Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/34352e3233322e3135312e302f32342d3234203d3e20323635363636.roa
File:                     34352e3233322e3135312e302f32342d3234203d3e20323635363636.roa (raw, json)
Hash identifier:          ehWu8vW4B4rrqyFJodwZ/vMWCWQtBmwTHqUCgIkNxlE=
Subject key identifier:   E2:5D:AE:3B:B0:0F:03:9A:04:CB:6C:C4:36:6C:0B:B0:4B:4B:F7:E5
Certificate issuer:       /CN=B5EB48ADB4190C70817FF889BBCFB6F550E6A106
Certificate serial:       091B2DBFA5F26DAFDBAF390D1EA05FEC55451B84
Authority key identifier: B5:EB:48:AD:B4:19:0C:70:81:7F:F8:89:BB:CF:B6:F5:50:E6:A1:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/34352e3233322e3135312e302f32342d3234203d3e20323635363636.roa
Signing time:             Thu 12 Jun 2025 20:35:00 +0000
ROA not before:           Thu 12 Jun 2025 20:30:00 +0000
ROA not after:            Thu 11 Jun 2026 20:35:00 +0000
asID:                     265666
IP address blocks:        45.232.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1b:2d:bf:a5:f2:6d:af:db:af:39:0d:1e:a0:5f:ec:55:45:1b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EB48ADB4190C70817FF889BBCFB6F550E6A106
        Validity
            Not Before: Jun 12 20:30:00 2025 GMT
            Not After : Jun 11 20:35:00 2026 GMT
        Subject: CN=E25DAE3BB00F039A04CB6CC4366C0BB04B4BF7E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:e4:d1:ea:46:d3:85:e0:cc:1c:55:04:6a:
                    7f:e1:fc:0f:16:73:b9:0b:61:a8:2b:6e:8a:a4:03:
                    f1:27:2a:af:50:17:9c:bf:9a:03:db:bc:71:85:cf:
                    e9:b0:c3:43:55:04:ae:be:c0:13:63:b1:0f:8e:ad:
                    96:d8:7d:cd:dd:a0:8e:5d:a5:97:a5:b2:0a:00:cf:
                    98:c4:b9:cb:2c:b7:57:04:b9:12:29:c7:3e:23:00:
                    c2:3a:55:9b:60:ae:66:00:42:a5:72:9f:94:4f:a4:
                    af:d6:c7:47:e5:1a:32:ed:9b:69:5b:90:6e:81:91:
                    ca:b7:42:2a:de:3f:27:d4:97:64:b0:23:56:1c:f1:
                    3e:be:15:3f:6b:7f:85:2e:1a:5e:5f:b8:a1:18:95:
                    78:a8:5e:40:fe:2a:9a:89:6b:fd:d1:bf:1c:29:d6:
                    97:bb:de:98:7e:73:dc:6e:4c:50:d3:55:a0:cc:ee:
                    26:dc:dd:38:22:69:56:11:a2:b2:a9:0e:e9:c0:4c:
                    d3:61:07:3e:f0:a0:ca:f5:88:c4:78:f3:ff:d1:7a:
                    93:bd:f4:f9:26:23:19:18:83:15:66:94:9a:40:de:
                    a9:e6:eb:14:3c:a7:cf:64:1c:4f:19:94:03:b2:e7:
                    b0:84:2c:f3:a5:94:fa:4b:07:e3:7d:51:44:95:f0:
                    67:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5D:AE:3B:B0:0F:03:9A:04:CB:6C:C4:36:6C:0B:B0:4B:4B:F7:E5
            X509v3 Authority Key Identifier:
                keyid:B5:EB:48:AD:B4:19:0C:70:81:7F:F8:89:BB:CF:B6:F5:50:E6:A1:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EB48ADB4190C70817FF889BBCFB6F550E6A106.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17038716DFCD58CB212E0E99334F7A6E114F1102925EE915910543224C0531F7/0/34352e3233322e3135312e302f32342d3234203d3e20323635363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:48:72:47:50:c4:98:91:7a:10:bb:25:29:f2:bf:91:c6:16:
         ef:05:2c:1b:fc:35:34:72:f8:5a:86:f7:74:b7:41:3e:85:ba:
         cb:de:5f:e3:d2:b6:fe:35:66:5b:15:d1:43:72:3b:0a:41:52:
         10:08:43:05:fc:71:19:ec:c0:5e:f7:85:59:7e:03:d7:d2:08:
         4a:32:e7:92:26:55:0d:ef:a0:a9:a7:50:fc:35:6a:4f:f7:25:
         97:e8:ea:17:b0:7d:43:2c:5c:e2:b1:e9:7c:a1:02:cb:cd:01:
         18:e6:7d:5b:92:f7:b5:0d:90:d1:d1:39:40:8c:43:0a:56:e0:
         19:b0:6c:25:d0:8a:26:59:98:85:41:6f:8c:4f:e0:56:c6:98:
         fa:2a:88:b3:d0:02:bc:96:60:5f:6b:f7:d2:3e:ab:e6:6a:17:
         e5:91:50:7d:ff:36:b7:b5:d2:fe:d0:31:32:ca:aa:1b:2a:c8:
         1c:3c:c2:27:d7:e8:0e:0f:c8:b4:c5:29:9c:57:06:d2:0c:63:
         a9:a5:34:b1:24:e1:c5:a6:e9:c6:5b:92:31:2b:39:0d:93:51:
         ed:b9:d7:ab:4f:0f:eb:75:89:a3:be:1f:33:7c:a7:a8:50:44:
         f7:0f:55:da:9b:91:04:32:5e:fd:70:81:35:40:e1:7c:70:e7:
         a4:a0:fe:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:36:14 2025 by rpki-client