Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/34352e3138312e3132302e302f32322d3234203d3e20323635373033.roa
File:                     34352e3138312e3132302e302f32322d3234203d3e20323635373033.roa (raw, json)
Hash identifier:          RU8Yc9+/AQ1lVpYRHZDej8XuvDtLWJt14ZKs26reUHI=
Subject key identifier:   B7:8E:D1:36:0C:F9:60:BD:CA:FD:5D:9F:AE:68:38:17:AB:EE:8B:CF
Certificate issuer:       /CN=7F71B1B6812BF46371D2DCB57923AF0A2DB3927D
Certificate serial:       42E0EA498439D807C57B821616A1AAF9D11B6732
Authority key identifier: 7F:71:B1:B6:81:2B:F4:63:71:D2:DC:B5:79:23:AF:0A:2D:B3:92:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/34352e3138312e3132302e302f32322d3234203d3e20323635373033.roa
Signing time:             Tue 04 Feb 2025 18:29:38 +0000
ROA not before:           Tue 04 Feb 2025 18:24:38 +0000
ROA not after:            Tue 03 Feb 2026 18:29:38 +0000
asID:                     265703
IP address blocks:        45.181.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e0:ea:49:84:39:d8:07:c5:7b:82:16:16:a1:aa:f9:d1:1b:67:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F71B1B6812BF46371D2DCB57923AF0A2DB3927D
        Validity
            Not Before: Feb  4 18:24:38 2025 GMT
            Not After : Feb  3 18:29:38 2026 GMT
        Subject: CN=B78ED1360CF960BDCAFD5D9FAE683817ABEE8BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:72:da:ce:64:4e:6e:9b:43:5c:96:85:59:34:
                    14:58:79:d3:27:fa:84:c4:0b:fe:1d:f7:b6:7a:ca:
                    c4:82:d9:84:b0:9b:ec:cc:68:8e:79:3d:64:ed:45:
                    3c:49:7f:ac:10:7c:ee:16:45:b5:ce:6b:eb:3f:a6:
                    ee:3c:fe:ef:5f:07:ee:3e:1f:b4:c9:9a:19:0a:1a:
                    8b:27:a7:87:b3:2c:30:0d:2f:53:ba:d9:2f:1b:e6:
                    a1:4a:c3:b8:86:0c:dc:d2:11:f8:d7:2d:c0:73:5e:
                    9a:9d:44:20:9e:71:1d:b7:13:d4:c9:9a:c7:a5:d1:
                    f6:0a:60:8c:65:6d:fb:5b:97:c1:f8:09:78:97:b4:
                    44:a5:be:55:af:90:88:d7:9f:cf:2c:e6:a9:37:70:
                    29:7b:76:6d:29:5c:9d:8c:a8:46:4e:40:e9:36:fb:
                    75:83:07:47:ec:04:01:15:b9:f5:ff:41:1c:38:b7:
                    3b:38:4c:37:75:f4:27:98:3a:2c:3d:8a:6e:85:e1:
                    d7:05:37:16:1d:e6:f0:27:05:8d:9b:fe:b1:3a:fc:
                    43:c5:e6:f4:1e:a6:0c:e3:30:9e:a6:e5:b9:06:ee:
                    6a:ae:c8:20:de:d9:b5:02:37:88:ce:f5:e4:15:80:
                    0e:1a:e9:25:46:3c:40:99:37:c5:24:10:23:5f:f3:
                    ea:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8E:D1:36:0C:F9:60:BD:CA:FD:5D:9F:AE:68:38:17:AB:EE:8B:CF
            X509v3 Authority Key Identifier:
                keyid:7F:71:B1:B6:81:2B:F4:63:71:D2:DC:B5:79:23:AF:0A:2D:B3:92:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71B1B6812BF46371D2DCB57923AF0A2DB3927D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FFB2FF637FF852ABF1183856A475F643BFF3802B71973D6A7D06D8555BD7C0AF/0/34352e3138312e3132302e302f32322d3234203d3e20323635373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:da:2d:70:ee:14:cd:06:2b:79:69:c8:ae:0a:43:d1:ee:f7:
         07:c2:4e:de:cf:a7:66:dd:af:f9:26:ac:b4:b2:5b:5f:ef:4e:
         49:04:e2:47:2d:19:aa:c3:55:3d:13:a1:6e:21:dd:46:c5:39:
         19:41:6c:cd:2a:90:39:31:bc:68:cb:29:6f:be:99:4e:16:83:
         2a:83:1b:d7:6b:d0:2d:30:ac:96:4f:f7:4c:49:bf:db:87:9b:
         0c:17:f0:92:f8:ac:35:15:8f:c2:ba:ac:98:d2:67:14:80:d9:
         3a:d2:40:ea:ea:ae:e0:07:0e:7a:2a:e6:f2:b8:b1:6d:ff:88:
         7f:e2:65:2b:ec:16:14:e1:52:d3:29:99:40:47:13:df:91:2f:
         f8:b7:f9:33:64:3d:9e:36:89:b0:a1:ab:3e:c9:49:57:96:e0:
         09:ab:51:99:0b:8c:11:c0:32:d8:01:98:e2:95:ac:7d:58:24:
         b4:31:bf:c2:fb:0d:b5:54:3f:f2:1e:8a:7c:ba:6b:e0:22:20:
         48:5e:29:17:1d:c8:60:44:b6:1b:24:0e:50:01:ea:90:3a:af:
         16:19:3c:1a:c0:71:b7:00:c4:38:90:bf:e8:6a:ab:58:e7:05:
         33:20:07:0e:64:a0:df:cf:ef:b1:b2:32:9c:4f:19:67:3b:a3:
         42:29:f8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:51:11 2025 by rpki-client