authority key identifier: F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33332e302f32342d3234203d3e20323636373931.roa
Signing time:             Fri 28 Mar 2025 17:13:11 +0000
ROA not before:           Fri 28 Mar 2025 17:08:11 +0000
ROA not after:            Fri 27 Mar 2026 17:13:11 +0000
asID:                     266791
IP address blocks:        45.236.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:49:0b:e9:8b:40:c2:74:13:ff:56:88:7e:cf:58:05:d1:c4:ce:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
        Validity
            Not Before: Mar 28 17:08:11 2025 GMT
            Not After : Mar 27 17:13:11 2026 GMT
        Subject: CN=AFF5D8C057556F76397298077FF96F1FE2C96601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:57:9e:26:61:82:f7:65:e8:f2:a7:d8:f4:
                    cb:95:3c:97:ca:07:fa:02:b7:54:bc:91:37:fb:c5:
                    16:ce:e5:20:1b:26:4b:35:a6:e4:fa:82:2a:47:34:
                    a2:60:fb:cd:a9:6f:2f:54:a3:a4:c2:19:84:cc:46:
                    f5:60:0c:85:8c:60:2d:51:b1:79:5d:53:ae:b4:b5:
                    54:f6:c1:6e:51:9f:ed:c7:d2:be:ae:c5:36:3b:b4:
                    9d:1e:a1:94:f3:37:b6:98:30:0a:81:a6:25:05:b5:
                    11:8e:aa:40:b5:3b:ca:a2:dd:d4:ce:0a:07:86:2c:
                    69:8c:01:bf:5b:2f:4c:96:16:74:38:81:61:9b:3f:
                    a3:85:71:ab:d0:a4:27:d6:b5:a5:4a:3c:19:33:35:
                    98:08:1d:09:98:b9:05:a7:82:04:71:f5:7b:74:71:
                    be:97:e0:79:dd:f9:15:13:76:3b:3f:76:52:4c:24:
                    e7:6c:55:b4:70:7f:0c:71:50:b8:25:09:50:8e:19:
                    b7:db:44:0e:1d:d8:8e:4f:d3:60:56:f9:e4:4c:a7:
                    c7:db:3b:0c:59:1b:30:a3:bc:c3:87:be:4d:9f:4e:
                    09:1a:4f:6e:fd:15:e1:11:95:cc:26:fc:ad:11:cc:
                    6f:56:06:84:57:e5:d1:9b:77:e7:10:4a:11:70:ac:
                    8d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F5:D8:C0:57:55:6F:76:39:72:98:07:7F:F9:6F:1F:E2:C9:66:01
            X509v3 Authority Key Identifier:
                keyid:F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33332e302f32342d3234203d3e20323636373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:bb:9d:6b:87:6d:f6:ce:34:d1:de:83:e6:8d:a3:e9:b0:25:
         3c:fa:26:52:ba:05:e3:5c:2d:cc:96:ce:89:68:f9:ae:b4:b1:
         98:6c:5c:07:99:a3:ec:56:82:44:11:02:3e:01:c5:f6:37:af:
         dc:2a:de:36:85:a3:1a:ea:b3:f0:2d:9d:6c:1c:43:34:9f:17:
         fb:8a:ae:80:b4:cc:e3:cf:bc:30:f7:a4:e1:1a:88:aa:87:aa:
         ee:e9:54:94:e0:d8:59:54:5f:e5:bc:8f:5c:49:63:0b:aa:4b:
         54:bb:29:53:93:f5:ee:5e:23:01:df:88:c6:45:c4:d7:3f:b5:
         2a:00:c1:a5:a7:4f:3e:bd:40:f7:be:0b:22:53:1f:fc:56:a0:
         af:23:78:b3:08:ad:e5:86:ad:4e:3a:1a:9d:54:41:b4:1f:4e:
         68:13:1a:52:23:c3:a1:27:94:e3:cb:b7:33:f7:6f:64:a0:47:
         ff:60:52:8a:13:e9:8a:3e:8a:00:7a:e9:46:9c:c3:45:93:c7:
         bf:9d:89:4c:27:b4:d2:0e:1b:29:e8:b4:e6:83:c4:f0:86:5b:
         2b:d6:65:d9:3e:83:3d:79:8b:61:d3:30:4c:c2:0f:1d:b9:e8:
         f5:a0:a9:ca:82:64:95:e1:e2:cf:39:06:93:34:24:8a:74:be:
         03:65:32:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:57:17 2025 by rpki-client