Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/34352e3138392e3131372e302f32342d3234203d3e20323733313333.roa
File:                     34352e3138392e3131372e302f32342d3234203d3e20323733313333.roa (raw, json)
Hash identifier:          ncJt435jJ3QTlaKViZNTsiYs3sWaF7vUQW6Hg/TAU7I=
Subject key identifier:   21:92:43:C2:FD:DF:71:4F:25:02:95:73:F1:F3:9F:29:A8:FA:65:95
Certificate issuer:       /CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
Certificate serial:       79416B59C4607E6A3A8D3659D2352302F7E7636B
Authority key identifier: 07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/34352e3138392e3131372e302f32342d3234203d3e20323733313333.roa
Signing time:             Sat 10 May 2025 16:18:20 +0000
ROA not before:           Sat 10 May 2025 16:13:20 +0000
ROA not after:            Sat 09 May 2026 16:18:20 +0000
asID:                     273133
IP address blocks:        45.189.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:41:6b:59:c4:60:7e:6a:3a:8d:36:59:d2:35:23:02:f7:e7:63:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC
        Validity
            Not Before: May 10 16:13:20 2025 GMT
            Not After : May  9 16:18:20 2026 GMT
        Subject: CN=219243C2FDDF714F25029573F1F39F29A8FA6595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4b:0e:4a:3a:00:a7:1b:ba:5c:27:99:e6:92:
                    12:a7:07:df:b5:71:0e:ba:2b:f2:0f:70:82:40:b4:
                    7b:61:51:2d:f4:76:e2:1b:b9:d5:e2:2a:3e:0d:c8:
                    6f:95:bd:3a:ca:3c:38:13:3f:13:0f:d9:04:a9:7b:
                    4f:30:c6:d4:bf:67:24:9d:47:bd:ac:14:08:33:4c:
                    46:6d:39:15:db:ff:3f:0c:48:b7:4f:fd:01:f6:b4:
                    55:23:ef:0a:dc:9b:bb:39:27:92:dc:b9:79:a6:08:
                    14:7b:2c:77:0c:28:6f:cc:f9:5b:60:c0:70:3b:37:
                    ee:17:e8:fc:58:ad:06:0c:cf:a5:38:9e:88:8b:8b:
                    39:85:e3:e9:94:40:42:6d:40:03:e2:2e:c3:f0:0f:
                    15:b9:3b:1f:a2:fe:e2:c6:bc:d7:de:86:8e:22:4d:
                    fb:48:9f:12:12:d7:61:3f:db:a8:94:d6:13:6c:99:
                    51:43:06:05:32:36:0c:b3:40:95:80:57:20:dd:27:
                    2e:f9:ea:d8:48:ef:5f:10:75:e7:a4:6e:6b:cf:b1:
                    85:f7:23:4d:c7:cd:67:ff:70:19:ca:c8:b3:e8:fc:
                    09:4c:20:cf:71:e0:f5:0a:22:27:3d:14:ea:48:57:
                    8e:53:a1:c9:d0:bd:dc:76:c3:2f:3e:7f:30:8c:b4:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:92:43:C2:FD:DF:71:4F:25:02:95:73:F1:F3:9F:29:A8:FA:65:95
            X509v3 Authority Key Identifier:
                keyid:07:CC:AF:A3:BE:AB:3D:5E:20:F9:9F:25:E8:3A:28:8F:4B:4D:48:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07CCAFA3BEAB3D5E20F99F25E83A288F4B4D48FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ECEE1E1152FA067CAE88B3C552D6D30F6ACCD0EFC763610E6AA79EFCF44B6F7/0/34352e3138392e3131372e302f32342d3234203d3e20323733313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:67:22:75:f1:d5:8c:2a:19:ae:85:5c:c9:87:5b:67:79:47:
         71:7e:9f:05:6d:42:73:13:44:fc:9d:1d:61:4e:6b:f5:02:41:
         f4:e6:23:7f:34:54:9d:d0:ac:3d:05:cb:9f:a5:54:d1:10:4f:
         c3:8b:1b:0e:97:06:72:7e:eb:e5:27:7b:99:11:03:1d:06:70:
         27:ec:f6:ed:72:ab:89:6f:d1:20:65:3e:99:f4:b7:be:0e:42:
         c2:11:1c:50:a3:c3:76:c4:dc:56:7a:3f:2e:0e:6a:b6:8e:70:
         b0:fe:91:71:30:32:84:e4:bb:1a:53:83:9f:72:48:50:c8:aa:
         fc:44:4a:ae:45:04:e5:a9:39:4f:68:6b:5e:fe:fb:2c:f0:77:
         cd:b9:32:55:66:f9:65:52:fb:3b:7c:c5:0b:9f:5b:49:43:dd:
         1f:d7:3a:0c:c6:2e:c0:c2:ad:89:d5:f0:75:25:fe:52:5d:bd:
         6c:46:9f:4f:5d:0e:68:69:26:e4:80:64:24:59:22:49:a3:1f:
         af:7f:d9:d7:56:73:02:24:19:a8:d4:92:c9:e9:40:b5:c1:c5:
         50:be:cb:0c:fe:16:34:ae:4d:96:25:73:52:e6:7f:cd:e7:12:
         5f:10:37:ec:38:d9:ed:69:a0:37:59:9c:71:ac:c9:b4:30:62:
         69:0c:de:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:05:32 2025 by rpki-client